Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File:                     iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier:          OGJkKUYy1mPyn5Vg24IpxiuG82AWPHw/DLksWM7FW9c=
Subject key identifier:   1F:4E:43:32:3A:F3:4E:9C:26:24:53:D5:E4:AC:E8:55:84:7C:4E:DD
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer:       /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial:       019EC035E7929C79ED56F42566D152362223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number:          0A7C
Signing time:             Sat 13 Jun 2026 09:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:18 +0000
Files and hashes:         1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: 23jiqmCkkFiKeBx2cObK7E0jvNEzD8fDkFS8pEIcqMY=)
                          2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:35:e7:92:9c:79:ed:56:f4:25:66:d1:52:36:22:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
        Validity
            Not Before: Jun 13 09:00:18 2026 GMT
            Not After : Jun 14 09:00:18 2026 GMT
        Subject: CN=1f4e43323af34e9c262453d5e4ace855847c4edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:00:35:51:3c:6a:56:ee:5c:03:08:71:17:
                    8c:a7:e3:73:1b:b1:f6:a8:f2:55:fc:2b:6b:97:c6:
                    7e:55:a4:99:70:5f:dd:92:4c:3c:91:77:06:90:98:
                    af:e8:ca:2f:c3:1b:5c:61:26:a2:18:3e:3e:73:80:
                    c8:a5:8f:8e:7b:e7:ae:aa:6b:9f:9a:8d:72:6a:bb:
                    df:06:42:7c:b5:53:55:da:d4:56:cb:2f:a8:54:ab:
                    65:60:e5:4b:48:b5:d9:4b:a7:4d:c3:99:15:d7:2b:
                    3b:0b:93:98:70:f6:af:0a:06:08:b5:50:12:44:9a:
                    ea:e2:98:51:69:54:e6:a3:22:07:81:39:07:f0:b7:
                    da:c1:e1:67:65:30:b1:c5:e0:45:62:4a:f6:16:d3:
                    85:51:c6:a3:e3:13:93:b8:e0:3f:38:70:ac:87:2b:
                    22:2e:77:f3:fb:25:94:91:e7:f2:c7:34:88:e4:16:
                    16:43:9c:6e:b6:c4:8c:f5:86:f0:f6:ac:b0:7c:b2:
                    1f:54:d8:4c:9f:4a:b2:d0:39:fa:0e:ad:2c:ea:65:
                    9d:0b:97:b8:d8:16:7a:32:2f:f7:1a:db:9e:cc:46:
                    c3:4c:2e:f1:13:a8:2d:f9:e8:61:08:da:29:f0:ee:
                    4a:b0:39:84:8c:0c:61:50:f5:e3:e6:97:f4:8e:c8:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:43:32:3A:F3:4E:9C:26:24:53:D5:E4:AC:E8:55:84:7C:4E:DD
            X509v3 Authority Key Identifier:
                keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:6d:ff:3e:0c:94:c1:7f:5b:46:6d:82:40:b6:ed:2e:cf:
         ee:f9:4b:5d:4c:e8:30:4e:e5:33:1c:9f:29:72:a7:21:67:6f:
         11:f7:df:30:ec:5b:54:7e:26:40:ef:c6:d7:19:ac:96:bb:aa:
         b8:18:1d:78:5f:12:16:a0:12:dd:f1:fb:5a:82:28:97:cc:38:
         5b:2e:35:73:15:5e:cb:2b:6a:41:4b:64:b7:82:d9:1c:57:e1:
         99:ec:de:7a:9e:0b:c2:9c:67:11:4d:cf:eb:95:c8:6c:c3:eb:
         3f:04:dd:6e:47:be:7a:fa:6d:44:6d:3d:2e:73:a7:48:0a:0a:
         5b:cc:e5:cd:1e:bc:1b:7b:b3:c9:09:ff:04:49:e3:50:26:9f:
         bc:a3:b9:67:ae:dc:60:4e:e0:ba:a4:fd:18:40:1e:12:b1:ac:
         28:55:51:cc:52:d1:21:4b:60:30:b5:77:2d:ee:97:6f:b5:bb:
         9e:b4:fe:eb:04:cd:aa:11:13:f4:c6:51:68:f6:ac:5b:94:f5:
         5a:c3:66:14:9c:b4:2f:5b:a3:e8:45:88:c4:ee:d9:6d:c4:a4:
         7d:da:d9:4e:10:a1:85:67:26:76:a8:53:cb:25:c8:fd:a4:cd:
         b6:ba:63:13:ee:40:22:27:41:1d:9a:7d:79:61:81:37:12:74:
         c8:54:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:05 2026 by rpki-client