Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File:                     Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier:          oSJbKOKx6Lcd1UldElBTi4m1x9ltbehr3MoBl6g3sVE=
Subject key identifier:   92:4D:F7:C8:F3:7C:1C:88:22:9D:0D:7F:C9:AF:7C:D0:33:45:E6:36
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer:       /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial:       019EC17FE211AE7D7BB5F591D8946C9D7576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number:          0264
Signing time:             Sat 13 Jun 2026 15:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:43 +0000
Files and hashes:         1: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=)
                          2: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: hW7Bxdpvih8iDdPQYCEPnF8qbbb+g5IMsYIqexSsXg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:e2:11:ae:7d:7b:b5:f5:91:d8:94:6c:9d:75:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
        Validity
            Not Before: Jun 13 15:00:43 2026 GMT
            Not After : Jun 14 15:00:43 2026 GMT
        Subject: CN=924df7c8f37c1c88229d0d7fc9af7cd03345e636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:55:4c:70:fc:7e:ca:5a:d5:fb:70:1a:08:
                    7c:ac:ad:b8:d6:09:12:2d:a7:c1:a7:72:39:e9:8a:
                    12:a6:44:33:41:90:92:02:5b:4d:31:aa:47:73:0d:
                    c4:1f:d4:94:eb:57:ff:79:3f:f2:35:f0:d8:2a:de:
                    5c:4c:aa:7e:6b:cf:71:52:f2:84:f8:9b:69:08:13:
                    17:29:ed:3a:5b:a5:9b:09:df:13:32:3a:e4:7a:3a:
                    ca:c7:d1:38:06:94:74:6a:98:42:23:ff:de:21:23:
                    d8:48:a1:f5:1b:3e:33:58:5e:6b:26:10:f0:03:7a:
                    53:3b:3d:20:5b:3e:36:75:7e:a2:64:0e:cd:d8:3b:
                    2a:ea:83:82:e2:5c:63:f6:5b:fc:a0:76:62:98:84:
                    27:4e:f0:6a:9b:7d:87:89:60:73:e3:06:36:55:a9:
                    bc:db:64:33:af:7f:4f:c8:78:fc:51:68:c0:25:62:
                    d6:ae:fe:4c:99:fd:6e:a1:b6:f8:41:62:45:6f:7b:
                    b8:e2:36:6f:b6:59:f8:1c:c8:ff:4c:9a:75:b7:8d:
                    62:f3:b9:77:d2:90:24:74:76:38:24:68:17:b3:f8:
                    be:af:d9:e2:25:3a:c3:9b:ae:f5:9d:c1:57:54:65:
                    4b:bf:b5:4e:aa:ea:57:c0:c0:31:9b:01:9d:44:7d:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4D:F7:C8:F3:7C:1C:88:22:9D:0D:7F:C9:AF:7C:D0:33:45:E6:36
            X509v3 Authority Key Identifier:
                keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:17:86:2d:e8:bb:b1:97:34:0f:25:86:52:22:6a:94:f3:
         32:0f:3e:8f:b9:e1:9e:4b:7f:9f:f3:2e:61:a8:10:d2:dd:a3:
         10:d2:91:d1:eb:f1:61:36:35:34:43:c2:e4:db:6d:1e:35:2e:
         ae:d6:91:8c:fe:ea:0f:e2:42:6d:2e:62:67:03:37:e8:44:9c:
         7b:e2:de:84:df:78:91:88:d3:4f:e6:97:56:7e:ff:b4:2c:f4:
         8e:81:a6:dd:1f:6d:3c:54:ad:f9:bb:10:ec:ed:5d:a1:0a:ff:
         c5:f2:98:37:83:6a:16:d3:19:63:d8:bb:09:26:39:e9:e0:6d:
         64:fc:e0:d6:07:88:69:e9:b3:38:1a:04:da:0b:5a:40:ef:54:
         d6:ec:dd:95:24:79:ff:77:5c:f6:c1:15:dd:95:ab:0c:d1:b9:
         f2:9a:b7:73:60:ae:c6:47:ee:5e:9e:10:22:ea:2e:69:5f:b3:
         99:de:b3:db:54:02:9c:61:5d:d4:76:59:97:aa:57:5d:af:a1:
         93:1d:0d:a3:66:67:b9:61:6c:dd:7e:12:1e:af:2d:15:8a:1f:
         10:0d:a3:26:21:8f:eb:46:f5:93:3e:f5:0b:0b:5b:c4:fc:b3:
         34:a5:28:e6:3c:14:7f:06:08:01:2e:23:a0:57:1e:21:03:73:
         3c:4a:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:29:19 2026 by rpki-client