Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File:                     44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier:          0JBou8HS8kbDigGpxIMf8bdEnpTZCf6QGgs1UfeggCw=
Subject key identifier:   E2:74:71:CD:2F:30:21:93:A0:7D:FD:37:DB:9F:24:87:ED:97:BC:47
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer:       /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial:       019EC1490C7A2E5942F2AA6D5927986AC3CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number:          102C
Signing time:             Sat 13 Jun 2026 14:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:50 +0000
Files and hashes:         1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: I0qijBRPecd/ndhX9JjrAJVnaEUEEM6Kg9MnnJPyNdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:0c:7a:2e:59:42:f2:aa:6d:59:27:98:6a:c3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
        Validity
            Not Before: Jun 13 14:00:50 2026 GMT
            Not After : Jun 14 14:00:50 2026 GMT
        Subject: CN=e27471cd2f302193a07dfd37db9f2487ed97bc47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:68:6f:87:28:0b:15:04:dc:94:4d:5b:6b:
                    9d:f4:fd:da:b4:20:25:d2:cd:a8:27:88:2c:46:86:
                    a2:ff:50:10:8d:24:8c:ab:41:a4:bf:23:ed:51:5a:
                    a3:60:e2:e5:6d:ce:cc:19:7c:23:9b:a0:48:7a:1d:
                    cb:50:29:30:0f:37:0e:34:b0:ba:df:95:68:82:93:
                    67:d5:8e:dc:b3:e8:eb:68:7b:45:08:02:48:3e:84:
                    86:4f:1f:15:9c:d6:91:24:32:fe:06:54:f9:99:4a:
                    3f:6f:e7:3e:d1:35:cc:be:24:6e:a0:1a:b8:a0:03:
                    f2:46:96:47:f4:61:3d:38:9d:82:92:30:dd:9f:7b:
                    19:95:ec:c2:d4:a3:de:be:5b:ce:27:2d:b1:a3:fb:
                    6b:9b:cb:39:e0:1f:77:81:2b:03:43:0d:75:db:be:
                    a8:19:de:1d:30:54:68:b6:f6:3b:2e:b7:e1:ee:64:
                    f3:40:78:ff:b7:6e:d5:b0:bc:00:32:1e:2f:1d:f5:
                    31:37:50:30:c7:cb:b3:45:53:c6:40:92:20:47:73:
                    de:db:9b:19:ae:c6:0a:40:56:52:20:01:c9:15:d1:
                    24:18:0f:99:ec:5f:18:5c:39:e0:5c:49:34:9f:05:
                    a6:79:48:91:ee:e4:54:2e:e7:01:4d:8b:b1:a5:9e:
                    34:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:71:CD:2F:30:21:93:A0:7D:FD:37:DB:9F:24:87:ED:97:BC:47
            X509v3 Authority Key Identifier:
                keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:87:79:ff:57:c6:1f:77:33:b1:87:4b:5f:e6:0d:f2:2f:
         22:ba:48:4d:fa:94:e4:7e:db:a5:05:8b:b7:a8:51:92:63:e8:
         09:5d:74:22:f8:53:5d:58:3d:42:8b:e8:84:ba:93:60:6f:89:
         28:a2:0b:62:f7:86:c9:4d:c0:36:11:04:75:aa:38:41:cd:db:
         68:d6:f1:83:bc:b8:dd:86:11:3f:ff:e5:9f:1f:c1:69:77:e4:
         2b:82:47:ec:01:37:fd:fb:e3:e5:0b:99:09:f2:32:c9:ea:bc:
         54:c6:63:ab:58:b4:f4:91:ed:0b:65:fb:10:ac:c7:12:dd:e0:
         f5:e1:b6:46:28:53:7b:a5:0b:af:a7:24:d7:53:60:21:66:59:
         4f:6a:cd:ac:2c:7b:77:6b:fb:17:96:e0:dc:1b:cc:18:63:49:
         e9:7d:a7:c5:56:5c:55:39:55:3f:d3:71:60:78:4d:ba:93:62:
         bf:14:fa:d5:77:62:e7:a1:49:d1:27:56:08:e6:58:23:dd:c5:
         03:85:19:58:6c:be:fd:e2:1f:2c:a7:37:2a:dd:cf:68:98:80:
         df:e1:16:ba:03:85:a4:a3:79:fd:b7:92:49:2b:32:c9:77:c4:
         34:71:f6:5f:3f:53:58:ec:5f:1d:75:23:b6:09:89:58:9a:84:
         cd:6b:29:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:39:02 2026 by rpki-client