Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File:                     15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier:          M+IDQwyEIzghj4l1H+sv+6xmtJooGlX9fIoo7/3ckHA=
Subject key identifier:   77:25:AA:E0:AD:63:94:B4:70:09:82:91:5B:08:76:B5:E5:BC:A4:87
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer:       /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial:       019EC1B716F2526A61EE06950E7E62D5C21F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number:          09DD
Signing time:             Sat 13 Jun 2026 16:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:02 +0000
Files and hashes:         1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: Sz9ENK0Iyo4vbWtItrut43/Hhzo1Q+3Vx5VrTWZgrPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:16:f2:52:6a:61:ee:06:95:0e:7e:62:d5:c2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
        Validity
            Not Before: Jun 13 16:01:02 2026 GMT
            Not After : Jun 14 16:01:02 2026 GMT
        Subject: CN=7725aae0ad6394b4700982915b0876b5e5bca487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:31:ad:71:8d:26:aa:3f:1b:ca:c3:cc:f6:
                    a6:cb:1f:1b:70:aa:6a:20:19:72:0a:f8:4d:ed:70:
                    a5:14:15:fe:43:89:b4:7e:13:fc:f1:44:c2:bf:3c:
                    74:04:7c:66:2d:aa:57:ed:ed:ee:cf:ea:c6:2b:e2:
                    58:20:07:fc:5a:0e:7e:a7:73:99:83:2f:fe:be:3f:
                    3f:54:fc:e1:5c:3a:65:45:ae:00:80:45:0e:30:b1:
                    f9:1e:d9:38:34:cd:94:a0:ca:83:87:7d:e0:67:5e:
                    18:4c:d2:da:12:cd:4f:75:4b:80:a9:e4:06:67:09:
                    ea:3b:d1:57:47:ff:af:be:5a:49:40:c7:28:56:56:
                    19:ff:34:9c:46:b1:33:6f:80:66:ae:a6:d1:90:11:
                    fa:b9:87:1f:36:6a:44:f2:a6:03:3f:00:df:24:cb:
                    83:81:19:08:cb:76:da:e8:70:ce:17:7a:e1:2e:86:
                    68:88:d0:c3:bf:3e:43:02:e1:88:94:95:ba:ca:1c:
                    49:f9:54:d4:bd:eb:94:a3:12:07:f6:2e:ba:f2:c5:
                    bf:89:b9:9f:f6:9a:e7:a8:65:37:da:0d:88:94:cc:
                    d7:cc:fb:b6:3e:df:20:7d:85:22:ce:1a:8c:76:9c:
                    07:32:66:06:43:cd:9f:84:eb:16:bd:a2:1c:ab:1d:
                    9e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:25:AA:E0:AD:63:94:B4:70:09:82:91:5B:08:76:B5:E5:BC:A4:87
            X509v3 Authority Key Identifier:
                keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:ae:fd:de:fb:1c:73:af:1f:da:ad:0d:85:37:88:71:8d:
         03:94:a7:b5:f8:a6:c1:2a:71:05:17:3e:6f:f4:02:56:bb:b7:
         61:b2:71:a7:53:c7:1d:b5:6f:30:8e:e6:e3:19:fe:20:63:a0:
         65:4c:a3:cb:90:41:f1:96:0d:ec:5a:b8:cc:43:ed:58:61:db:
         73:8b:2c:87:18:9d:cd:fc:c3:ab:1a:73:8a:f0:fa:5f:b7:4a:
         2c:e6:df:eb:02:7e:11:74:36:79:73:40:60:e9:49:63:ca:2f:
         21:cf:16:2b:16:0c:50:2c:08:ea:96:4d:0f:24:70:41:3f:b4:
         1b:f7:36:a1:3c:9c:29:2d:d3:6b:38:fd:05:e8:a7:62:f5:85:
         d3:62:c1:20:43:8d:f2:fb:1f:6d:16:6a:46:60:98:b6:53:d1:
         e8:c4:71:8d:79:f8:9d:17:fa:db:b3:53:41:1c:23:82:b2:c6:
         40:5f:1a:c9:12:14:5b:67:80:a1:a8:b4:35:87:99:f6:74:b3:
         ed:7e:21:9f:01:23:10:dd:7d:77:ef:12:d3:49:1a:85:a9:0f:
         3c:7f:b1:60:9f:b8:83:69:f3:e2:2e:90:78:2f:5d:fb:16:3c:
         dc:ec:b6:5e:5c:cf:01:27:d3:53:df:40:7a:e4:07:5e:0b:7d:
         d8:66:67:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:37 2026 by rpki-client