Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
File:                     484GnfxbYIh21kJKMueDqYqS7_I.mft (raw, json)
Hash identifier:          rccENJ3/QfCA4wmZwYloDa6WeJwF6CGGzoFfB+78beI=
Subject key identifier:   C1:E4:10:A2:E6:64:5F:4B:A6:CD:B0:EB:A4:18:76:D3:92:D7:E5:93
Authority key identifier: E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2
Certificate issuer:       /CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
Certificate serial:       019EC2CA267BFDD9C686B5AD9AB1368B1F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
Manifest number:          0FEE
Signing time:             Sat 13 Jun 2026 21:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:28 +0000
Files and hashes:         1: 484GnfxbYIh21kJKMueDqYqS7_I.crl (hash: U1CVnFhCSg2mB0y/cMNC8QGd6aAlrki7LCNKS8j1dr0=)
                          2: Sb27fx8W2Bv1m1pEAWpcbW-vK10.roa (hash: ClUudBc4gF5lYIHf+aYM1gznaI2Os4gu/iEuZ8iqJzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:26:7b:fd:d9:c6:86:b5:ad:9a:b1:36:8b:1f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ce069dfc5b608876d6424a32e783a98a92eff2
        Validity
            Not Before: Jun 13 21:01:28 2026 GMT
            Not After : Jun 14 21:01:28 2026 GMT
        Subject: CN=c1e410a2e6645f4ba6cdb0eba41876d392d7e593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:f3:96:18:41:18:83:7c:92:17:99:8d:55:
                    ab:c8:5b:96:17:08:22:a9:aa:ad:0a:d6:8c:2e:dd:
                    96:86:a6:85:08:c8:81:79:f8:10:42:c8:81:0a:2f:
                    20:6d:b8:86:c8:b6:5e:cc:87:d6:46:85:0d:2f:72:
                    e9:cc:27:e9:d6:57:90:c9:82:61:97:d5:67:6f:13:
                    42:54:f4:d6:af:6c:4a:39:f4:d2:c7:7d:ab:c8:c9:
                    cd:64:49:93:e0:2f:d7:7e:d5:c3:26:84:87:82:3a:
                    ed:4a:70:c5:cc:30:f5:d7:29:da:fa:45:03:2a:38:
                    75:98:a4:35:1f:0e:79:8a:eb:85:78:6a:3f:d8:4a:
                    29:8b:16:f8:64:4c:85:cb:a5:1b:e9:92:eb:ba:f0:
                    43:61:ea:be:28:38:9c:bb:81:b7:0d:4b:f5:62:2d:
                    a5:1e:ec:d0:d0:d8:1b:1f:37:4e:b7:e4:62:f4:39:
                    e0:1e:79:07:08:a4:b1:ea:04:ca:5c:19:39:8c:b4:
                    e5:3d:6e:97:6f:34:79:d9:c0:7e:6c:7e:3b:bd:5b:
                    d6:c1:05:c9:7c:f5:ec:21:9e:eb:8a:3a:d4:96:cc:
                    48:35:a2:57:6b:a7:21:5c:cc:2f:30:b0:a0:48:a7:
                    d5:7c:4b:bb:11:35:77:9e:a3:a6:f0:46:9c:65:9c:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E4:10:A2:E6:64:5F:4B:A6:CD:B0:EB:A4:18:76:D3:92:D7:E5:93
            X509v3 Authority Key Identifier:
                keyid:E3:CE:06:9D:FC:5B:60:88:76:D6:42:4A:32:E7:83:A9:8A:92:EF:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/484GnfxbYIh21kJKMueDqYqS7_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/55ae2d-37a2-4f67-9516-9081545f5691/1/484GnfxbYIh21kJKMueDqYqS7_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:dc:05:f1:7f:18:78:93:77:f7:05:80:e0:2b:db:0c:85:
         c5:85:ae:bb:d4:bc:79:b7:86:7e:f7:20:5e:3d:05:4c:fc:51:
         4b:33:e1:f2:b0:e2:e3:a6:ab:e1:d3:4e:15:94:35:b1:64:c9:
         55:cc:42:1e:91:63:e9:6b:50:30:25:8c:a9:41:70:f8:1e:41:
         cd:4d:21:ee:5a:e6:5b:43:99:47:8f:b5:c1:ae:4f:ee:5d:f8:
         cc:43:84:c1:2c:d6:f4:25:af:e9:22:28:6e:0d:9e:09:e9:1f:
         7c:ef:38:66:af:1f:bc:d1:60:a3:12:5c:42:b0:9d:b1:e8:a9:
         af:a4:87:7f:fa:e2:5b:d2:18:3e:5d:c2:8c:ec:2e:f1:aa:0d:
         9f:e9:b8:15:49:6c:77:00:e8:67:95:44:59:30:94:29:90:17:
         13:ad:06:83:5e:b6:0c:e1:64:fc:63:e1:aa:84:fc:40:1f:bc:
         4b:46:87:2c:65:a4:2c:35:f4:7c:a4:d7:b5:b7:96:f5:58:4b:
         70:b2:43:fa:a8:8b:6c:26:c0:f1:43:6d:9c:45:5b:a9:d0:b6:
         5e:82:5d:0d:ce:4a:d6:1b:a8:76:07:88:57:fe:74:75:e8:a4:
         5f:43:ed:17:c2:ae:55:85:2d:40:b7:d5:6f:b2:b7:b9:16:df:
         58:2e:5e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:07:01 2026 by rpki-client