Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          guZ7kyTzqxW13Bk5FrPTgGkSbTzTuIJ2Lgr6zCPbtlQ=
Subject key identifier:   69:82:10:48:AC:3E:4C:5A:CE:FA:F0:55:EB:6F:D5:56:7D:E4:0A:B3
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       019EC0DB4E0A131617B09EE68C36E6062D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          148E
Signing time:             Sat 13 Jun 2026 12:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:58 +0000
Files and hashes:         1: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: R4SbngnQ5a/gjizqzC1on4Ktnl4JMe6P8C12VvRJKAU=)
                          2: ja3xbYHhCypT2kKyeAbUDM6JjaI.roa (hash: 97d7xvyjN2GHwh42t3hRtYWBfO2mX62sHwBd8SOvXh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:4e:0a:13:16:17:b0:9e:e6:8c:36:e6:06:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Jun 13 12:00:58 2026 GMT
            Not After : Jun 14 12:00:58 2026 GMT
        Subject: CN=69821048ac3e4c5acefaf055eb6fd5567de40ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:50:cf:e6:04:50:b1:3c:c5:7b:41:f6:0d:74:
                    2d:d0:16:66:30:31:ea:44:8e:90:22:09:6f:47:8c:
                    3d:16:1e:77:cf:50:65:e8:2b:45:90:d7:ca:71:70:
                    09:68:b9:fc:d2:79:8a:e3:37:e1:b9:da:63:a0:fa:
                    a1:fa:e4:f4:fa:eb:3f:e1:b2:4d:69:d6:4c:51:47:
                    91:2a:45:44:1f:f5:bf:22:43:6a:ba:39:45:9c:f0:
                    43:ac:66:ab:5f:ec:15:aa:8d:4f:6c:dd:6a:1a:4d:
                    4c:49:1a:ef:e9:0d:0b:f7:32:42:7b:45:37:f4:2a:
                    9d:23:06:47:0f:c0:da:d0:10:9b:7f:dc:f7:c6:ae:
                    91:6e:1c:27:ed:3b:19:b7:75:c7:cc:5d:65:b7:59:
                    77:8e:f4:35:d6:59:35:4d:97:b9:02:46:d7:42:e1:
                    16:b2:d0:5d:9b:8e:0e:be:34:71:74:8d:9b:2a:fb:
                    ed:e6:a0:e3:99:d7:f6:7b:88:18:32:f5:6e:db:e1:
                    96:8d:ea:b1:f9:c9:3c:c0:26:f2:de:c9:98:c5:ff:
                    b8:ea:b7:1f:ad:9c:d7:10:91:4a:80:47:1f:dd:52:
                    3c:c0:ca:62:16:3a:f2:3b:36:3e:9e:ee:29:c8:4d:
                    ac:7f:5c:87:e8:fb:50:78:33:c3:c5:bf:d5:34:b5:
                    d4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:82:10:48:AC:3E:4C:5A:CE:FA:F0:55:EB:6F:D5:56:7D:E4:0A:B3
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:b9:f0:8d:b5:e8:ab:57:20:d9:7a:47:00:87:d6:02:76:
         bd:91:95:e7:ea:b3:1e:c7:5b:d4:b3:81:d2:f3:8b:51:dd:29:
         76:4b:6b:9a:48:30:3a:d7:99:b2:eb:09:62:ab:fa:d4:bd:f1:
         65:a9:48:63:9c:d1:b9:6e:8a:b1:60:8a:b5:6a:2c:a0:67:27:
         2d:b3:05:b1:1a:ad:1b:1c:11:1b:3a:6d:79:4e:4b:30:15:db:
         ab:d3:a6:be:14:c1:3f:32:13:38:89:b4:74:6a:0b:82:a6:6b:
         d9:0e:6c:71:0d:79:8f:07:b8:c6:07:1a:be:4a:ed:28:87:4e:
         67:da:61:b5:eb:ab:21:a8:9b:96:48:14:b2:46:a7:5d:c1:ba:
         d0:69:c1:64:af:89:fb:24:04:3d:b0:7b:42:3d:b1:b1:b7:c4:
         f8:7e:f2:8a:97:31:d5:c9:cc:c0:9f:ef:26:69:09:a3:ce:f1:
         85:1e:b7:5d:47:35:ff:12:0f:a0:ba:37:5a:2f:c6:c6:fc:3a:
         be:14:02:01:34:8e:b8:7d:2b:22:9c:5c:97:20:09:11:49:a3:
         f0:55:45:49:17:89:a6:f5:09:57:be:9f:05:38:c2:2a:6d:84:
         b6:53:56:72:bf:de:21:8a:85:0e:0b:16:54:6b:dd:d8:54:40:
         f7:fa:6b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:49:21 2026 by rpki-client