Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          8eOLHydt8et9rrRsb6D9kjwk14vKtZCFyH4dG5ZeObE=
Subject key identifier:   94:58:71:43:D4:24:06:F9:FD:F9:3F:10:42:2E:4A:36:63:C6:C4:45
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       019EBE7ED21CBA8DAD66CBE41242B7BB01B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0E9F
Signing time:             Sat 13 Jun 2026 01:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:42 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: ZbYXS3WQXs9EReTBeM9xpJsBcOtP5u+tckHVXUye6UE=)
                          2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:d2:1c:ba:8d:ad:66:cb:e4:12:42:b7:bb:01:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Jun 13 01:00:42 2026 GMT
            Not After : Jun 14 01:00:42 2026 GMT
        Subject: CN=94587143d42406f9fdf93f10422e4a3663c6c445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:cc:44:13:90:02:16:b1:8b:9b:1b:a1:9e:
                    77:76:29:7b:e6:5b:c9:d4:3b:cd:59:f1:de:ed:d7:
                    64:75:37:b8:fd:16:c9:6d:28:5d:c4:b2:e3:46:11:
                    59:0d:e4:e8:6b:49:61:7f:5e:ec:84:18:27:da:0f:
                    16:9b:61:f4:58:e8:11:c5:c8:33:92:eb:01:a7:19:
                    aa:17:8a:0f:8e:81:fb:c2:95:11:79:43:06:bd:ba:
                    ee:9b:bb:0f:5a:52:5c:24:66:12:25:73:4a:27:5e:
                    c0:f1:75:30:ae:a7:d5:80:e5:98:8b:fa:24:43:11:
                    5a:a5:df:bd:75:c0:91:5f:6c:c4:01:4f:c0:c5:02:
                    32:c9:6e:24:99:fd:99:4a:0d:a4:c3:52:a2:12:63:
                    f3:a8:82:b2:4a:eb:69:a6:1e:88:c3:7d:a5:76:c8:
                    0b:db:63:70:1b:50:36:4e:cd:1d:0f:f4:62:5e:77:
                    3c:5e:e7:50:67:5b:8c:1e:56:37:87:48:e1:84:98:
                    ac:73:1d:9b:b1:44:4d:d3:80:f2:2b:04:44:95:c0:
                    cd:5c:c8:4c:e3:46:1d:cc:e5:e5:7c:2c:21:6b:68:
                    c4:3f:fb:eb:ad:47:32:4d:c3:4a:a8:f7:ee:6b:96:
                    f7:17:97:9e:47:ff:bd:0f:6d:2f:4b:c5:db:30:82:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:58:71:43:D4:24:06:F9:FD:F9:3F:10:42:2E:4A:36:63:C6:C4:45
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:61:6c:00:77:a1:81:47:2a:23:e4:f5:e7:9b:22:d8:f8:7f:
         b2:f0:7f:51:0a:a4:d5:01:f5:ee:c7:98:42:5b:80:6b:01:ae:
         f2:91:39:bb:2e:3a:d5:ee:59:fa:2f:15:be:64:f3:b6:72:6d:
         26:db:61:59:0f:57:bc:ab:d5:65:2c:9d:34:ca:20:71:7d:3e:
         08:0f:90:33:5c:6b:bc:e2:10:65:94:1e:a4:a4:46:7b:1c:72:
         0e:a2:1a:70:96:a7:e7:01:f0:68:4e:56:01:1e:aa:ab:27:f6:
         10:85:92:c8:b2:ad:07:1a:b1:18:05:2f:2b:a4:b0:bf:56:e5:
         f6:bd:c0:04:cd:d6:29:ee:5f:1e:32:e1:90:91:00:b5:ba:30:
         96:44:fe:ca:2e:02:42:6d:78:ec:77:65:5f:0f:a5:47:93:bc:
         f8:8b:f3:cf:f6:b7:75:1b:51:7f:a3:e1:8f:c0:06:14:e7:ba:
         37:04:c2:a1:34:a1:d4:36:f3:44:80:b5:61:40:cd:9b:66:39:
         c8:97:be:b2:1e:40:9e:3b:25:81:9f:15:5b:55:71:da:ec:39:
         e1:f1:26:94:9c:af:0a:a2:f8:7d:ed:4a:4c:c6:d5:ff:ca:80:
         c9:3f:f8:7d:9b:9c:27:f7:e5:1c:91:e1:2c:46:be:45:91:35:
         5e:fe:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:40 2026 by rpki-client