Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File:                     1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier:          m0n8oswVPCZvTXT6A3hFL06Nzeq4dkajfW7qgZ8JTMQ=
Subject key identifier:   98:D5:59:AB:BD:50:29:C5:DF:A8:BE:0C:FE:00:C4:50:4E:52:49:01
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       019EBFFEE87E59801EEF979321C800A45FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number:          1740
Signing time:             Sat 13 Jun 2026 08:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:14 +0000
Files and hashes:         1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: hnbMGQHSWGbde43CVwyQjHZp6OlgK4yWiYyfuCtmqMc=)
                          2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:fe:e8:7e:59:80:1e:ef:97:93:21:c8:00:a4:5f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: Jun 13 08:00:14 2026 GMT
            Not After : Jun 14 08:00:14 2026 GMT
        Subject: CN=98d559abbd5029c5dfa8be0cfe00c4504e524901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:7d:3d:c0:99:a6:57:c6:db:03:4b:82:04:
                    04:e1:02:9b:b1:aa:90:f2:4b:5c:38:b7:18:38:4a:
                    84:de:66:38:32:4a:08:f0:f9:df:50:8b:54:8a:cd:
                    de:89:82:6e:b0:15:ab:c2:be:a0:40:23:fa:4d:5e:
                    2f:24:38:13:bb:e4:39:8f:8f:9a:89:da:de:63:5a:
                    93:73:5e:15:b7:77:ce:a1:63:2d:ab:4e:64:ea:17:
                    8c:42:51:2a:9b:cc:8a:6e:fb:82:e4:3b:67:71:ec:
                    8f:d5:01:92:92:0d:7e:00:c3:54:78:e5:12:b4:9a:
                    ac:c5:b8:66:ac:83:a9:1e:e7:a9:98:06:c1:a4:fa:
                    bf:8a:92:db:ab:70:63:9f:73:20:d6:4b:7d:ea:36:
                    79:c7:f0:41:43:4e:62:65:a7:10:eb:91:72:77:b5:
                    a2:ce:a4:91:ed:4d:f7:d2:da:8c:de:fb:0b:cd:2b:
                    14:f6:60:ec:c6:94:b9:23:e1:ce:2b:ad:23:d6:d8:
                    16:79:4e:b9:f4:32:64:6d:c9:79:c9:e3:ba:a1:ce:
                    12:06:01:72:bb:f1:25:98:ed:3b:7d:53:72:1e:f3:
                    da:5d:a3:e9:5e:5e:82:5b:0c:c2:96:74:79:f1:09:
                    a1:2e:41:00:36:51:70:da:81:b0:36:78:1b:e0:60:
                    a0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:59:AB:BD:50:29:C5:DF:A8:BE:0C:FE:00:C4:50:4E:52:49:01
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:cf:e1:46:42:d2:c7:f5:8d:b9:ac:d6:02:f6:c4:51:2f:
         98:c6:a0:8d:c2:1e:2a:e2:fc:be:fa:73:94:f4:9a:7e:bc:82:
         e0:40:44:93:d3:c5:b6:86:68:93:75:9e:43:2d:97:78:b6:ae:
         35:5a:b6:52:0c:c0:fd:61:4e:9c:2b:79:59:d1:dc:e1:40:8a:
         51:de:4a:bf:a4:e9:05:23:cd:0b:21:9a:b0:a6:60:20:01:d2:
         31:c2:e4:84:e0:78:14:16:29:09:58:25:b0:ac:79:b9:fc:38:
         52:c9:34:67:8a:06:8c:6e:b0:ec:a0:51:a5:21:96:d4:e1:d3:
         5b:40:1d:95:e7:6e:71:c0:df:43:e8:e6:22:9d:d6:b3:6c:2c:
         b8:3a:00:45:1f:f9:90:db:66:8d:1a:f2:52:57:1f:97:9b:54:
         1c:b1:b0:62:07:f2:86:d5:7a:66:65:e9:6a:ba:9b:9a:c9:b4:
         e8:b7:fc:82:c6:14:b4:f2:71:f3:f9:29:45:88:21:cc:30:bf:
         95:e2:df:55:0f:ad:de:16:dc:e6:98:a0:9e:a8:32:2c:c0:d3:
         f6:4c:97:39:f0:f6:6c:66:4d:6c:d3:23:8f:5e:b9:19:f2:e2:
         77:7f:f5:4d:b2:f4:fa:9b:e8:33:50:f1:05:ae:1e:2d:cb:7d:
         21:47:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:46:11 2026 by rpki-client