Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
File:                     72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json)
Hash identifier:          dV6ujtGO+3QtYN5t+W99/whQPaJl/C4zvXWUlYYwJ+s=
Subject key identifier:   33:DD:43:F8:AD:A5:C6:38:AC:B3:3E:BA:94:9D:26:2D:C8:ED:78:27
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Certificate issuer:       /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial:       019EBE7ED9CB5CCDE8969AF62DF93377C709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
Manifest number:          14C4
Signing time:             Sat 13 Jun 2026 01:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:44 +0000
Files and hashes:         1: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: e6nOm2NqpNfwX5Z25avfIiZyF1v9WYg6pFYKdHZhGQk=)
                          2: dwTOvNNNs4_nLfL-zGTDIueq7wE.roa (hash: OZz3Ati+0+Owv6ll3vAAGBWOgVo4lM5LfhjhBc+bzWQ=)
                          3: ekxswoBsSmNReS3BO5bv3ZcbIgA.roa (hash: fq2RYQXr2Q+LCB9gUhTjaSYI4NdNhOQIDzKGs+coCIc=)
                          4: qyP69zaDTmNmYkyQ7c7evEHMFbc.roa (hash: NqwYrk8FLr9zreZXVBBWmFtU5YYuWHkOztqiuxftrew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:d9:cb:5c:cd:e8:96:9a:f6:2d:f9:33:77:c7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
        Validity
            Not Before: Jun 13 01:00:44 2026 GMT
            Not After : Jun 14 01:00:44 2026 GMT
        Subject: CN=33dd43f8ada5c638acb33eba949d262dc8ed7827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:21:62:f7:2b:ef:98:a2:23:97:d5:f7:bd:
                    76:40:10:36:2d:51:28:ff:0f:48:e1:c2:4d:c1:ab:
                    36:97:cb:76:d5:93:17:ce:56:ce:b4:d1:b9:20:ba:
                    3e:da:cb:33:2c:21:7a:07:49:f3:63:ac:30:59:8e:
                    7e:bc:fe:cf:5e:28:05:5a:b5:f4:6f:e3:54:f2:32:
                    68:e2:5f:0b:c5:f6:a2:8d:08:54:48:f4:93:ba:5c:
                    90:2b:0e:e9:b7:6a:17:e6:0f:fb:d0:ed:02:ee:0e:
                    3a:71:0c:28:4a:8a:1e:0d:50:ee:e3:14:9c:a6:71:
                    73:38:46:2e:11:0f:87:74:dc:5d:5d:a4:f3:fd:63:
                    a9:be:58:bd:8e:3d:12:7b:8f:da:5c:2f:43:49:29:
                    94:93:6e:c4:fc:5c:74:52:23:b9:8d:38:9c:fb:0f:
                    1a:4d:19:ed:63:71:93:9e:9b:fa:6e:3c:fa:ec:e3:
                    3e:37:b6:d2:cd:ae:5a:60:f3:4a:7d:31:6e:91:48:
                    30:1a:91:d0:8f:a8:9b:02:28:f1:88:ba:b7:0e:b9:
                    fb:bf:49:6f:13:8f:94:a0:3c:e1:d5:77:46:d8:14:
                    b5:98:07:00:2c:96:65:0e:92:ec:6a:d6:8c:37:c0:
                    a2:8f:f1:67:6e:d5:71:1c:b8:34:21:d6:d8:24:6b:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DD:43:F8:AD:A5:C6:38:AC:B3:3E:BA:94:9D:26:2D:C8:ED:78:27
            X509v3 Authority Key Identifier:
                keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3a:02:8f:6d:7e:88:10:e6:c8:b9:39:19:b6:a0:36:bc:a7:
         a6:b5:e5:9e:87:a4:3c:96:87:f7:78:4d:42:fd:62:d2:24:92:
         d1:5c:67:48:28:ac:9b:c5:eb:d2:50:39:9d:fa:be:29:63:21:
         13:f9:d3:f5:ec:a1:64:f2:7e:15:e2:c1:43:06:f2:b5:2b:fc:
         99:a6:2b:c2:60:ef:da:11:01:0c:87:18:7c:d2:9c:a3:a2:c6:
         2b:0f:2a:2b:b3:42:f4:93:08:b5:7c:d0:aa:88:c6:e9:3d:51:
         e0:59:06:c2:da:20:30:48:36:2a:05:73:70:34:9f:14:c7:60:
         dd:0f:27:49:3c:f2:5c:52:eb:81:28:02:20:19:fd:21:e0:9a:
         79:22:55:b4:2a:94:27:fb:fb:ca:ed:7a:75:2e:c0:ea:30:05:
         e0:ab:a7:e7:62:75:e2:8f:22:22:14:d3:d0:e8:49:55:52:c2:
         70:c5:3f:3e:d8:43:76:bb:de:52:f8:8f:06:95:02:bf:7e:29:
         54:03:84:ad:01:65:fa:e8:a2:11:86:6b:44:11:73:ad:f7:04:
         95:e2:0c:cb:85:a6:ad:87:da:3a:19:ae:4e:df:c2:6c:fe:f7:
         92:e4:95:ef:10:a4:ec:8d:5f:a3:c8:20:c0:1f:1d:7d:ea:8a:
         b5:c2:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:35:45 2026 by rpki-client