Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File:                     we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier:          Hr9DY+b8uEr9M9uOoRjCmBlA+TAENPl7ZAGkerMOQzM=
Subject key identifier:   73:C8:71:7E:BE:49:B9:85:5C:25:A9:43:08:2A:49:DD:A9:4D:BC:9D
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer:       /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial:       019EC17FB0A57E8EDE05BCD7F4C46B80FE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number:          15D5
Signing time:             Sat 13 Jun 2026 15:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:31 +0000
Files and hashes:         1: HadOHOP9GZgkMpWJH9CTmgirjks.roa (hash: iMPB2p7JTsdMOVem1W2GUgD445+oUnE8KP8HJy7laSM=)
                          2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: YAtTN48qYRYdpcwVgoL2zkzXQYTntlLrAG6dBlwU9IQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:b0:a5:7e:8e:de:05:bc:d7:f4:c4:6b:80:fe:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
        Validity
            Not Before: Jun 13 15:00:31 2026 GMT
            Not After : Jun 14 15:00:31 2026 GMT
        Subject: CN=73c8717ebe49b9855c25a943082a49dda94dbc9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ed:c0:cb:fe:67:ba:6e:8b:53:b6:fa:7b:8e:
                    13:c3:12:cf:54:84:03:43:29:07:5c:67:ed:3b:07:
                    f9:13:0e:fc:b1:2d:04:02:ce:84:12:49:7f:6d:60:
                    d4:ae:be:9e:23:24:47:62:81:41:ff:18:39:a7:95:
                    d8:b8:f0:fd:53:fc:49:92:c6:98:f7:96:25:29:d3:
                    34:ef:47:b8:23:ac:27:19:bb:91:06:25:96:81:32:
                    75:9b:12:84:0c:10:8f:2c:22:4e:f8:0b:54:e1:ee:
                    32:58:d4:d2:fe:f3:35:ef:85:a7:45:7a:31:81:c3:
                    60:4f:95:a8:32:2f:f1:eb:16:52:ba:5d:dd:1c:e9:
                    d7:23:1c:99:28:e9:a7:fe:ca:bf:29:12:8b:a5:d0:
                    31:a2:9f:f3:f9:0d:2a:02:f0:4e:e5:2d:47:1e:e9:
                    df:47:20:95:76:a0:b2:60:f6:2b:fa:fb:85:a5:6c:
                    19:9a:d1:d9:7d:7b:b5:5c:22:ef:0e:2d:54:e5:08:
                    96:2c:87:37:24:c8:7e:b4:c7:9a:78:8d:35:2e:91:
                    99:1c:65:2d:71:27:5e:50:be:a4:27:c7:bf:0e:52:
                    d0:73:2e:fd:40:29:d0:ba:95:8a:23:92:4f:16:80:
                    1f:d5:fe:f7:50:d5:81:78:e5:7c:af:f5:43:ce:7b:
                    61:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C8:71:7E:BE:49:B9:85:5C:25:A9:43:08:2A:49:DD:A9:4D:BC:9D
            X509v3 Authority Key Identifier:
                keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0d:5a:e4:aa:e6:b0:b9:de:30:1c:b2:75:85:f1:6d:e5:b4:
         48:5a:5f:02:b4:05:39:63:96:ff:13:59:a8:13:1a:1c:e9:18:
         f8:63:82:3c:d5:e0:69:21:97:fc:ee:b6:dd:d8:e0:5f:6b:1e:
         cf:56:43:6a:b6:dc:31:56:90:45:da:3b:44:27:14:d3:e7:9d:
         35:07:cb:6e:0a:b6:56:8b:c0:77:c8:26:ab:02:37:84:3e:db:
         48:a8:d9:9b:6b:33:0e:06:46:80:fc:56:d8:4d:76:56:ab:11:
         ec:fc:1f:96:8c:5e:41:30:03:59:64:8d:1d:72:88:4f:a4:b9:
         23:44:2a:2a:f0:f8:49:06:c1:56:9a:0b:c4:fb:8c:c1:28:cc:
         74:8b:96:fd:65:09:56:df:80:84:4d:f6:7f:35:dd:53:c8:4b:
         cf:1e:32:e8:ed:a9:34:ac:59:62:31:37:e3:9f:7e:3c:59:e8:
         9f:8e:3c:14:96:7d:32:47:77:9c:af:69:2a:59:06:ff:21:30:
         83:76:4a:03:83:dd:86:33:25:98:ed:25:df:ba:80:fd:3f:11:
         fe:7f:fa:42:ea:17:06:52:d0:7a:75:7f:f1:96:9c:8c:2a:e4:
         91:15:01:45:5b:48:65:2e:c0:df:b6:12:5a:65:67:b8:9c:27:
         e1:77:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:22:23 2026 by rpki-client