Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          ppVMlVBRDAShP+YRi9an3nlIuZRyMoZbLvreEeXZki4=
Subject key identifier:   E7:AC:8E:D7:9C:79:05:18:7C:EA:F4:AD:B9:8E:81:83:A3:EF:E2:C0
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       019ED49914D4D790C38029EC2496D2F78922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          104A
Signing time:             Wed 17 Jun 2026 08:01:02 +0000
Manifest this update:     Wed 17 Jun 2026 08:01:02 +0000
Manifest next update:     Thu 18 Jun 2026 08:01:02 +0000
Files and hashes:         1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: Sr7fpKo7Ryv9CwIP2C91rBvErqEGR91o9RwLB3MxPmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:99:14:d4:d7:90:c3:80:29:ec:24:96:d2:f7:89:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Jun 17 08:01:02 2026 GMT
            Not After : Jun 18 08:01:02 2026 GMT
        Subject: CN=e7ac8ed79c7905187ceaf4adb98e8183a3efe2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:a8:2f:7c:eb:90:b9:ef:cd:c0:2a:09:65:
                    c5:79:fc:32:68:24:cd:43:b7:34:e0:35:53:85:d9:
                    c7:a8:c3:9f:ea:f5:b2:cd:e7:e2:70:5d:a1:98:34:
                    e1:bf:a4:24:80:3c:fc:a1:99:b5:fa:7c:b1:81:a8:
                    a5:a4:6d:d9:44:fe:5f:46:aa:ef:7c:31:3f:d0:2c:
                    a5:ab:96:c9:fc:8b:e0:67:a1:a0:68:26:07:8a:92:
                    c1:a6:de:44:1e:be:76:91:40:f4:24:d0:48:9e:9c:
                    d5:8c:94:9d:ee:59:e2:64:85:ea:44:b1:2a:91:3f:
                    3a:d2:48:43:89:bc:01:10:c4:95:05:1f:fb:14:1b:
                    ae:7e:43:cc:3d:f3:78:26:84:50:5e:2e:86:80:b7:
                    3e:d5:01:a5:78:8d:1f:4f:47:cc:27:8a:fe:96:11:
                    53:b4:4f:d0:a2:b3:b4:b6:00:e7:25:bf:f5:23:40:
                    16:7f:68:1b:d2:96:3e:04:c1:d4:f8:71:58:e5:12:
                    33:f7:1c:c2:0a:2e:1d:40:2f:4e:bb:77:b0:1d:a6:
                    d4:31:67:ac:c9:27:dc:69:13:ae:4d:09:f9:e7:dd:
                    3b:b3:fa:97:9a:45:2a:21:73:ae:73:89:0d:a7:3a:
                    30:ae:58:79:4c:0a:1f:35:48:fa:8b:79:2e:95:a9:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AC:8E:D7:9C:79:05:18:7C:EA:F4:AD:B9:8E:81:83:A3:EF:E2:C0
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6e:b6:50:90:d5:ba:8d:4d:69:bf:ac:80:d9:35:47:31:12:
         9c:73:20:52:7e:65:3e:84:2d:d1:75:d0:f4:55:94:56:d1:e8:
         49:fe:82:f3:17:6b:32:61:5a:f0:ea:3f:a4:91:ce:d1:7b:cd:
         ea:77:d9:bc:fb:ff:db:80:c5:93:58:24:1c:cd:ce:3e:00:97:
         62:af:cc:ef:25:f4:5b:0e:8d:8d:cf:54:0d:bb:0b:9d:f2:e6:
         6a:ce:93:0b:d1:e5:62:13:13:f2:88:05:e2:9c:f9:3e:32:8b:
         5c:55:11:4e:df:39:38:fb:8a:06:84:a2:f5:38:8b:b9:48:6b:
         f8:87:8b:fa:58:6f:22:cd:71:f2:64:51:5c:4e:3e:77:c0:16:
         0e:8a:4f:11:5d:09:51:ed:b3:de:fb:5e:71:6a:fe:b9:58:83:
         35:ce:47:6c:3a:db:f5:38:48:ae:61:0f:1a:81:72:ef:4f:97:
         45:5b:88:6a:c8:7d:db:1c:fd:24:8d:71:f9:5d:71:4c:4b:51:
         04:9d:f8:d4:2a:6f:8c:4b:78:a0:80:54:61:9d:11:87:34:26:
         ef:71:da:4a:07:fd:21:8c:1f:12:ae:e3:97:d3:c9:27:aa:80:
         d0:15:26:9a:95:cc:b6:2c:3e:75:93:56:50:01:09:a8:3e:53:
         1c:6f:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:24:42 2026 by rpki-client