Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File:                     7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier:          g+8ATfZkkvQ3psB87jFJoTQ4QDPFpKsbImK5+KdPKjQ=
Subject key identifier:   94:52:AC:C4:97:E0:E6:76:0C:B4:67:6D:1F:93:79:5F:31:65:73:1A
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer:       /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial:       019EBE113C8428E6873AE77EF1394E7BAB84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number:          101A
Signing time:             Fri 12 Jun 2026 23:01:01 +0000
Manifest this update:     Fri 12 Jun 2026 23:01:01 +0000
Manifest next update:     Sat 13 Jun 2026 23:01:01 +0000
Files and hashes:         1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: ByPPGIDZahkxHCGq4LnM0FAdMX/7aTZVv/ITMQFTcsU=)
                          2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:3c:84:28:e6:87:3a:e7:7e:f1:39:4e:7b:ab:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
        Validity
            Not Before: Jun 12 23:01:01 2026 GMT
            Not After : Jun 13 23:01:01 2026 GMT
        Subject: CN=9452acc497e0e6760cb4676d1f93795f3165731a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:3d:17:d5:41:43:f9:00:6b:1c:35:d4:be:
                    a8:7b:2e:35:41:dc:e5:4a:c0:93:3d:4e:7a:9a:63:
                    c0:9e:44:73:3b:f3:81:db:90:6a:a3:74:bb:17:d6:
                    3c:d9:c7:98:73:15:b1:4d:1f:59:3a:8d:21:11:00:
                    b0:58:1a:34:38:35:0b:d8:e0:ff:af:7b:32:a9:64:
                    d2:69:a3:12:d1:f9:01:95:f5:fe:22:cd:da:8a:da:
                    5b:85:43:a5:d7:d2:a2:30:74:7b:0d:41:95:20:4c:
                    ac:eb:9b:37:98:cb:d5:49:ba:34:89:ae:49:22:3a:
                    5d:ee:9a:26:84:59:66:22:59:73:99:27:fa:14:1e:
                    5f:8c:a5:9e:00:d2:03:24:af:da:14:c1:06:90:0e:
                    aa:ff:4f:c5:b1:ce:b8:88:71:a7:ec:f2:22:fb:0b:
                    82:7a:f5:22:5d:f5:e8:f3:e5:15:bb:44:9e:09:ad:
                    e1:2c:df:1f:1d:e3:1a:4f:32:69:aa:74:f4:26:23:
                    9f:19:43:77:cb:36:f9:33:49:d6:96:4c:26:e9:90:
                    8a:64:d2:62:fc:82:67:40:ce:d8:1c:ef:3d:87:e9:
                    bb:76:0e:e0:5d:77:25:72:31:a0:57:d7:96:b7:36:
                    99:46:8a:34:ea:23:0b:43:d0:19:8b:d2:cf:18:31:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:52:AC:C4:97:E0:E6:76:0C:B4:67:6D:1F:93:79:5F:31:65:73:1A
            X509v3 Authority Key Identifier:
                keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ce:5e:60:ae:aa:da:52:72:43:16:90:9a:56:89:c6:ed:8d:
         fc:2a:72:5b:be:af:e4:5f:a9:ad:75:e8:cf:fd:52:62:f8:c6:
         fe:5f:1b:37:27:d0:ac:f1:f2:0a:4d:ce:71:27:c0:e1:8b:34:
         60:72:18:5e:76:99:1d:56:62:61:ac:94:84:bc:e9:09:fd:0e:
         aa:46:e3:b2:60:1d:1a:80:0f:c3:ad:fc:9b:d2:96:a3:c3:ae:
         12:00:13:38:38:d2:8a:65:0d:27:52:66:86:d2:61:d3:1f:38:
         1a:40:ce:3b:b2:53:1b:b4:ec:d3:5f:54:ad:9c:be:f0:de:4a:
         a6:8d:68:f8:b7:e1:86:91:1d:c5:5a:55:a9:1b:2b:54:17:cc:
         ee:72:21:57:35:fe:5f:29:79:1b:39:c7:89:11:8f:06:9d:da:
         57:c1:13:4e:5a:82:af:6b:84:a4:15:9b:d6:5e:f5:c7:6c:dc:
         ed:a3:2a:c4:40:01:5c:2f:1a:c9:5d:db:15:89:67:cd:83:c7:
         3c:5b:d3:65:d2:72:10:7d:47:ff:1c:b5:c8:de:34:73:5c:aa:
         20:3e:99:9b:5b:1d:01:fd:39:e4:74:7c:05:36:0e:3c:cd:dc:
         ac:63:72:30:1a:19:16:7a:e6:2f:c6:63:e6:53:e5:de:ad:93:
         a6:93:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:25 2026 by rpki-client