Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File:                     RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier:          WF2Lt2vu92Nb4H6i6DImEweY16NTfAYN1Sb6/H/vmvU=
Subject key identifier:   B4:F0:E2:FC:8E:74:B0:EB:5A:38:CE:78:D4:DA:36:4A:24:4C:E2:16
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer:       /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial:       019EC3374DDE3C5C9EF283BAFCB6F02EEE24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number:          12D1
Signing time:             Sat 13 Jun 2026 23:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:41 +0000
Files and hashes:         1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: 9w7QumQ26Vvz/oAiH1D6kCU3ZpRRgsq0pnltl5ALJIw=)
                          2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:4d:de:3c:5c:9e:f2:83:ba:fc:b6:f0:2e:ee:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
        Validity
            Not Before: Jun 13 23:00:41 2026 GMT
            Not After : Jun 14 23:00:41 2026 GMT
        Subject: CN=b4f0e2fc8e74b0eb5a38ce78d4da364a244ce216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:21:0a:82:6c:d3:93:eb:37:33:18:60:91:
                    fb:cc:ea:71:69:ab:9c:c5:ce:af:2e:fc:21:e0:22:
                    97:d1:ac:b1:57:08:9c:0c:d1:62:f9:9f:fb:68:0c:
                    c8:7e:6c:1c:9f:d9:2d:e3:4c:d7:2d:1c:9f:b3:5f:
                    be:21:7b:ca:bc:83:8d:f2:96:b4:fc:3a:a1:0e:8e:
                    16:89:a1:fe:91:33:ee:20:de:e3:f6:be:2d:b6:75:
                    f4:2d:e5:8f:cb:73:e1:e6:99:58:05:88:43:d8:dd:
                    f4:38:38:f0:12:b2:7d:70:8c:eb:92:28:e3:26:b7:
                    e5:13:37:3e:81:7a:86:5b:dc:8b:66:7f:b9:09:c0:
                    d4:f6:30:33:83:29:39:61:7f:ec:97:df:7c:a9:a3:
                    19:bb:16:8d:cc:e2:d8:30:74:7b:c5:e8:74:d2:a0:
                    bb:d5:1c:04:81:12:10:98:bc:7e:da:52:54:ec:72:
                    49:0c:df:de:9b:6f:35:9a:d2:75:d6:ac:7c:79:0c:
                    a7:e2:81:37:02:83:4e:b2:58:00:6d:eb:bb:ce:07:
                    4a:18:fb:7e:50:62:eb:4b:f9:f8:9a:0c:74:7d:70:
                    c7:cb:23:24:fb:22:95:6b:48:81:b9:d2:49:07:1d:
                    0e:d6:d4:77:09:9a:6b:13:ae:76:9d:84:b5:04:89:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F0:E2:FC:8E:74:B0:EB:5A:38:CE:78:D4:DA:36:4A:24:4C:E2:16
            X509v3 Authority Key Identifier:
                keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1a:22:e7:b5:f1:50:f5:9a:f3:71:39:95:4a:7d:30:fe:fa:
         4e:9e:ad:ad:8f:87:b3:cc:a2:71:3b:06:63:5f:15:37:3a:dc:
         5c:04:03:f8:d8:43:9d:42:c3:c7:60:c9:e6:f2:53:55:f8:5a:
         27:ca:af:dd:0c:01:84:0c:f3:43:ce:05:04:2e:61:e7:31:3b:
         fe:ee:78:1b:7f:09:86:26:2d:4b:9f:b3:2b:fa:36:2a:21:40:
         bd:61:93:16:44:59:f9:6b:21:c8:22:79:ca:0f:ed:d2:4c:49:
         61:7a:64:a5:2e:14:7d:88:f7:3e:87:b2:13:55:5b:84:3c:5f:
         30:07:b0:a4:79:42:39:cd:72:88:40:60:ff:6a:1a:c7:9e:2b:
         13:79:23:ce:5e:3f:1f:ba:53:da:1f:d6:03:58:de:78:a3:a0:
         fa:a0:45:c5:e8:3b:9a:02:47:58:2e:53:70:e8:dd:f9:42:0a:
         ae:02:3b:aa:6c:10:bc:ed:40:eb:29:d6:87:03:63:42:9c:41:
         a9:9d:b7:05:48:9a:e3:2d:56:ab:7a:59:15:bd:a3:a5:73:59:
         db:a4:a4:c4:c0:29:45:40:11:06:02:27:4b:15:c8:77:8d:9f:
         95:28:90:3e:ff:db:3c:30:7b:2b:89:c2:fd:24:17:87:5c:22:
         49:ab:bd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:31 2026 by rpki-client