Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File:                     bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier:          f2B4YQPhKGLoubGsMANmMRuRtlXZFN5dVGDpcoKpgec=
Subject key identifier:   E3:1A:CF:7C:2D:C5:EE:08:5D:94:D0:5A:3E:3C:9B:45:BB:1D:05:22
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer:       /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial:       019ED2E2171829973A98DC070C8F47C477F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number:          03DA
Signing time:             Wed 17 Jun 2026 00:01:32 +0000
Manifest this update:     Wed 17 Jun 2026 00:01:32 +0000
Manifest next update:     Thu 18 Jun 2026 00:01:32 +0000
Files and hashes:         1: 03NeIplATFDJWFtEuuQG-JYnRlE.roa (hash: 0PUjM3BFPHGxuy7ESUIjpYFstJbdDCjDTMV4Zmhng7M=)
                          2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: qpJ11WuVgz0K0DJ68uhHdvRx2EZW2YbO5TTxWLclTXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:e2:17:18:29:97:3a:98:dc:07:0c:8f:47:c4:77:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
        Validity
            Not Before: Jun 17 00:01:32 2026 GMT
            Not After : Jun 18 00:01:32 2026 GMT
        Subject: CN=e31acf7c2dc5ee085d94d05a3e3c9b45bb1d0522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:aa:f0:f5:28:64:2e:e1:6b:3b:fd:8c:e2:
                    d4:99:ba:ab:63:62:ea:71:ab:ff:69:19:31:2c:ad:
                    b9:c2:b8:a3:69:fb:71:4b:5d:6b:b5:87:f7:72:fc:
                    ea:b7:20:00:a7:3c:74:29:be:5e:80:11:a2:e5:39:
                    86:ae:b9:2f:d8:11:77:2a:c5:04:02:50:3a:0d:c5:
                    f5:1b:09:7f:3a:7a:b7:44:f8:97:73:9a:da:fd:5b:
                    93:4d:30:ff:af:62:66:cb:e1:2e:51:ff:37:20:06:
                    ef:92:79:ea:a7:d6:a9:f7:01:0d:5f:e8:2a:46:30:
                    c2:1f:28:20:c6:15:7e:f9:0b:2d:7b:54:f9:20:a8:
                    0c:7c:0a:58:0d:62:c6:b9:90:46:48:c9:d8:0f:ce:
                    4a:3f:82:34:71:c7:db:d5:c1:24:47:88:9e:98:e3:
                    76:79:b6:c0:0f:1c:20:40:f9:cc:c5:13:ff:b7:04:
                    3c:05:2b:2b:e2:1a:ca:76:cd:96:3b:3a:b6:96:5f:
                    c4:ab:ad:66:e7:7f:46:ac:e7:ea:32:94:6f:05:d1:
                    bc:51:d5:b8:4e:c8:9c:de:72:f8:39:cc:05:87:d0:
                    a0:44:b0:b6:f5:75:01:0d:97:5d:b1:06:cb:62:ed:
                    06:fe:81:f6:3a:0f:ff:3b:dc:b9:b4:3a:30:81:d1:
                    5f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1A:CF:7C:2D:C5:EE:08:5D:94:D0:5A:3E:3C:9B:45:BB:1D:05:22
            X509v3 Authority Key Identifier:
                keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:7c:6f:a3:f1:4a:58:dc:46:10:49:a0:68:4d:35:9b:a2:a4:
         8c:ef:0b:12:ee:02:ad:2a:bd:3d:71:0d:bf:86:95:13:cd:8c:
         6c:36:cd:12:56:e2:f9:98:52:29:45:53:b2:30:cb:96:b3:26:
         4c:54:a3:6d:05:29:4f:b7:5d:6e:66:c1:ab:df:ea:9b:cd:f7:
         57:f7:0b:ca:a6:17:01:fe:a5:09:fd:d2:43:ed:45:cf:78:25:
         c7:b1:34:43:a0:00:a0:40:7b:ae:4f:7c:1f:9c:2a:ea:f0:e3:
         ff:98:c2:12:dd:5d:71:58:18:22:e9:1e:36:c9:dd:c7:9d:0b:
         70:ea:ba:9f:4a:f1:42:0b:f0:25:0a:f7:9d:4d:a3:68:61:9a:
         eb:f0:51:cc:43:0c:0e:1a:ec:f8:9e:bd:c2:5e:4b:42:c7:b3:
         8f:6c:8a:b5:b9:fd:e3:4f:7d:f1:cc:d9:36:f0:a7:7f:c1:f2:
         f0:c6:19:72:9e:2b:7d:5d:11:0a:12:bd:81:2d:5d:55:ae:f2:
         3b:a6:96:3b:35:4c:0d:19:7e:81:5e:0f:54:a6:0c:7b:fc:5a:
         28:af:c3:bb:0e:37:ea:b8:30:ea:f2:43:7c:24:53:9b:18:69:
         0a:b3:f0:ad:d8:03:e5:49:bf:58:35:67:41:7f:e6:c0:59:a7:
         77:58:56:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:53:06 2026 by rpki-client