Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File:                     08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier:          Sqjsx2kTk4jsEy1+r8OFcf8TuDrnIKjXPJllTGhPPnw=
Subject key identifier:   4B:98:7F:F4:4E:C1:82:31:58:1E:11:9D:9F:EF:7B:90:75:AD:A1:FE
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer:       /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial:       019EBE10D80A75A7248EEB84AB9D636BE312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number:          1959
Signing time:             Fri 12 Jun 2026 23:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:35 +0000
Files and hashes:         1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: 8QPD8qOx5KJ4VHzWXR95eHfR+hL7flNPx5q5zQtr1kE=)
                          2: kDYFCwOTqCtWju9awtc-WWDQSp4.roa (hash: niu24Rn9CdcANUXflUaTh1yPPLtTi4dexe3GG8dp0NU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:d8:0a:75:a7:24:8e:eb:84:ab:9d:63:6b:e3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
        Validity
            Not Before: Jun 12 23:00:35 2026 GMT
            Not After : Jun 13 23:00:35 2026 GMT
        Subject: CN=4b987ff44ec18231581e119d9fef7b9075ada1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d8:60:19:65:a8:02:7d:74:79:73:0a:b5:0a:
                    75:78:5d:ef:ec:6f:6c:7a:c0:85:16:36:91:72:0b:
                    2a:1e:09:af:8d:85:52:28:23:24:46:25:bc:37:40:
                    9a:52:00:3c:77:79:d3:d1:5e:c5:5f:4b:bb:16:01:
                    8e:f8:d4:da:ec:9c:f0:48:a6:29:4a:44:fa:fb:3b:
                    63:99:be:e0:d5:7d:33:e5:37:33:0e:8f:0d:7e:36:
                    1f:39:77:72:9b:36:c8:08:26:08:16:7e:26:83:f9:
                    41:99:c1:ab:dd:b2:8d:e9:44:c1:b2:dd:d5:83:fe:
                    f7:04:19:db:3d:f5:9c:bb:c5:ad:bf:41:40:9e:f5:
                    b3:bd:c4:aa:f0:f6:b2:74:f8:f3:53:60:54:c8:53:
                    f6:8d:14:08:45:a4:f5:ac:af:67:02:4c:c3:83:82:
                    3a:d2:ff:5c:4a:2c:85:7d:18:27:9b:17:13:18:15:
                    3c:a6:40:93:4a:e5:54:4d:c8:cb:1c:fc:4c:9d:1e:
                    45:3b:0f:2b:20:14:bc:ff:8b:59:ee:b1:1c:a6:43:
                    60:c6:83:41:25:7f:6c:52:76:f4:c5:06:d3:75:41:
                    94:a8:b3:68:a8:1c:10:dd:19:c8:83:b9:41:d1:74:
                    c3:5a:ab:6c:d8:50:39:18:56:c4:4f:35:9e:67:eb:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:98:7F:F4:4E:C1:82:31:58:1E:11:9D:9F:EF:7B:90:75:AD:A1:FE
            X509v3 Authority Key Identifier:
                keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:19:53:15:1a:78:79:de:de:b2:db:dd:e5:9b:1f:ab:cf:0e:
         7c:3c:27:af:e4:62:7b:a0:79:83:c4:34:c7:19:aa:43:1c:65:
         8f:34:f8:9f:34:a5:5e:3e:65:82:10:ba:c0:a4:d4:be:69:f9:
         fd:c2:ca:aa:9c:43:57:73:e7:e8:9f:40:c1:af:f9:67:fb:8e:
         6c:bd:2b:04:8c:09:2d:13:4a:8f:37:02:81:86:a4:01:c1:6a:
         8a:9d:e3:09:c2:e3:87:95:7b:6b:00:13:55:93:e6:09:ab:7f:
         41:93:b0:8b:0d:5d:e3:48:5d:55:41:ab:b4:40:95:7d:1b:42:
         86:9b:46:03:64:af:b9:e8:9a:67:95:25:cd:5e:aa:9d:a0:d1:
         c2:92:46:58:39:61:08:41:c0:fc:9d:b3:c8:61:de:51:0e:7b:
         ee:fc:3d:9a:13:0a:21:bb:68:23:65:c1:56:0a:24:97:12:37:
         7d:0f:f5:65:0f:1b:a4:fd:be:fb:03:5d:4c:ec:ad:86:0c:db:
         3c:dd:d2:77:7b:2d:99:6c:39:46:c3:5b:b2:ee:6c:98:3f:28:
         6a:ee:1b:60:56:1e:98:25:0b:1e:82:23:97:05:a0:00:bf:9b:
         26:52:23:32:5e:ae:9c:e4:d0:34:18:c8:a8:f6:76:8f:b7:79:
         b8:cf:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:08:36 2026 by rpki-client