Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File:                     py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier:          XEEEG+XoLmfipfP3XgJ1Bd/unkg8lTI4OVrsYUXbXfA=
Subject key identifier:   A1:51:55:67:48:C3:CD:ED:8E:0F:C7:79:B1:87:36:35:42:05:F0:72
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer:       /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial:       019EC17F9602C83E53BD97C4EA93B5F052E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number:          1686
Signing time:             Sat 13 Jun 2026 15:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:24 +0000
Files and hashes:         1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: NI7Cc7kiBE/6/ts+LePFjmsKP/qQ5vcFn0y0w1o8ndU=)
                          2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
                          3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:96:02:c8:3e:53:bd:97:c4:ea:93:b5:f0:52:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
        Validity
            Not Before: Jun 13 15:00:24 2026 GMT
            Not After : Jun 14 15:00:24 2026 GMT
        Subject: CN=a151556748c3cded8e0fc779b18736354205f072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:04:b0:0c:86:19:14:a0:f7:7e:c4:a1:42:
                    4c:b9:db:d0:76:86:b8:82:fa:db:e4:02:11:f4:33:
                    fc:06:1c:56:03:9e:7b:48:a9:dd:80:e0:df:ab:6b:
                    b8:3f:0c:5e:d5:10:12:85:8d:42:2e:93:f0:e4:88:
                    1d:80:72:eb:cc:86:7e:c8:1a:db:e5:f5:1b:be:5b:
                    cc:9e:e0:83:a7:f6:7e:62:ea:cb:96:a2:1f:5a:b5:
                    27:df:f0:bb:da:52:a4:20:bf:fc:3e:f5:f0:93:d6:
                    75:a5:fd:d7:9c:aa:3c:0b:0f:dd:c5:00:ed:3e:09:
                    7e:b8:14:7d:3b:2a:31:0e:00:f5:b2:de:8f:60:76:
                    75:c9:64:56:1f:8c:56:08:19:fb:69:74:08:44:55:
                    3f:c1:e4:de:da:d5:ab:82:f3:3d:43:3b:72:ae:f6:
                    f9:ed:1e:fe:83:07:d8:08:60:c1:92:4d:f5:8b:ea:
                    48:3c:e1:44:35:03:f1:74:f7:90:e6:d8:f5:06:c0:
                    e0:c8:ce:36:49:a0:34:62:75:de:e1:2e:b1:3c:f0:
                    7f:04:d1:ef:f7:b9:04:fa:af:57:15:be:a0:ff:86:
                    c2:0c:77:79:3c:e3:37:d2:05:2e:c0:52:e4:0d:3b:
                    23:a8:38:b4:91:91:e5:4d:d5:b4:ba:10:3d:a6:ae:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:51:55:67:48:C3:CD:ED:8E:0F:C7:79:B1:87:36:35:42:05:F0:72
            X509v3 Authority Key Identifier:
                keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:da:46:17:97:18:6f:d5:b6:9e:c8:ba:4d:72:21:bd:a4:72:
         d3:72:91:d1:d3:0c:5a:c4:f3:ac:22:5d:fb:e7:0d:4d:cc:75:
         7f:76:e6:39:a4:df:53:26:90:f7:d6:23:7b:17:84:69:6d:33:
         f5:fa:8a:f0:be:4c:ae:31:60:f9:45:32:cf:04:d7:1f:b3:66:
         ea:fb:98:c5:0c:4f:d0:e1:47:41:0f:7c:78:74:23:84:79:e3:
         f9:9c:65:7f:39:00:16:af:43:3e:1a:22:b1:cd:e0:e1:f0:85:
         d6:d7:43:90:50:e6:8a:87:4b:02:20:52:a2:20:37:34:09:71:
         90:4a:88:73:70:ee:ad:b5:8f:3c:d5:72:8b:6f:9c:2a:33:84:
         b3:32:a3:79:3d:f4:0c:1f:48:2b:b5:99:76:9b:f8:20:63:13:
         ec:0a:71:c5:fa:2e:3d:1a:3a:63:dc:75:68:87:c9:b1:40:ce:
         7a:1a:e6:c2:9b:40:22:2f:63:33:67:45:9f:2f:d2:b5:c6:9d:
         2e:65:49:ee:56:f7:2e:e5:8a:80:78:9c:af:d5:06:06:37:8c:
         cc:b5:43:95:b7:52:ac:e8:c4:58:64:07:54:28:3a:8d:a2:1d:
         e9:57:6a:7e:51:98:50:3c:d4:eb:b1:25:b4:3a:74:30:3b:64:
         91:7d:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:32:14 2026 by rpki-client