Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          0IlvWhZErSbQ4e9HV66vLwA6kLBa3N8TYUGQILIVYFY=
Subject key identifier:   D9:B2:2D:08:96:93:F8:1E:D6:C4:84:2C:30:BB:EC:53:56:67:7B:8C
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       019EC3006EEA17BC804C9109299F328D1F41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          0640
Signing time:             Sat 13 Jun 2026 22:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:45 +0000
Files and hashes:         1: 3lauIf0YpbUjYSTnhhTVxklgLKk.roa (hash: yggx4J03w1luy3uhGhFmtwjE58TFme6YVBEKV6qwxTo=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: jHnaaNBjV08Pi5nE/Hn/uAMEU35iJaLN4YBtCGTCrr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:6e:ea:17:bc:80:4c:91:09:29:9f:32:8d:1f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Jun 13 22:00:45 2026 GMT
            Not After : Jun 14 22:00:45 2026 GMT
        Subject: CN=d9b22d089693f81ed6c4842c30bbec5356677b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:98:3b:3e:51:59:c9:22:09:00:8c:80:87:
                    ad:f7:13:72:79:0e:56:1b:18:b7:e5:17:e3:9e:01:
                    13:f1:50:bc:9a:42:fc:7f:e4:6c:4e:4d:91:2b:ce:
                    92:74:53:32:2a:ea:87:ee:00:f3:da:14:52:c9:22:
                    9e:01:ed:f8:e7:61:6b:59:b6:51:96:8b:60:6e:c4:
                    ad:55:b2:62:3a:21:4c:c4:f3:0f:5d:86:cc:86:27:
                    be:53:bf:81:99:dc:36:38:30:36:d7:b0:31:bc:5c:
                    f0:c2:cf:75:c7:b5:5c:82:64:72:9d:a9:38:fd:b2:
                    44:6a:d6:30:b2:e5:b8:20:00:cc:5b:66:28:d9:6d:
                    8c:24:91:ae:ef:47:a2:55:22:52:0a:44:09:05:bd:
                    9b:15:88:06:4c:33:f1:39:9d:d4:72:c1:ea:46:33:
                    af:b0:5e:a4:c7:5d:43:00:f1:4b:91:e3:95:ad:ec:
                    36:96:c6:f4:eb:3f:9b:a6:a5:3a:6d:e5:94:ec:d9:
                    e3:91:9f:6b:b2:d9:bd:f7:36:91:f9:db:69:cb:f1:
                    24:78:1f:b8:30:06:f5:92:06:bc:b0:20:c8:26:68:
                    46:35:70:4b:08:32:fd:8b:a1:55:9b:c7:cf:5c:f8:
                    ba:4e:96:a5:d3:57:fc:86:f4:e4:03:f5:f7:fc:be:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B2:2D:08:96:93:F8:1E:D6:C4:84:2C:30:BB:EC:53:56:67:7B:8C
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d2:85:77:c3:7e:77:45:b7:7a:ca:08:f1:2f:ec:ee:71:57:
         85:10:38:4a:86:b1:d1:ce:5c:a2:d9:9b:5a:e7:4a:bd:23:23:
         91:2d:b2:0c:c3:4c:72:99:8e:c3:a8:a2:f2:d2:2e:1e:87:c8:
         f4:f2:1c:de:9b:ab:b0:3b:b0:b8:15:cf:03:d2:8b:12:eb:db:
         87:2b:ee:34:df:e0:5f:83:ce:95:3d:82:08:d1:60:2c:66:47:
         fb:91:17:5d:54:25:89:dc:c1:34:93:c3:18:83:68:ac:58:c5:
         cd:bb:27:ae:d5:05:37:d7:bf:c2:12:ba:cf:55:f4:52:6a:25:
         8f:af:c3:b8:f8:8a:38:c0:46:ad:51:35:66:59:88:d7:f3:93:
         e2:9e:81:f2:51:0b:a7:ea:6d:c7:d3:32:de:7c:7f:b0:d9:2c:
         f4:d9:a3:8f:c7:61:bc:91:e8:58:83:5c:0b:7e:f9:cf:1e:46:
         a5:61:f5:8b:9f:b9:fd:df:dc:f3:b7:5e:5d:94:bc:ac:35:25:
         37:92:bf:b9:76:ee:3b:68:0b:48:91:45:8b:97:7b:1c:41:03:
         55:8b:8b:62:dc:ab:ba:ce:8f:8a:1a:bb:ba:bc:3b:df:b3:27:
         52:45:31:7d:16:99:85:c0:6b:8f:0b:29:09:92:1b:b6:8b:1e:
         57:e0:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:54:15 2026 by rpki-client