Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File:                     1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier:          nR9aw9IbP9uboiotvbqO5rQo312f9qpGJ99tQ/wbOmU=
Subject key identifier:   66:83:89:4E:3F:64:4E:4B:CD:62:18:41:8B:61:DA:AE:AF:C8:35:B9
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer:       /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial:       019EBF5A3BD5DC2856F8E6A0CAC550A5A7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number:          0F80
Signing time:             Sat 13 Jun 2026 05:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:22 +0000
Files and hashes:         1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: LClSly9cyd8ZTx0E63wyAeUDVV5c3FK1BIZt1Beg+CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:3b:d5:dc:28:56:f8:e6:a0:ca:c5:50:a5:a7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
        Validity
            Not Before: Jun 13 05:00:22 2026 GMT
            Not After : Jun 14 05:00:22 2026 GMT
        Subject: CN=6683894e3f644e4bcd6218418b61daaeafc835b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:7f:ad:64:50:a0:32:f0:3d:9c:4e:6e:ca:
                    f1:cf:e9:f8:80:4f:6c:95:59:ae:dc:ae:a9:de:bb:
                    28:02:62:bc:61:d8:15:b3:0e:25:ab:84:d8:d2:f9:
                    ea:52:36:a4:b6:2e:18:85:4c:1a:24:a0:6d:ef:d7:
                    9f:36:82:66:b5:73:43:2d:4b:47:ee:8f:c0:fe:a4:
                    29:cb:96:cc:ed:ba:08:12:43:f0:1c:e9:a3:dd:70:
                    02:8b:fa:9d:ca:1b:7d:28:bf:20:69:a2:35:97:a1:
                    f3:4f:0c:67:c9:37:6f:b6:8f:4f:33:ff:7a:ea:39:
                    2c:a9:b0:1e:20:ed:a9:d0:72:70:d1:7c:8f:2f:a9:
                    fa:fa:5f:91:e3:ef:de:83:83:9f:7c:7a:eb:d8:56:
                    f1:6d:d0:ab:58:e3:51:9e:0a:c2:07:53:44:47:52:
                    c7:13:a9:e4:26:2a:38:b2:de:f0:6f:e8:6b:26:95:
                    02:53:f8:4d:0f:33:4c:fc:6a:c0:4f:e9:66:1d:a5:
                    57:2b:33:2c:27:19:b8:8e:71:2e:60:ba:7c:5c:4d:
                    b7:82:8c:61:be:58:53:05:e5:bf:c5:4e:8d:d9:70:
                    ed:15:c6:ac:f2:70:35:09:c3:fe:27:b9:56:1e:ce:
                    b7:dc:34:fa:60:ea:94:7d:5a:00:3e:32:ee:12:02:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:83:89:4E:3F:64:4E:4B:CD:62:18:41:8B:61:DA:AE:AF:C8:35:B9
            X509v3 Authority Key Identifier:
                keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:69:8f:37:e8:e5:8b:f9:99:e9:14:2e:00:29:9d:ea:17:
         4c:fb:21:74:d9:86:91:80:99:02:d2:74:da:54:d7:b7:bc:52:
         56:90:fb:3d:f0:1b:17:76:05:03:37:8a:95:90:28:a0:94:c3:
         6a:e4:9e:10:52:45:1e:0a:a6:ac:f6:31:20:12:63:4c:8a:db:
         26:af:67:98:23:67:f3:87:2f:f6:fc:ca:a2:d2:b1:2b:f3:10:
         8f:41:31:62:19:b5:46:d4:7c:4b:89:a9:33:6b:94:b0:cc:f2:
         03:01:42:28:64:17:89:01:a2:2b:98:9d:dd:f0:c5:0d:c8:17:
         f8:61:1e:bc:b2:56:45:1b:20:ba:79:a8:0d:6e:25:22:3e:96:
         4e:87:db:19:22:62:81:a5:ee:a2:90:84:10:c0:a0:e5:f7:24:
         26:d6:78:4a:49:a5:e9:e5:ba:9d:1f:7b:fb:94:da:84:a0:5c:
         fa:67:df:42:c9:be:4d:9d:7c:0c:d5:bb:d5:1b:04:75:36:17:
         57:21:f2:16:4f:fe:17:82:de:9f:c1:64:1a:83:f3:75:eb:7f:
         eb:ac:70:35:af:da:6b:10:8e:81:83:3c:91:5a:ac:34:5d:ff:
         07:01:38:fa:90:44:c5:c4:21:a3:5f:44:e2:45:ca:a1:6a:19:
         b7:1e:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:34:37 2026 by rpki-client