Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File:                     p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier:          81/4UM/4or3rALndsVWKjb/Jrj+TjQyL76IqWQxbHmI=
Subject key identifier:   BE:A5:A7:83:DF:42:E9:E6:5C:A7:87:C2:2B:C1:07:06:6A:66:44:BD
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer:       /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial:       019ED386CCBD06B9FC25B0E46F0100C78C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 03:01:27 +0000
Manifest this update:     Wed 17 Jun 2026 03:01:27 +0000
Manifest next update:     Thu 18 Jun 2026 03:01:27 +0000
Files and hashes:         1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
                          2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: oNzROQGudbI1zy0j28W/9EVoMhLF5aB3O+9HaJ1voaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:cc:bd:06:b9:fc:25:b0:e4:6f:01:00:c7:8c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
        Validity
            Not Before: Jun 17 03:01:27 2026 GMT
            Not After : Jun 18 03:01:27 2026 GMT
        Subject: CN=bea5a783df42e9e65ca787c22bc107066a6644bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:80:1c:e2:d0:61:e2:f1:c8:ca:67:88:2d:
                    00:fa:c2:b0:21:1a:d9:cc:18:9d:af:e4:4d:21:4c:
                    79:7c:23:e4:8a:c4:e0:77:8f:eb:bb:0b:41:16:3c:
                    a0:61:f6:98:e0:ae:e9:5a:ab:39:d0:e9:fb:f1:f8:
                    6c:36:43:f1:0f:d6:58:ee:04:b7:0c:21:21:34:27:
                    0f:c1:2f:8b:08:5e:6f:ef:3b:e9:28:82:00:81:1a:
                    c8:07:bb:53:b7:37:77:e8:06:31:2b:d0:d3:17:1e:
                    ae:66:76:aa:dd:52:34:0c:91:07:db:24:36:9f:13:
                    bf:54:5f:b3:35:2f:45:f1:2f:3f:01:a5:b6:95:c5:
                    67:71:6a:b4:08:a3:d7:72:05:f0:93:b5:a3:0a:dd:
                    33:50:fd:67:b8:82:59:ef:fb:68:c7:62:ff:0a:43:
                    11:a9:0b:97:c1:18:9f:26:22:30:51:97:45:57:74:
                    93:56:ea:b6:58:51:f8:b2:56:f4:8e:72:e8:f1:ee:
                    be:2b:c9:fd:fb:f7:87:ee:e9:6d:a6:f7:43:64:e3:
                    d4:ac:c8:4f:26:9b:e8:65:21:26:8e:df:8e:3a:fa:
                    47:08:36:e6:20:cf:75:7c:78:71:28:87:23:3b:3a:
                    69:50:c2:1f:88:dd:bc:13:96:27:14:7f:2a:4c:0c:
                    1d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A5:A7:83:DF:42:E9:E6:5C:A7:87:C2:2B:C1:07:06:6A:66:44:BD
            X509v3 Authority Key Identifier:
                keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:5f:5e:4a:43:f9:0a:5b:18:84:48:be:6a:ac:5c:31:25:
         15:29:97:25:db:8f:c8:0e:75:1e:b3:4a:bd:f6:b0:61:1b:c2:
         1c:d6:a0:74:fb:03:13:1a:2a:ea:15:85:47:09:ab:97:ec:ce:
         bc:bd:9e:25:3e:c6:b8:12:5e:b7:69:bb:46:1d:1c:a5:72:01:
         31:39:8c:00:57:1c:0a:8c:68:33:67:11:cf:23:7c:ed:93:98:
         50:28:47:de:5c:26:40:ba:a0:79:a2:cc:22:73:74:f9:97:19:
         e0:e4:a5:44:3b:7c:70:d1:23:57:72:54:30:67:4e:e1:e8:f3:
         0e:e1:15:e2:d0:cb:2e:28:3d:30:d7:18:1c:2d:66:cb:0f:91:
         33:a0:69:7b:12:31:48:f9:8d:fa:af:8d:4c:9e:16:08:1c:91:
         65:f0:61:c8:a4:ca:a0:44:6c:d6:67:bb:7f:cb:da:d3:30:e2:
         dc:7d:a1:b8:73:66:19:3c:cb:45:3a:3c:de:7c:17:b2:66:20:
         e2:72:47:a7:1d:67:0f:1c:c7:33:7f:73:bc:72:25:64:64:80:
         33:2e:be:ca:af:ea:73:5d:a5:5d:24:33:12:30:6a:f2:3e:32:
         2f:3e:df:f9:99:ac:02:3a:0a:96:a4:f7:49:9f:3b:83:ac:4f:
         a5:a9:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:55:19 2026 by rpki-client