Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
File:                     D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json)
Hash identifier:          MVFLmxbtA9Z9HqGZdV/upxhJfKixYaX1SP1e29K+hi0=
Subject key identifier:   25:9A:63:EC:E7:50:D7:C3:0F:7B:70:DE:A8:C0:31:96:86:B7:40:E6
Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA
Certificate issuer:       /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
Certificate serial:       019EC17FB919770CDFBE4D0AAA4F325427B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
Manifest number:          13F2
Signing time:             Sat 13 Jun 2026 15:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:33 +0000
Files and hashes:         1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: r6fRdxUZOE3b5C5iiJf/KuZG7Wloj0nSCGV77T1FbDQ=)
                          2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:b9:19:77:0c:df:be:4d:0a:aa:4f:32:54:27:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa
        Validity
            Not Before: Jun 13 15:00:33 2026 GMT
            Not After : Jun 14 15:00:33 2026 GMT
        Subject: CN=259a63ece750d7c30f7b70dea8c0319686b740e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:3d:5a:3d:72:07:53:db:cc:70:47:c3:41:
                    40:4d:41:dc:37:4b:1a:9b:94:13:39:d4:b5:8a:27:
                    7a:ec:76:be:02:43:51:64:27:84:74:d3:92:a6:c0:
                    c8:2f:34:d9:80:4e:a1:13:6e:9d:5d:c2:b7:f9:fe:
                    99:2e:f6:e5:61:fb:ed:30:8e:ae:06:93:f4:2c:4f:
                    3b:b8:6e:7f:c8:0a:31:80:c5:a2:9f:ee:19:b8:70:
                    ec:d2:d1:6e:e7:14:08:e9:eb:ca:9e:98:b1:c9:97:
                    bc:a5:e9:c2:95:86:92:b8:69:2b:af:bf:b0:91:1b:
                    ba:38:d1:52:13:3c:90:7c:8f:f4:5e:63:7e:80:db:
                    f8:35:ef:9a:81:2c:0c:8d:ab:bd:ec:6c:4b:c3:f2:
                    d1:8e:1a:f9:9d:c7:08:19:8e:db:76:a1:b0:d6:30:
                    47:3a:a4:0f:1e:4d:35:37:c1:0b:5d:26:94:e4:89:
                    d6:79:b8:2f:02:c3:9e:d7:75:5f:cd:86:3b:b8:e8:
                    85:2e:d2:da:e6:64:94:82:1d:5f:d2:bf:4b:89:75:
                    4e:65:db:1b:4a:80:61:79:41:b9:27:0e:c1:99:26:
                    c7:3e:f8:ee:b1:57:0a:4b:80:9e:b7:c5:77:44:2f:
                    09:d4:1f:72:db:27:ee:b1:a2:5d:c9:76:d8:f8:4a:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9A:63:EC:E7:50:D7:C3:0F:7B:70:DE:A8:C0:31:96:86:B7:40:E6
            X509v3 Authority Key Identifier:
                keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:a7:16:02:fd:90:de:79:6a:58:68:b3:8f:ff:cd:31:3c:
         b4:96:0f:09:d3:3b:26:52:0a:64:b8:47:d3:c6:5c:18:77:73:
         7b:0f:ea:92:4c:ef:2b:ad:86:c1:03:9d:b7:06:cd:3e:86:4f:
         37:11:d9:f3:e3:fb:b8:63:19:7e:dc:48:d6:e9:51:4d:a2:26:
         76:47:ed:61:41:29:59:4b:39:0d:b7:0e:f6:fe:ca:b0:6d:e7:
         d6:7c:b8:bf:a5:f8:37:e4:1c:04:4c:ff:2a:c9:50:6d:95:28:
         d1:2b:d8:ba:36:c3:5c:44:09:2a:23:82:74:e2:fe:07:ca:f1:
         05:e3:23:23:e9:62:41:b9:17:8a:77:92:24:d4:a9:12:d6:44:
         3b:2c:47:ac:3a:ef:3d:58:1d:2e:d5:19:10:db:e6:1d:bf:d5:
         b1:23:cc:c6:ca:06:32:1c:fa:d8:7a:d0:f0:a6:c0:40:08:8d:
         c8:69:57:d9:c2:62:ea:c9:a0:13:47:fd:09:b0:84:70:4b:f9:
         44:a2:30:15:62:f0:1a:8e:ee:a7:ae:da:03:2c:d8:59:38:f1:
         67:96:0e:b8:e5:28:1f:cc:f8:7b:93:c3:b3:f7:2b:76:03:51:
         eb:50:ac:b0:c0:4e:3e:60:c0:8e:ba:13:1f:17:c6:ce:c3:53:
         37:d5:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:28:50 2026 by rpki-client