Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File:                     d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier:          w8bIsgEmqs+I0s7xVyoZjlAcj+fcvGDJQnI3XnpvXgA=
Subject key identifier:   52:9D:A5:17:D6:8E:6C:2D:36:11:BC:0E:C1:CD:A5:16:3D:F1:73:C9
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer:       /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial:       019EC292BBDE98D19019F75F380808035FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number:          0DEC
Signing time:             Sat 13 Jun 2026 20:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:56 +0000
Files and hashes:         1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: WGS1WSUVovdZPiq5Nts1n7OUzpGZ4ZX3hLW8ZsqCJc4=)
                          2: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (hash: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:bb:de:98:d1:90:19:f7:5f:38:08:08:03:5f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
        Validity
            Not Before: Jun 13 20:00:56 2026 GMT
            Not After : Jun 14 20:00:56 2026 GMT
        Subject: CN=529da517d68e6c2d3611bc0ec1cda5163df173c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:a3:61:79:ca:bb:44:17:b5:18:60:f9:e5:
                    21:46:b7:0a:15:85:de:fd:a6:44:71:63:de:b2:10:
                    db:54:e4:93:56:dd:38:6f:de:5f:69:61:69:aa:8a:
                    dc:63:bc:59:65:3a:5d:02:56:dc:fd:69:11:ce:6e:
                    58:4b:02:03:34:de:55:13:df:4a:d8:41:d5:5e:97:
                    37:31:e7:0f:03:20:a6:b7:d5:9f:b3:24:1e:d5:3f:
                    83:5a:53:d2:02:43:75:1f:0b:f0:83:2a:23:9d:53:
                    c9:b4:8c:98:42:86:8a:c5:3c:ce:58:c1:40:33:95:
                    7d:2d:7c:0d:4e:31:90:38:e8:fe:79:8a:bf:0e:7d:
                    ec:a9:9e:66:75:5e:f7:4f:c0:44:72:59:c8:32:27:
                    54:51:86:72:0d:d0:67:d0:4a:78:26:b8:65:8a:2a:
                    9c:ad:91:9e:fe:10:b7:87:5f:5c:44:56:88:60:8d:
                    f0:77:1e:e9:a1:14:b5:c0:f8:9e:3d:79:d0:60:a1:
                    67:18:37:26:df:48:49:58:61:57:2e:6e:51:a0:e1:
                    77:f8:d0:09:73:9a:03:b3:26:bd:c8:35:9c:b8:53:
                    54:ec:e4:24:99:42:00:49:7b:14:ef:b1:a2:61:31:
                    56:c5:a7:b0:3e:68:bd:f5:8e:a0:6e:9d:55:47:5c:
                    44:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:A5:17:D6:8E:6C:2D:36:11:BC:0E:C1:CD:A5:16:3D:F1:73:C9
            X509v3 Authority Key Identifier:
                keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d8:07:de:d0:d0:39:17:ce:71:91:4b:93:86:a8:77:04:fa:
         7b:88:11:4b:e5:61:0f:af:c8:f7:c5:8b:8e:4c:88:7b:36:f9:
         ea:cc:db:3b:ce:0c:21:af:b6:ba:cb:0b:94:f7:e3:b8:41:56:
         89:70:84:10:94:a5:8f:de:36:28:3a:72:88:cc:2b:54:0d:d3:
         1d:f0:3d:dd:39:95:34:be:7e:be:99:69:e5:e3:2e:f6:9b:56:
         61:a7:a9:fa:a0:86:b8:40:a3:65:58:32:a0:67:b3:fa:55:70:
         75:37:25:60:cb:8e:ae:df:ff:4c:ae:65:5c:49:80:34:f6:65:
         9b:36:92:9f:27:b9:0a:b6:0c:c4:a4:6e:19:3e:87:ad:6a:3a:
         73:99:6e:68:0d:41:0f:20:e9:b3:06:1e:89:86:6e:b5:2b:a2:
         f0:c7:0d:f7:ff:2b:23:66:41:68:5f:70:b9:43:dd:9e:36:11:
         78:f0:7e:5a:61:74:5e:67:f2:6f:aa:df:94:8c:c0:0f:c1:63:
         74:ad:61:38:e8:f7:c7:6b:62:f4:25:d8:de:5b:64:86:3c:a3:
         f7:2f:83:76:f8:f5:47:2e:0b:b1:d8:94:c5:d9:93:58:70:7f:
         c9:f7:ea:69:67:c9:48:63:7a:6e:8f:5f:b4:11:20:64:a3:4e:
         2c:29:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:20:52 2026 by rpki-client