Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
File:                     suwbpoVLv1vD7VVP9_7zul_ky1E.mft (raw, json)
Hash identifier:          lYmlF3oadGvlcE0mBPN2wAlNfXARC52V6Rz77LsH3z4=
Subject key identifier:   C3:94:47:D3:F5:72:7B:8A:B4:11:94:8A:7F:99:9E:3A:9E:DC:8D:A5
Authority key identifier: B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51
Certificate issuer:       /CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
Certificate serial:       019EC22473647CDE78AF70A952AF71DD0109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
Manifest number:          1376
Signing time:             Sat 13 Jun 2026 18:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:29 +0000
Files and hashes:         1: UU7xm8N0gLKzystvr7K0vFPPnwM.roa (hash: AIlX5yaREYq7YP0aVDh7YsVcoDln+tEm7zV1uCXEZfo=)
                          2: suwbpoVLv1vD7VVP9_7zul_ky1E.crl (hash: r3455RaDHQhf2o7/X7Rt44mB1T4kYUlRii+94ZupyM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:73:64:7c:de:78:af:70:a9:52:af:71:dd:01:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2ec1ba6854bbf5bc3ed554ff7fef3ba5fe4cb51
        Validity
            Not Before: Jun 13 18:00:29 2026 GMT
            Not After : Jun 14 18:00:29 2026 GMT
        Subject: CN=c39447d3f5727b8ab411948a7f999e3a9edc8da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:66:48:eb:eb:af:12:7b:7b:16:34:48:f3:b3:
                    05:28:d1:53:23:c8:ce:7d:d4:b9:e1:b4:81:38:7b:
                    09:d0:7d:8f:e9:83:94:4e:9c:d4:79:ed:3f:08:3a:
                    5b:b8:d4:d3:a2:97:bc:b5:2b:3a:9e:f5:95:32:e8:
                    04:a0:91:5a:49:09:9b:ab:5c:20:81:16:67:77:83:
                    44:2c:c8:0b:50:43:78:71:4f:bc:24:6b:b2:b2:4d:
                    03:69:08:a0:5d:b4:16:73:87:9f:e5:92:7c:f1:d6:
                    dc:ed:2c:b6:62:1b:d8:c6:a1:2d:50:63:39:43:b0:
                    68:8a:67:6b:db:c3:c9:93:81:f3:60:f6:f6:0b:fa:
                    9b:be:ad:33:1d:16:01:b5:27:65:f1:93:dc:b2:95:
                    cb:4d:5f:2a:08:fc:f7:78:d9:7e:3c:82:91:60:c2:
                    8e:20:7f:0c:ff:96:d6:de:68:a2:c8:ca:08:ea:3f:
                    70:08:8b:b6:ac:59:ce:49:f8:5d:82:78:5f:db:8f:
                    22:b0:b0:7a:77:b2:5f:c8:f4:b7:0f:35:6d:dc:8c:
                    5a:ac:4c:4a:02:7b:9f:0c:a4:25:5c:d0:b0:af:85:
                    59:aa:83:6b:34:75:b4:af:f6:a4:b8:ea:56:af:02:
                    f3:25:2b:eb:f0:99:25:a2:07:b0:36:b7:5c:7f:13:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:47:D3:F5:72:7B:8A:B4:11:94:8A:7F:99:9E:3A:9E:DC:8D:A5
            X509v3 Authority Key Identifier:
                keyid:B2:EC:1B:A6:85:4B:BF:5B:C3:ED:55:4F:F7:FE:F3:BA:5F:E4:CB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suwbpoVLv1vD7VVP9_7zul_ky1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5279ef-a1c9-4da2-a1c5-1d8d933d6c00/1/suwbpoVLv1vD7VVP9_7zul_ky1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:36:c7:70:59:b8:a3:ad:2b:64:3e:31:d6:eb:0a:62:eb:
         96:64:2a:35:d5:6a:10:7a:62:a1:5b:7c:c5:2a:b2:48:94:4d:
         f7:72:a1:cc:97:7d:7f:65:78:dc:29:8d:0c:72:09:1e:57:7e:
         48:d3:45:1f:97:d8:1c:41:fb:1f:41:49:37:7e:ef:e1:f8:35:
         4b:ab:4b:36:b8:6c:46:d5:46:18:16:89:14:81:f7:57:8b:c9:
         dd:0b:c5:6d:b6:54:f4:a2:24:9b:af:21:2d:f4:73:33:cc:f4:
         7c:a5:6d:96:cd:69:3c:3a:ea:b2:3c:3b:58:64:b2:88:56:67:
         04:27:c7:f4:8a:cf:b8:1d:60:79:d9:de:4d:18:61:7f:17:72:
         d5:51:fb:ed:fa:48:ff:44:92:87:3c:74:5a:9b:74:94:85:d5:
         10:cf:55:52:54:da:3e:d0:fa:b6:03:98:6f:7e:93:bd:70:75:
         60:16:9b:71:77:ef:fd:b5:85:94:21:00:99:12:75:c7:81:bd:
         57:43:00:39:07:ba:85:c8:7e:1d:f0:4b:86:05:a2:b7:ce:a9:
         1e:a6:13:50:a4:aa:07:2f:c4:f0:77:b1:af:8f:70:6a:a0:f7:
         7c:2f:a8:c6:ef:6f:55:1b:13:5d:90:ad:ca:4c:2f:2e:55:d1:
         81:39:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:45 2026 by rpki-client