Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          BHQkCZIxI7i7TG9UHKRBWUpuNK1Stdeeq8Il7qoS7fY=
Subject key identifier:   86:02:88:68:EF:27:17:A1:47:DE:21:C8:1D:68:9F:3D:42:D3:64:68
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       019EBD6BBB7F47A3DC8488280B8ACAE27C93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          12C3
Signing time:             Fri 12 Jun 2026 20:00:14 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:14 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:14 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: 4czr8LBI1+Q/rHOu796N8b05Wd9QrF7wBA8s/Od+mzQ=)
                          2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6b:bb:7f:47:a3:dc:84:88:28:0b:8a:ca:e2:7c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: Jun 12 20:00:14 2026 GMT
            Not After : Jun 13 20:00:14 2026 GMT
        Subject: CN=86028868ef2717a147de21c81d689f3d42d36468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:8a:6d:26:7d:39:32:68:c7:07:79:d0:da:
                    dc:84:f8:b0:c6:55:3f:6c:a3:6c:4e:7f:24:f6:20:
                    fa:92:e3:1a:64:c2:6e:54:c7:5a:87:31:77:70:2c:
                    be:52:ed:fd:c5:c3:41:a9:5c:10:49:82:90:cc:9b:
                    b2:d0:f5:61:03:b2:12:0a:39:58:04:3a:36:ec:ce:
                    0a:9a:49:ac:75:70:03:cf:2d:82:c3:5c:f5:51:d8:
                    ef:dd:a9:d0:1b:b2:82:0e:ba:b0:1d:8d:54:f2:ae:
                    78:98:47:12:36:c2:d4:06:b2:71:f2:aa:b6:02:56:
                    a9:62:f5:0b:49:85:9f:1d:28:97:a8:42:3b:dd:56:
                    08:9b:89:d8:41:37:3c:d5:47:66:55:a4:b9:69:e9:
                    8b:9f:be:6a:88:bd:f2:a5:56:25:60:2a:da:98:d9:
                    35:20:d9:9d:f4:5c:df:b9:5f:e6:45:91:be:23:10:
                    46:93:2f:ee:ee:92:96:f4:2e:fc:27:26:d0:e7:2a:
                    03:6b:df:d2:ff:b4:d3:21:0d:c5:cd:d3:eb:9a:5a:
                    3b:90:ac:af:73:5a:96:cc:03:02:f7:ac:10:a6:64:
                    56:ce:cc:48:6b:06:e3:b6:6b:b9:50:98:de:0c:e1:
                    bc:cb:4a:a3:58:91:03:b6:09:26:be:2b:7a:7a:91:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:02:88:68:EF:27:17:A1:47:DE:21:C8:1D:68:9F:3D:42:D3:64:68
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f5:4c:cd:ba:aa:77:fe:5e:88:62:e1:68:a9:d0:95:09:1e:
         ec:be:b9:02:98:bf:c4:13:c2:27:e7:86:44:93:3c:02:13:8e:
         7d:4b:e9:ff:b5:f8:9f:b6:a0:a4:2d:05:74:9c:77:42:a6:e3:
         cc:57:e3:b4:4f:d7:fe:d5:b6:02:0e:40:69:f3:17:4e:70:1d:
         84:71:8b:52:85:b6:62:48:ef:68:db:21:af:ff:f6:c2:20:48:
         4b:74:cd:d0:77:2a:6f:8d:df:b8:57:33:49:62:19:a2:c6:d1:
         f8:08:38:44:6b:f6:0b:32:5f:43:3f:b7:09:a1:b2:22:28:82:
         20:1c:7e:a1:50:da:2a:3a:26:1e:65:03:af:9d:59:27:3c:ef:
         a2:ec:09:a2:e0:b7:3a:7d:db:63:2b:6f:93:0e:62:4d:0e:1e:
         e6:c4:5b:30:d2:fa:6a:93:9f:13:f4:12:7b:95:6b:05:cb:ad:
         2d:78:5d:f3:f1:21:79:3d:22:e8:16:bf:93:95:fe:65:e9:5f:
         7a:2c:7f:2f:1e:ee:77:d9:6a:15:f8:e1:8d:88:d2:fa:d7:4a:
         89:1f:9e:09:02:5f:11:65:20:17:1c:7a:f6:43:9e:b9:34:d9:
         80:6d:d7:d1:53:bc:7a:e0:10:a4:f5:3a:27:2e:94:36:ba:10:
         54:fe:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:44 2026 by rpki-client