Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
File:                     dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json)
Hash identifier:          fS+Cjch8gKYKHjQvipbN5XnUIUc5NCZtIWoI587RqQQ=
Subject key identifier:   E0:58:E5:31:8E:AE:56:20:F2:86:42:5E:64:5D:54:7E:C2:53:4B:AA
Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F
Certificate issuer:       /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
Certificate serial:       019EC1124ABBEAA05165A899465CB76B22DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
Manifest number:          0F5B
Signing time:             Sat 13 Jun 2026 13:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:01 +0000
Files and hashes:         1: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: joJ2NCZtiRXZ4gBMJB5tz16IEaRh/pr9N8CLmPQJeC8=)
                          2: vj0F4FgcNslWI5L8V7Dw0mIMfn0.roa (hash: j/Kb2HDxy8LEtTBE0A03kW5/ZkhjPjh8YBluaGzICqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:4a:bb:ea:a0:51:65:a8:99:46:5c:b7:6b:22:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f
        Validity
            Not Before: Jun 13 13:01:01 2026 GMT
            Not After : Jun 14 13:01:01 2026 GMT
        Subject: CN=e058e5318eae5620f286425e645d547ec2534baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:10:72:9d:60:f5:d4:fe:ba:35:71:73:52:
                    d3:fe:1f:18:af:fe:43:cc:b5:90:49:eb:4a:e8:82:
                    a5:8f:4f:5a:2d:20:12:ce:02:01:db:c4:bf:07:62:
                    64:2c:80:3a:15:19:c3:8a:fb:8a:17:0c:8d:ef:36:
                    b4:2e:ba:f5:79:29:a2:32:ba:4d:92:27:be:89:33:
                    4f:7d:63:17:96:51:7b:0d:69:39:b8:16:1e:be:a2:
                    3b:8c:a4:44:7c:3c:30:a5:ce:b9:38:91:22:46:e8:
                    90:71:e6:92:60:92:e0:17:dc:47:bf:7f:40:a0:61:
                    73:6c:5e:10:56:19:bf:d8:48:22:ce:73:6b:cd:07:
                    17:96:66:90:9a:06:90:b3:00:01:ac:15:25:09:31:
                    2c:71:59:9b:b4:64:ca:a2:7b:45:83:b7:71:a2:f7:
                    20:ab:f7:cc:8d:ab:45:81:ff:e5:9a:ba:f6:2e:da:
                    b9:c2:b0:fb:d9:7f:b0:9e:86:19:70:27:c4:7c:77:
                    04:e4:95:da:0b:bc:21:35:28:62:49:f3:bc:a2:ba:
                    a6:a2:c5:4d:be:e1:1f:ab:a0:2b:ef:73:53:66:9f:
                    9f:29:99:b7:3b:d9:b4:fa:11:a3:08:ab:ef:39:7b:
                    17:52:74:21:26:82:e2:a1:ec:b1:a8:24:6a:40:13:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:58:E5:31:8E:AE:56:20:F2:86:42:5E:64:5D:54:7E:C2:53:4B:AA
            X509v3 Authority Key Identifier:
                keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:42:78:d1:82:28:11:ec:94:36:70:42:09:60:23:5a:cc:60:
         04:9b:22:83:11:10:a3:3f:5f:ad:ca:17:13:74:57:56:ec:70:
         39:8f:1b:08:6d:88:0e:0e:30:7b:65:45:61:30:03:a0:d5:ec:
         0d:25:bc:58:c5:b6:02:e6:46:05:bb:26:54:92:8b:d5:9b:fc:
         5c:f9:61:1d:fb:88:ea:42:6d:fa:84:c2:d9:ef:95:31:b5:bd:
         99:dd:b6:54:c2:60:6f:7c:4c:84:ca:ba:95:b2:3a:21:d2:ec:
         dd:05:3d:74:51:95:1e:13:d5:cc:77:ce:e5:13:40:b8:83:8b:
         4e:12:0b:24:39:2a:0d:e8:47:a8:0e:f8:ec:59:29:d3:cb:ea:
         bc:85:83:cd:a1:b6:c6:1c:2e:08:82:e8:e5:81:10:1a:fd:1e:
         76:08:8c:4c:0e:14:7d:84:c0:b5:07:8b:b0:50:5d:5f:45:36:
         81:f9:34:47:c4:96:e5:d1:72:85:9e:e0:04:f7:b7:88:64:ad:
         da:bc:1e:bc:4b:9b:ed:79:fc:95:16:d8:fe:6c:f9:90:c3:f8:
         9a:b1:bc:00:e3:88:12:56:bf:db:b7:f3:af:0a:df:33:72:c2:
         cc:83:c7:7b:2f:65:52:e6:22:4b:3f:0e:fe:c0:06:ec:00:66:
         d5:19:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:07:46 2026 by rpki-client