Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File:                     IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier:          u1/6DpMUddTN8sl9rfZBU8e/d0N6hgiTs+PMhAOJuMk=
Subject key identifier:   02:08:8D:A7:81:7F:0D:11:41:7B:9A:F3:C1:6E:7B:4C:45:F1:D1:FB
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer:       /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial:       019EBF5A745FF77B06FB11F51EF43B92AA51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number:          0932
Signing time:             Sat 13 Jun 2026 05:00:36 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:36 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:36 +0000
Files and hashes:         1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: u2TpzyN0TR7inTDeS/3nUzN3h+Joyzg970bPBUJB7R0=)
                          2: nPbZiqgzqP1bY-I6_wdMavBBkBA.roa (hash: Sq945+dQn0o4BzLs0yMjO8v84hsdEzHaPps8ZLOVuoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:74:5f:f7:7b:06:fb:11:f5:1e:f4:3b:92:aa:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
        Validity
            Not Before: Jun 13 05:00:36 2026 GMT
            Not After : Jun 14 05:00:36 2026 GMT
        Subject: CN=02088da7817f0d11417b9af3c16e7b4c45f1d1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:75:0e:b4:af:94:6b:11:63:bf:fb:02:48:15:
                    3e:26:25:26:c2:9d:bb:16:d9:79:2a:27:a3:6e:ce:
                    10:eb:19:0f:d7:ea:b0:ff:74:7c:c0:7a:b9:b6:dd:
                    f7:f8:cd:b7:3b:9f:f0:e1:99:1d:28:5e:0c:3c:07:
                    c5:9d:23:7e:9b:a5:d8:37:d6:73:20:7d:07:3b:99:
                    b9:0d:c4:69:39:a8:3a:00:fa:73:3d:b6:2c:1f:d2:
                    c7:ce:d8:6f:15:d7:10:a8:8d:08:6b:cc:83:96:c1:
                    d8:d5:b8:9b:41:32:45:83:2d:81:28:71:b6:eb:45:
                    d9:4d:b3:75:ef:82:ef:11:78:ff:8f:4e:3d:0a:6b:
                    75:b2:4d:a6:c9:c3:b9:9c:47:37:2c:a9:1a:30:95:
                    3a:1c:f7:11:c8:83:91:5a:41:80:27:50:a6:68:08:
                    36:2e:8a:ac:14:06:8b:25:63:96:30:b6:bf:79:ee:
                    4e:8e:d3:3d:65:10:91:bb:d2:c4:f0:61:9a:d1:4b:
                    fb:7e:d8:31:a4:53:6f:22:4c:41:42:2f:b5:af:f8:
                    f0:f1:80:59:6d:96:f6:11:dd:ef:7e:96:3c:7a:57:
                    64:8f:80:11:2d:02:77:7c:b7:4c:a7:a2:c9:60:55:
                    13:31:e1:01:4b:80:02:50:bc:d0:4f:4a:0d:02:28:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:08:8D:A7:81:7F:0D:11:41:7B:9A:F3:C1:6E:7B:4C:45:F1:D1:FB
            X509v3 Authority Key Identifier:
                keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:69:fe:e3:de:cc:52:ab:ea:a6:13:7a:5d:1e:eb:82:12:46:
         7c:b7:f3:5c:84:bd:75:9a:4a:ff:19:41:da:a4:ff:ff:95:96:
         f0:a0:55:d8:0e:40:33:c8:41:b1:70:36:03:22:87:3e:ca:0d:
         6d:4d:b6:eb:25:d4:be:bb:02:b4:80:94:a9:e7:44:33:c2:e5:
         84:9c:ba:11:d4:b0:ab:97:55:54:6c:5c:7e:8e:7a:d0:5b:3b:
         b7:22:68:29:06:28:46:b3:98:24:31:0f:c5:64:f2:7e:16:00:
         42:ad:22:f1:c9:ea:45:f3:8f:71:61:99:33:ca:0d:43:04:6d:
         50:e0:94:00:7a:5c:e4:f8:8b:4f:d8:ae:69:ca:54:05:21:b9:
         fc:90:7a:8e:6b:bb:ec:cf:5b:79:29:a3:f8:97:ef:71:75:05:
         9a:17:00:89:af:83:a6:25:b6:bc:79:38:5e:c5:31:18:69:71:
         ac:1f:08:b4:73:a8:38:b2:34:6a:c0:8c:47:d7:3c:8e:f3:a5:
         8a:40:6e:fe:8b:fe:7a:8e:63:27:a2:70:2e:d2:92:d4:0e:3d:
         a6:28:9c:30:df:14:0a:af:21:04:cf:6f:41:f3:46:ee:77:b5:
         82:49:43:36:13:6d:16:1e:54:f8:fc:45:e0:85:54:63:80:e9:
         41:7f:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:17:03 2026 by rpki-client