Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File:                     Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier:          0G6nVakswIKYyiGq/BSnuHNxUvpYzcQ25QhZyWPZfLU=
Subject key identifier:   CF:22:60:F8:C3:19:9F:FE:E6:4D:47:08:57:6D:24:C2:7E:52:6E:70
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer:       /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial:       019EBE47B659239762D0B269F014324A44F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number:          143C
Signing time:             Sat 13 Jun 2026 00:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:31 +0000
Files and hashes:         1: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: 73NCBM+G27Txx9vEk7WGmKEb6UcYx+eRBqjk4AczLUI=)
                          2: _NXhURzxEgUQOx1t27VNmnsADf8.roa (hash: kmT3XzeKsZmAbDA1dijKJM9ptJsrZrB5WHGBEuWYsf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:b6:59:23:97:62:d0:b2:69:f0:14:32:4a:44:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
        Validity
            Not Before: Jun 13 00:00:31 2026 GMT
            Not After : Jun 14 00:00:31 2026 GMT
        Subject: CN=cf2260f8c3199ffee64d4708576d24c27e526e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:85:12:5e:fe:d8:ed:89:41:a6:87:8e:fb:
                    16:0e:38:0c:3c:9d:ad:38:ab:9b:99:80:85:04:cd:
                    95:83:7e:06:26:fb:c8:62:ff:7b:24:25:ea:02:80:
                    d6:b2:47:f3:76:7f:25:65:86:f0:85:a5:fe:7a:21:
                    50:bc:64:60:d1:33:ac:09:e0:5d:dc:5c:93:cb:3a:
                    ac:80:d7:54:f5:4a:64:c8:e0:91:3e:3f:d2:12:bf:
                    c8:4d:9d:65:4f:8c:ac:99:a9:25:7f:bf:d4:2e:24:
                    78:07:c3:f1:57:84:e3:0e:ae:32:d8:03:05:00:a5:
                    88:84:43:ee:13:50:e7:97:6c:81:34:73:58:70:d3:
                    cc:9e:c6:e2:4c:3d:04:a9:aa:c2:fa:7b:39:8b:87:
                    cd:c3:2b:ec:46:d1:91:68:ec:d1:4e:6c:b6:42:a5:
                    35:0f:c8:f9:de:39:be:c0:1b:02:9d:7f:87:99:a6:
                    9f:c3:ce:75:b5:c8:d2:80:ed:96:35:b7:e5:1e:e8:
                    d3:9a:44:a2:a2:8f:c0:f6:61:39:7b:81:05:20:bc:
                    4c:b4:23:45:d7:f2:af:15:b6:27:fa:e1:62:1d:bf:
                    6b:23:39:c9:db:9e:f9:52:10:4b:39:ee:03:43:7f:
                    d2:ea:46:41:db:fa:24:88:9f:86:69:c2:fd:c6:c7:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:22:60:F8:C3:19:9F:FE:E6:4D:47:08:57:6D:24:C2:7E:52:6E:70
            X509v3 Authority Key Identifier:
                keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:f1:e4:d4:31:97:6c:5a:bb:c0:bb:c3:d5:3d:0b:a5:1e:f6:
         bf:fd:e7:8e:fa:41:7c:77:12:2f:7d:c1:80:59:e6:9c:6b:f8:
         28:0b:91:87:34:cd:32:73:d1:70:dd:29:ab:ce:62:b2:a1:ca:
         0f:4a:89:65:32:1c:a1:32:e0:c8:18:7e:89:73:34:ba:bc:3b:
         62:87:ee:f3:5f:fd:dd:48:2c:f1:9c:c3:8b:30:f4:16:3f:a8:
         d9:40:fe:cd:b5:15:ae:5e:59:0f:8f:73:3c:84:cb:8d:19:a5:
         37:4b:87:d3:a7:08:47:7b:b2:d2:36:81:0b:13:36:ea:c4:4c:
         91:12:56:30:7b:77:c9:49:fb:d4:dc:12:bd:2f:86:a3:29:63:
         f9:d6:56:db:70:a4:da:66:03:79:d3:43:ca:f4:5b:cf:79:20:
         c4:f5:15:ea:f8:59:26:44:09:98:96:34:27:c3:e5:a0:b1:74:
         90:a4:b8:da:f3:3e:e0:4b:41:77:b1:f6:84:e8:25:5b:86:b6:
         56:df:c4:a9:dc:c0:f8:72:3a:64:ad:20:71:57:f4:01:59:a1:
         55:01:d7:af:f9:e4:8a:e9:be:e6:5b:33:36:df:e5:09:fc:ee:
         09:cc:aa:6b:5f:80:3a:4b:2b:f9:56:1c:b7:63:64:43:4f:71:
         3f:6b:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:09 2026 by rpki-client