Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File:                     C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier:          Lp1u6C2fBTg3ZmtKwQkzvi7LyD4r0wBbLccSAf5l8ow=
Subject key identifier:   E3:E7:E6:B9:61:61:0E:47:BB:B9:62:65:EB:30:14:12:45:9D:D3:9D
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer:       /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial:       019EBF91545773D8B9863F4919A1DA7C5249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number:          10E1
Signing time:             Sat 13 Jun 2026 06:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:32 +0000
Files and hashes:         1: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (hash: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0=)
                          2: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: XXrnZPCkCXH82dYn62I8RwejclAkAtT3WmGl3Vh1Qtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:54:57:73:d8:b9:86:3f:49:19:a1:da:7c:52:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
        Validity
            Not Before: Jun 13 06:00:32 2026 GMT
            Not After : Jun 14 06:00:32 2026 GMT
        Subject: CN=e3e7e6b961610e47bbb96265eb301412459dd39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:66:82:ce:35:16:9d:ef:3f:f4:b9:5e:b8:
                    61:c9:87:99:bf:e0:da:cc:b5:cd:c3:ab:3a:ee:e4:
                    18:66:f2:ae:0d:a5:61:47:e8:47:80:84:c1:12:61:
                    2f:bf:88:6b:b9:43:1b:5a:45:dc:44:9d:86:c0:b5:
                    88:6f:21:40:98:e3:86:1b:be:8b:45:37:cb:ea:a3:
                    5c:e3:83:31:1d:2a:4a:5b:bf:ea:13:76:29:45:8d:
                    e7:59:9a:bb:9c:22:1e:5e:48:a1:ab:94:ef:c1:39:
                    41:f8:57:5b:d7:19:dc:85:13:f2:e1:98:68:f1:5b:
                    05:16:11:a9:c8:cf:d0:a3:f9:46:a9:50:83:b0:19:
                    9e:4e:fc:04:60:42:da:46:fe:d3:14:81:89:ef:44:
                    8b:81:ff:6e:07:bc:21:91:f3:5e:f2:24:02:81:fc:
                    53:3a:74:b2:80:54:2c:c0:1c:1e:85:9a:7e:31:0b:
                    b2:c5:ac:88:f6:ac:2d:5a:67:05:3b:14:49:ad:fe:
                    31:cf:38:a7:36:d3:67:93:34:4f:fe:2d:01:97:75:
                    62:4a:bd:8b:73:a5:d3:cd:fe:e1:28:0a:e2:74:a4:
                    54:8f:2f:b0:9c:b2:3f:5a:e4:14:33:ec:08:a0:a9:
                    66:77:fd:95:98:d4:1b:97:da:61:b1:1b:4e:b0:4c:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E7:E6:B9:61:61:0E:47:BB:B9:62:65:EB:30:14:12:45:9D:D3:9D
            X509v3 Authority Key Identifier:
                keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:18:21:bd:1a:e4:03:31:ca:df:d1:54:3e:fe:45:ec:70:b8:
         c0:3c:da:97:57:f9:83:80:8e:79:25:5e:68:6c:0f:52:9f:89:
         21:ad:fb:19:1c:c4:8d:b8:52:bb:03:92:83:7a:dc:d5:26:bf:
         2d:67:d2:2a:8d:4b:35:38:e7:80:a4:e1:65:ce:48:0b:34:4a:
         73:77:58:d9:8d:ea:a2:17:c0:64:f3:05:2d:2a:1f:b7:c4:35:
         e8:3b:ad:1f:7a:9a:fd:f4:5d:32:f2:83:30:af:a5:34:09:22:
         23:c3:96:b9:04:f1:a6:4c:54:b6:6c:b5:14:28:8d:a7:08:f0:
         df:b4:d8:9a:da:84:23:78:c4:3b:4e:e1:16:82:62:4b:3a:6d:
         b2:b2:a0:ca:f2:46:57:be:14:f7:10:94:4e:b6:20:05:c8:ec:
         13:0b:39:17:f6:31:91:cd:64:01:a9:c9:41:6a:11:4c:37:85:
         b8:63:ae:1d:e0:74:51:f3:f9:45:6e:b4:28:aa:b8:b1:35:e1:
         09:f1:b9:97:30:87:a5:39:57:38:4e:8b:cb:56:97:4f:30:dc:
         6b:25:16:0b:e7:d8:0d:89:4c:a6:f2:03:b7:56:88:d0:b9:af:
         ca:cb:09:47:4d:98:ac:13:4f:be:61:0a:fb:b7:9a:3d:29:9e:
         f7:61:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:06:40 2026 by rpki-client