Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File:                     2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier:          KApuwRXT2eIgIVI5p5wfniFtZJ9Mw87kZ9AyzP2KyPE=
Subject key identifier:   C4:A3:EF:35:EE:A1:B9:7C:0B:60:42:70:A9:9A:E6:54:47:F8:8B:BA
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer:       /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial:       019EBE47D2779A2ADA60C36BE301C1CA7A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number:          14AC
Signing time:             Sat 13 Jun 2026 00:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:38 +0000
Files and hashes:         1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: A9YGLEJuMFRnyGGNbcTrxBg2PlH94PI3gm6DrChHSSo=)
                          2: i9hMEuJaBfT7lcapiz_ahkSHzcg.roa (hash: fw1KAABJZ7dzQA1QjS2gjeHAVGrrtjSeZ6MepK2bPQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:d2:77:9a:2a:da:60:c3:6b:e3:01:c1:ca:7a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
        Validity
            Not Before: Jun 13 00:00:38 2026 GMT
            Not After : Jun 14 00:00:38 2026 GMT
        Subject: CN=c4a3ef35eea1b97c0b604270a99ae65447f88bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1f:38:09:70:bb:cb:9b:31:dc:aa:4d:4a:ce:
                    11:a8:94:d8:5c:a9:be:ed:ed:85:c0:70:ce:74:60:
                    30:de:3c:0c:e9:9e:d8:84:b2:cd:ca:31:bb:91:01:
                    87:15:a0:d4:7e:5c:eb:6f:0d:81:de:ab:a9:41:9d:
                    1f:c7:33:2d:13:d4:31:33:2d:6a:4b:e7:fb:d4:3a:
                    10:90:ca:42:91:fd:90:68:d2:cb:6c:65:2d:5d:83:
                    a6:f9:4f:2e:47:76:d5:87:62:fc:2f:0f:0b:95:95:
                    32:2b:26:dc:4c:6a:77:0e:e9:15:f2:55:03:92:22:
                    3b:26:60:73:54:1d:bf:5a:3b:55:ed:6b:c6:15:ec:
                    99:2d:29:64:36:48:24:fc:19:18:7e:96:6e:bb:06:
                    bb:a5:62:cd:9d:c2:75:0b:63:8b:f8:06:ab:5b:c1:
                    eb:a7:8b:99:b8:cc:0d:b0:80:18:69:5e:9a:59:ed:
                    e4:97:82:0c:64:e9:69:a1:2a:b9:37:ef:3e:42:3d:
                    96:f5:4d:8c:5b:39:35:36:98:ff:01:27:51:bc:a0:
                    bb:da:20:16:69:4d:d7:f6:e5:96:31:c0:61:4f:53:
                    c1:88:67:75:50:4c:b5:83:60:b3:a0:6e:3f:9f:ee:
                    f9:40:5a:3c:1f:cc:76:93:03:d4:64:8f:38:0e:ae:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A3:EF:35:EE:A1:B9:7C:0B:60:42:70:A9:9A:E6:54:47:F8:8B:BA
            X509v3 Authority Key Identifier:
                keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:95:18:c9:99:1a:fa:e5:ca:7b:2a:71:b2:31:69:d3:67:c1:
         ce:72:33:71:80:ec:32:ce:41:35:e5:87:f4:8a:6b:39:f1:c9:
         df:1f:44:fc:6a:ab:77:f0:bd:8b:b2:d8:bd:52:d3:6e:36:96:
         67:68:30:74:a9:4b:86:29:25:03:32:11:5d:22:2e:6a:43:2e:
         a5:29:9f:3a:1f:07:1c:29:33:1f:d1:5e:61:75:f3:b0:d0:a8:
         9f:f7:5d:01:6c:f4:74:07:fe:72:b3:03:79:da:64:a6:27:ae:
         5b:c9:8d:e3:0a:a0:83:8f:16:19:ff:fd:dc:ef:8e:5f:f7:c1:
         90:6a:93:f2:7a:ad:a7:8b:c6:d9:96:d9:26:07:89:70:79:7a:
         7c:2b:b1:2d:26:75:72:2a:a5:65:3c:c8:6b:ff:c5:21:4e:4a:
         74:33:78:58:e2:70:65:e1:2e:5a:4c:d5:4e:8b:05:69:0b:4d:
         36:ad:52:04:66:36:84:98:73:2e:7e:05:08:c9:b3:90:26:ad:
         91:dc:01:13:9f:e4:c9:6b:82:cb:12:df:ba:05:24:bd:51:43:
         6e:e4:7d:a9:18:70:3a:df:5f:ac:be:7c:bc:f3:15:8c:c4:5c:
         a3:2e:c6:59:58:db:07:43:1a:d2:ae:55:d5:8d:d9:42:bf:65:
         1d:0a:8b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:50:18 2026 by rpki-client