Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File:                     1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier:          cJGRcO1qnjmSlTzKXsagYLXZMbqUrvR3KI/QP6rPGS8=
Subject key identifier:   BB:49:0D:D7:FD:BC:A4:5E:FA:BF:99:44:59:EE:66:BD:C2:3C:EB:C3
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer:       /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial:       019ED53DF46120B04C35C7920061E81DF0A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 11:01:07 +0000
Manifest this update:     Wed 17 Jun 2026 11:01:07 +0000
Manifest next update:     Thu 18 Jun 2026 11:01:07 +0000
Files and hashes:         1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: ym6hBtgerxtNERiw74wYe8aFJ12e1FiYZjGiPyh25wA=)
                          2: Vci5kME3AljCGz_yFCPscOsBEvk.roa (hash: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:3d:f4:61:20:b0:4c:35:c7:92:00:61:e8:1d:f0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
        Validity
            Not Before: Jun 17 11:01:07 2026 GMT
            Not After : Jun 18 11:01:07 2026 GMT
        Subject: CN=bb490dd7fdbca45efabf994459ee66bdc23cebc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:53:ec:8b:df:87:a8:e9:4c:8d:c4:b4:a4:
                    61:b0:0d:98:1e:10:06:55:69:43:c8:91:1a:45:51:
                    24:0d:89:5a:28:e2:0c:07:2b:1d:f5:d1:23:d5:ad:
                    63:8a:6a:4a:d9:55:9d:ab:16:71:0f:7e:b5:29:c0:
                    cb:2e:d7:d8:23:f7:d2:76:14:2a:a5:1e:f5:0a:7f:
                    2f:fe:ea:3b:48:85:77:44:ed:aa:fe:76:3a:d3:3b:
                    4a:84:ae:cb:0e:99:07:f4:b6:1f:50:74:83:88:7a:
                    7f:93:b0:6b:d1:2a:7c:a0:c3:be:5c:3f:db:c5:66:
                    a6:91:49:df:75:61:06:87:8c:4e:5a:db:d5:76:20:
                    1d:b2:ba:a7:15:94:26:bd:4a:26:51:26:05:7a:2c:
                    9b:01:b7:e1:8d:56:e7:d8:3a:da:ac:2b:2d:d1:24:
                    ba:9e:53:2d:15:78:bf:00:83:21:43:94:8a:6d:cb:
                    09:09:c4:77:a4:70:fc:f9:1b:12:da:59:56:f0:b0:
                    f5:b8:61:2a:9c:33:2b:6b:66:be:b3:b7:73:a2:8b:
                    d9:96:0e:9c:70:f0:72:7c:de:1a:08:81:d5:82:73:
                    73:6e:4d:ea:69:77:49:50:0c:f0:c7:9d:61:e8:1d:
                    7c:b6:59:b0:70:3d:5d:12:bf:77:5a:e1:06:9d:e4:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:49:0D:D7:FD:BC:A4:5E:FA:BF:99:44:59:EE:66:BD:C2:3C:EB:C3
            X509v3 Authority Key Identifier:
                keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5e:1a:a5:ef:e2:b9:4b:12:59:27:4a:67:15:ff:11:62:bd:
         b1:13:5e:63:e2:4e:2a:f4:c2:2a:f4:d2:27:e1:91:da:1e:d8:
         ea:01:76:c6:a7:11:50:c8:f0:d5:ca:53:2f:ad:28:eb:d0:03:
         80:7e:37:01:1e:88:cb:82:c6:46:b9:4a:ab:f6:9b:4f:6c:fc:
         b8:0a:80:99:7d:92:a9:66:6c:ed:3d:9d:a3:cd:e5:fc:2f:dd:
         39:2a:8a:fc:f1:84:48:28:26:e5:0e:29:d2:83:0b:05:8c:97:
         69:79:6b:f9:48:3c:d3:b5:13:88:2c:a2:c9:35:7e:0c:54:81:
         da:26:cd:73:eb:ef:fc:e5:ec:8d:0f:14:f5:4d:1c:ac:5b:e2:
         37:12:d2:6f:33:ee:26:53:f0:c6:e5:43:c6:e9:f2:44:4e:29:
         22:4e:49:39:74:94:ac:50:35:2e:45:3f:91:7b:fe:08:03:87:
         98:17:88:59:69:dc:3e:5c:a1:4f:a8:43:48:95:38:0e:28:00:
         6d:b1:4c:f0:a5:7c:73:a7:84:2d:b4:7a:b5:be:9b:5e:c3:0c:
         f8:b9:46:6c:48:ee:13:44:6f:63:44:75:97:2e:34:2b:c1:d5:
         4d:ab:a7:89:0d:50:83:9a:62:a8:a1:74:1b:53:e0:40:3d:9e:
         a5:5e:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:39:10 2026 by rpki-client