Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
File:                     F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json)
Hash identifier:          cGFdPWR20sr76u2qTNv/qgvaynY+pXsrXWtU5TXu3bo=
Subject key identifier:   76:CB:D9:D5:2F:FA:AC:C2:DF:60:34:25:15:DE:1A:B0:01:19:C8:3F
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Certificate issuer:       /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial:       019ED318D77807A86161C99160E6AFE80A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
Manifest number:          123B
Signing time:             Wed 17 Jun 2026 01:01:20 +0000
Manifest this update:     Wed 17 Jun 2026 01:01:20 +0000
Manifest next update:     Thu 18 Jun 2026 01:01:20 +0000
Files and hashes:         1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: iw1Kg/QfyTwBt0j40G+oK58fZMjRBpi9XIV+bJa2Xsk=)
                          2: VYt88J2micc3RjkOiAbgbsahES8.roa (hash: Zo8tOxRpop/qL57ADwlkJqC3DjP20BCdR/VwhP6MEb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:18:d7:78:07:a8:61:61:c9:91:60:e6:af:e8:0a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
        Validity
            Not Before: Jun 17 01:01:20 2026 GMT
            Not After : Jun 18 01:01:20 2026 GMT
        Subject: CN=76cbd9d52ffaacc2df60342515de1ab00119c83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:50:9a:20:18:3f:5c:6d:6c:1f:7b:48:bc:
                    75:ca:25:1a:b0:39:49:4d:18:fc:7b:b2:d7:19:b3:
                    85:a6:c1:c8:b9:75:af:d9:c1:b4:04:7f:32:e1:e4:
                    75:59:68:ff:a8:ad:7a:de:d2:90:59:77:75:43:1d:
                    20:d7:e0:d9:1f:03:8f:19:54:e3:26:19:ee:20:c8:
                    f6:30:23:f1:4f:b6:98:ea:05:f4:c1:f7:6a:9a:8a:
                    a3:bb:ef:d3:1d:a2:af:ec:44:7d:6a:ea:0a:4a:95:
                    d3:4d:cb:3f:cc:9f:08:8a:e6:4a:35:c0:3f:9b:25:
                    36:ea:c3:d2:88:99:c6:4d:04:0b:e8:6d:ea:c4:28:
                    22:ce:33:0d:8c:fa:58:30:6c:17:86:ba:4e:33:81:
                    44:1a:77:eb:e7:5c:93:07:06:e2:f1:75:02:9a:37:
                    01:09:0b:56:93:0a:7f:0b:c7:eb:53:8f:79:bf:f7:
                    4e:35:4f:cf:3e:95:35:cc:72:2e:06:b0:48:83:b1:
                    b5:96:32:42:fd:6c:15:cd:ef:d4:07:51:1e:0d:eb:
                    31:df:d0:4e:58:40:a6:1e:0d:f2:8a:61:63:4f:57:
                    b9:12:27:04:13:94:52:2c:f5:3e:97:19:4a:92:fb:
                    8d:64:ad:bf:8e:1d:29:73:2e:a8:ad:68:03:95:b0:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CB:D9:D5:2F:FA:AC:C2:DF:60:34:25:15:DE:1A:B0:01:19:C8:3F
            X509v3 Authority Key Identifier:
                keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:48:20:f2:57:df:d2:a0:c1:67:7b:2f:21:6c:9c:77:92:
         0f:ed:ed:ba:53:32:d2:0e:7b:3b:b4:41:f1:4b:14:0f:43:e2:
         9e:8b:cc:4d:12:89:e6:4c:a7:71:07:43:97:c5:d2:fb:97:10:
         4e:8d:1c:2e:da:48:ca:00:e2:79:2a:fb:0b:23:d0:56:9b:f2:
         36:60:bc:0a:5d:c8:1a:c9:b3:67:3e:a9:59:44:2b:d2:21:78:
         97:df:40:f9:b6:ee:ba:e6:d8:f7:8e:0b:12:54:cf:c5:3b:38:
         d6:57:89:66:af:63:a1:d7:60:ff:5b:0e:d6:0e:b4:8b:9b:47:
         6a:aa:9b:24:37:da:61:ca:4d:df:bc:f6:47:38:23:0b:d5:14:
         83:fc:07:c8:8b:f2:81:da:e8:4e:7b:a8:12:72:77:0d:45:2c:
         83:3c:d7:5a:da:c3:b8:a9:95:fd:3e:e2:0f:c0:aa:27:a0:2b:
         b6:60:71:90:c3:60:c9:bf:14:9f:31:2d:3b:95:31:be:71:34:
         21:fe:74:77:4d:eb:0d:d8:97:e9:b9:97:81:43:80:c2:9d:80:
         c9:5a:aa:50:70:a6:1b:96:cc:06:c4:37:ef:f7:52:13:b2:c5:
         30:5a:1e:a7:56:14:b4:76:e2:59:37:dc:09:71:0b:a8:89:21:
         be:db:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:14:01 2026 by rpki-client