Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
File:                     1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json)
Hash identifier:          2noK7p483x8RGnSg6P+T4fYaF8uuTMU1ei7NAU/GjK0=
Subject key identifier:   BF:65:03:95:72:61:17:79:07:10:0F:3D:E9:E2:32:9D:47:C3:A9:9D
Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Certificate issuer:       /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Certificate serial:       019EC2C93925E71A74C163464695B9A0D35D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
Manifest number:          0835
Signing time:             Sat 13 Jun 2026 21:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:27 +0000
Files and hashes:         1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: MdPc9u/UBNukxiAdZyejXACjRPDJ5AgXPTsCmprKCv4=)
                          2: UrtdSIofhaNFKk3JSuwNs4gGVYM.roa (hash: ggNMIGKU56jLb1aZj1uZ1UliAG9bzA5REzJSwfmL/7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:39:25:e7:1a:74:c1:63:46:46:95:b9:a0:d3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
        Validity
            Not Before: Jun 13 21:00:27 2026 GMT
            Not After : Jun 14 21:00:27 2026 GMT
        Subject: CN=bf6503957261177907100f3de9e2329d47c3a99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:ba:91:ef:78:47:3b:01:03:34:27:53:ac:
                    87:02:c6:42:55:bc:c3:2d:51:86:df:f9:26:4d:d7:
                    76:7f:16:98:6a:bc:ba:5d:41:d0:a5:05:f0:b1:e1:
                    45:b0:f2:83:5d:57:44:fd:da:f9:7f:3e:cf:70:a5:
                    c7:17:0b:f0:6f:7b:3d:92:11:43:4a:43:c1:ec:01:
                    fe:cf:44:15:06:23:71:0f:88:29:0e:0e:37:89:7d:
                    b8:78:f5:4c:0d:59:06:0f:33:f8:8a:d4:0d:85:ba:
                    37:3a:b8:96:ca:f1:ae:eb:98:68:66:3e:4c:3a:9e:
                    28:6b:5e:8d:39:27:53:4a:7a:f9:0d:5d:30:eb:f6:
                    0f:87:d3:19:9b:86:9e:59:66:70:57:f6:92:12:19:
                    af:3e:7f:5a:b7:96:a7:3d:86:a3:47:fc:9d:2c:a2:
                    54:99:3d:a3:09:aa:87:cb:08:af:0d:ca:16:86:2e:
                    d2:72:68:d2:10:15:02:a7:65:45:05:24:1c:b9:c6:
                    18:73:d3:3d:e5:68:91:3a:e8:84:2b:9c:a0:4f:5f:
                    58:33:df:4e:38:a5:76:4f:73:ea:bf:df:4e:5b:e4:
                    45:c9:ce:f2:54:1c:32:14:f8:be:87:8a:68:19:d6:
                    57:2d:87:55:a3:ec:5a:c7:aa:a9:c1:7c:57:c8:f9:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:65:03:95:72:61:17:79:07:10:0F:3D:E9:E2:32:9D:47:C3:A9:9D
            X509v3 Authority Key Identifier:
                keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:81:f1:c0:43:94:fe:7e:3a:d6:e8:07:4c:97:97:15:cf:6b:
         38:07:08:ef:21:b1:e2:1b:6f:b6:45:5d:2e:a3:26:ee:bd:e0:
         47:0b:a7:45:83:81:59:c0:1e:8f:f3:2e:62:52:a5:50:42:a1:
         93:3e:b4:7c:e3:27:3f:60:4b:12:61:f9:15:2f:7c:b4:78:d6:
         96:39:e1:99:cd:40:4a:09:5e:94:ae:5c:42:e1:fc:da:48:bd:
         4f:cb:3f:f7:2b:c8:a2:88:2f:46:6a:e5:1a:0c:d5:36:6d:79:
         d3:f6:bf:d9:f8:be:66:dd:b8:9f:e4:d6:99:4c:04:6c:f4:08:
         82:8d:8e:cb:4f:34:d1:91:71:90:dc:04:13:a0:f0:97:c9:54:
         7a:87:f3:dd:e2:48:3d:a8:51:fd:6e:f0:7e:a3:18:47:31:57:
         37:4c:73:3d:00:5b:22:fe:11:43:c8:ce:ec:c8:fc:e3:78:3a:
         3c:e7:43:cb:02:cc:d8:20:b7:de:40:29:d7:df:40:72:57:6d:
         9d:90:67:fc:77:02:05:f8:52:3b:a7:d5:d4:a4:73:be:f3:2f:
         98:f8:4f:ee:33:38:ad:73:7b:6b:eb:3d:ca:63:ed:30:7b:3d:
         56:de:0b:99:21:02:ec:6a:71:cc:85:f5:58:20:c9:6f:1c:59:
         93:d2:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:10:14 2026 by rpki-client