Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
File:                     gRVc2PIuywFPiq1xDAcMfofLCi8.mft (raw, json)
Hash identifier:          S3XX0T6veE9QWBS24FkZk/sE2Lt5/9BBFaMN3rovFe0=
Subject key identifier:   14:F6:D8:AF:C9:3C:29:18:B0:BC:FB:6C:46:C3:B3:BD:8A:3F:4F:FF
Authority key identifier: 81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F
Certificate issuer:       /CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
Certificate serial:       019EC3DCB09411670FD35919A56309C66907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
Manifest number:          B1
Signing time:             Sun 14 Jun 2026 02:01:20 +0000
Manifest this update:     Sun 14 Jun 2026 02:01:20 +0000
Manifest next update:     Mon 15 Jun 2026 02:01:20 +0000
Files and hashes:         1: gRVc2PIuywFPiq1xDAcMfofLCi8.crl (hash: jtthjFgLsSKqbnxNdc76JllS2ujfjvsLFVbHcovp3XE=)
                          2: uDc2pV6zqfjwI-4br5JK6tiGG5E.roa (hash: bNNvOAco8leAwP4SgeSGZ8jpQ0jHOezRglGnSiHe4TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:b0:94:11:67:0f:d3:59:19:a5:63:09:c6:69:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
        Validity
            Not Before: Jun 14 02:01:20 2026 GMT
            Not After : Jun 15 02:01:20 2026 GMT
        Subject: CN=14f6d8afc93c2918b0bcfb6c46c3b3bd8a3f4fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:fd:e4:d1:da:b9:2e:ae:10:28:99:39:51:
                    7a:58:93:ae:ba:ca:db:7c:20:87:86:22:d1:92:ae:
                    82:ab:de:53:fd:4c:99:3e:82:54:5c:6d:5d:bf:47:
                    ef:59:a4:cd:60:e7:a1:55:87:dc:da:c4:b2:bd:82:
                    cf:9d:6a:24:ea:31:a9:12:78:6e:68:49:b9:dd:44:
                    ee:a5:6f:f3:71:c1:fe:d6:c9:94:35:8d:f3:c3:c0:
                    0d:4f:d5:4a:03:24:d3:06:5c:68:c7:8a:7c:2f:9b:
                    1a:df:4f:97:27:b7:20:60:73:f1:b9:b4:2a:63:8b:
                    c3:b1:8c:14:66:29:c7:cd:02:ba:f1:68:4b:09:90:
                    a0:47:52:34:f2:c0:ca:10:5d:32:a0:7b:64:b2:72:
                    80:7e:5e:40:eb:6d:cd:57:35:62:c6:9b:69:8b:a2:
                    50:0c:1b:26:4e:f5:68:2f:09:82:91:34:c0:b8:f7:
                    8d:3d:f2:65:bd:4c:7b:a9:8b:51:93:2a:09:48:b6:
                    ce:b9:64:b2:a4:fb:09:fe:d1:15:b3:94:51:26:99:
                    03:fd:ca:d9:28:f4:92:59:c3:83:6a:1b:56:b9:4f:
                    44:6a:c2:b3:ac:9d:e7:0c:ba:d7:4b:dd:29:5d:2f:
                    d9:03:59:e0:8c:e7:92:cd:65:13:6f:03:52:b7:e1:
                    c3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F6:D8:AF:C9:3C:29:18:B0:BC:FB:6C:46:C3:B3:BD:8A:3F:4F:FF
            X509v3 Authority Key Identifier:
                keyid:81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:dc:cf:98:6c:7e:d9:b5:2d:ee:5b:0b:b9:95:9e:0c:88:4f:
         c7:29:a7:37:06:ad:b2:bb:8a:d4:08:21:88:22:ec:34:b4:c4:
         3f:17:76:4d:87:83:46:4a:e1:44:07:f6:d8:78:60:2d:67:7c:
         e1:df:65:a1:17:91:24:55:28:e4:ed:59:93:40:15:8c:38:38:
         be:cb:68:92:50:b5:3f:ac:2e:bb:57:40:ae:bb:8f:71:89:4a:
         52:0c:a2:b5:04:69:ac:7a:64:fb:74:2a:cd:f8:64:93:c0:92:
         0c:97:d3:57:b5:fb:9e:bc:69:22:df:d1:a1:3c:35:c0:41:ff:
         2b:ff:06:ea:9d:40:ca:1f:f7:91:97:da:4f:c6:02:aa:13:6e:
         37:58:c7:c3:b8:2e:6f:f7:8c:bf:d7:a8:b0:33:65:21:e1:7d:
         4c:19:ea:0d:ab:0a:b2:82:34:c8:3d:3d:ab:9d:96:25:1b:2b:
         f5:01:ba:75:c8:1a:26:c5:d8:35:21:70:0f:59:b6:3b:4c:79:
         a6:26:ba:bf:9e:73:f0:15:ce:f1:44:94:b2:68:f3:ad:85:b8:
         e0:40:5d:19:b0:16:cc:ce:a3:b4:9b:57:8f:30:90:eb:72:57:
         32:6d:4c:46:b8:17:da:70:42:4d:9b:3d:e7:8e:46:2a:75:22:
         11:a4:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:04 2026 by rpki-client