Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
File:                     gRAUn9EhMLPNzzWGKw3NuYqUcck.mft (raw, json)
Hash identifier:          pnXO9uQiWGxpeuTfP4CY2mX340KYljrYwsSj4G0rszM=
Subject key identifier:   2E:EF:8D:61:BA:AD:62:52:5C:35:CE:C1:F1:4A:06:86:36:92:1F:CD
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Certificate issuer:       /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial:       019EC0A478AAA8BEDA056D306C452A538CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
Manifest number:          1399
Signing time:             Sat 13 Jun 2026 11:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 11:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 11:01:04 +0000
Files and hashes:         1: 8SQmgdkK0KsfXA0AaqFVFyW45As.roa (hash: fxN83lzpsUSm7eGjIimHE3kwgJziubYYBHi6/BB/u4I=)
                          2: A6iNMP0GraSgW6_j4orJfWQjE0o.roa (hash: lSRG12LN2giLsE/xo290FIB2nk9ZuI4BSXvCilXtaZM=)
                          3: Pq02UuVgPsEQJnxfmqHmAw9ZrRY.roa (hash: Z4q0gZP6TZCVbicLemekk+usml+xCUXFfIPrfXm7A+k=)
                          4: gRAUn9EhMLPNzzWGKw3NuYqUcck.crl (hash: 2BfR083rLQXhzx9N3zdph0J34NggtbzbmKtbTklwCd4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:78:aa:a8:be:da:05:6d:30:6c:45:2a:53:8c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
        Validity
            Not Before: Jun 13 11:01:04 2026 GMT
            Not After : Jun 14 11:01:04 2026 GMT
        Subject: CN=2eef8d61baad62525c35cec1f14a068636921fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d2:8e:7c:82:13:89:4e:a2:e5:e1:96:a2:fa:
                    f2:ba:85:72:29:9d:c6:f7:9b:4f:b2:b9:d2:6c:0e:
                    41:e7:5a:1a:05:af:72:99:c4:0f:7b:e7:41:24:fd:
                    32:68:1b:8e:fa:fb:70:17:ba:95:78:4f:3f:46:19:
                    4f:c8:53:43:93:f2:da:68:25:7b:2d:62:f0:ba:0d:
                    b0:a7:e9:74:18:b8:70:4a:1e:8f:b2:1b:bf:94:91:
                    ff:20:54:a0:4b:86:50:81:2a:86:2c:8d:fc:ed:f7:
                    03:f1:0f:17:55:6d:d7:68:a0:b3:ad:e4:42:9f:2e:
                    87:50:91:35:be:74:28:cd:d8:ee:e8:ab:5f:1f:de:
                    20:c8:39:e6:d6:e0:da:75:35:65:ab:39:12:02:7a:
                    6e:ae:97:68:94:f3:4b:8a:ac:b5:63:07:8c:73:95:
                    03:e4:e5:0f:c1:be:b8:71:b1:e9:45:b7:19:14:8d:
                    2f:b5:45:bb:65:74:59:e4:a9:2e:33:fe:d6:00:20:
                    ff:20:b0:48:62:90:d4:3c:b6:09:ae:ab:d5:6e:34:
                    e1:3e:4e:a3:47:07:33:be:cf:67:dc:0e:e6:00:62:
                    9b:1e:67:2d:05:c0:9d:d5:d8:8c:56:93:bc:52:41:
                    d9:89:7b:a4:2c:af:84:ba:93:bf:77:a9:83:f1:b7:
                    f9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EF:8D:61:BA:AD:62:52:5C:35:CE:C1:F1:4A:06:86:36:92:1F:CD
            X509v3 Authority Key Identifier:
                keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:18:88:e7:81:51:e9:f6:6c:11:62:b7:00:18:9b:d8:16:5f:
         a6:af:c0:f4:80:58:41:85:93:99:f4:2a:69:62:5c:89:41:04:
         9e:f0:6b:50:a6:a4:14:37:a2:74:54:68:a0:63:3b:1b:1d:74:
         f3:4b:ca:f7:8e:d2:a4:1d:38:bc:7e:57:24:81:fd:43:73:b3:
         be:26:7f:aa:ad:6b:fb:97:ad:01:4d:8f:b0:cb:f4:1f:00:fc:
         83:7c:61:4b:6c:13:5f:c9:58:d5:50:9f:87:8a:08:d3:a6:04:
         f4:be:1d:1a:4f:50:6a:f3:56:4f:83:de:98:56:de:f5:bf:9a:
         b1:cc:bc:98:a4:c6:7a:63:78:95:45:f9:b1:fb:cb:03:e0:ae:
         7b:ab:bc:04:75:db:f8:d9:b3:4c:f1:5c:11:d8:f2:78:8a:c9:
         cd:34:3a:a7:75:0c:f5:12:38:2d:2d:7f:3e:6f:68:1a:4b:3a:
         61:3e:11:b6:aa:cc:81:23:92:76:e3:f5:75:94:0a:f9:b3:f6:
         80:4c:3e:69:3e:56:6f:f5:74:c2:96:db:1c:21:0b:c9:2e:86:
         f5:ae:2c:ef:63:aa:32:f5:f9:4a:20:b1:db:c5:74:fd:c8:7a:
         ea:28:9e:a4:ee:ab:4e:04:e7:08:61:1d:aa:62:7d:60:e9:71:
         eb:91:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:40 2026 by rpki-client