Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File:                     Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier:          tnXJlE4vwZ0p6eqHJ+ofiietOVBVl/ADFcfRfFn4+Vc=
Subject key identifier:   3C:98:BE:E6:D5:EB:B2:82:03:C7:2C:BB:82:06:D0:FA:6B:E7:F9:38
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer:       /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial:       019EBF91A0F50D0A5E919255985E113B2D36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number:          15EF
Signing time:             Sat 13 Jun 2026 06:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:52 +0000
Files and hashes:         1: N0lWMYy9L6tUgt5C_ALrdVgjFpM.roa (hash: 3TxHIvizHgvT9zapL1jqZMumyRmsqmWLMCRlhTI/E5A=)
                          2: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: NViSFV1TotqinqA2N05wAxyG6mEv+peWjqv/9Tq+Dc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:a0:f5:0d:0a:5e:91:92:55:98:5e:11:3b:2d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
        Validity
            Not Before: Jun 13 06:00:52 2026 GMT
            Not After : Jun 14 06:00:52 2026 GMT
        Subject: CN=3c98bee6d5ebb28203c72cbb8206d0fa6be7f938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:7f:13:60:12:06:4b:4b:b3:b9:b6:9a:95:
                    96:88:77:bd:5f:67:9e:d3:81:9d:b3:05:96:b0:a4:
                    a1:15:48:2b:fe:5c:fc:82:d5:9a:28:90:16:20:fa:
                    70:52:3d:87:63:a1:10:b7:97:5e:35:7c:89:4e:c2:
                    73:55:dd:0d:69:72:09:d7:1c:34:7f:03:3e:c3:b6:
                    93:d3:4b:1d:b3:25:06:91:d1:dd:52:b7:49:bf:d8:
                    62:5c:7b:5e:c9:90:20:71:2c:3c:58:78:b6:63:43:
                    4c:ff:70:e1:3b:b2:a2:30:20:36:61:18:16:c9:21:
                    db:44:20:b6:4f:09:2c:4d:65:84:e7:b4:f4:06:88:
                    e1:9d:33:d9:49:52:78:c1:80:ca:cf:f5:e6:06:b0:
                    08:18:c3:85:c5:df:a8:0b:7c:c7:6a:e6:31:19:99:
                    70:2d:fb:99:60:05:7f:9a:ec:93:ff:36:82:1e:5f:
                    ed:7b:b5:01:10:dc:23:00:c1:b8:39:ad:49:83:c5:
                    f7:4b:97:e2:32:7e:97:93:c2:03:e8:ea:65:2d:f2:
                    4f:a2:f0:de:e9:6a:f1:b9:27:e8:9d:0a:fa:0d:d5:
                    3a:d6:a3:b2:33:0d:28:11:ce:14:f7:e0:9a:aa:e7:
                    5d:ed:b8:81:db:c5:ec:d1:7d:78:47:25:4d:21:27:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:BE:E6:D5:EB:B2:82:03:C7:2C:BB:82:06:D0:FA:6B:E7:F9:38
            X509v3 Authority Key Identifier:
                keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c1:09:06:63:60:b9:f1:f9:32:1c:51:a7:bb:cc:58:4a:57:
         91:d2:1a:5c:ef:3b:41:f5:ff:cb:ca:c2:4d:20:a1:ad:a7:1e:
         fd:80:43:ef:78:39:6c:68:22:c9:30:f7:08:dd:ad:a1:db:31:
         12:d9:54:95:2e:55:66:46:c0:48:b2:44:fe:82:01:27:10:66:
         37:4f:e7:42:f5:d2:d0:35:49:3d:12:29:39:56:5f:3e:dc:b8:
         49:6b:5f:61:d1:f2:71:7f:be:8e:74:dc:df:9a:89:a5:46:5c:
         b9:73:da:7b:69:d3:eb:a6:34:c0:14:d0:32:4c:24:8e:f9:38:
         39:ac:46:19:b9:3a:83:bc:75:96:32:3b:bd:ad:ec:3f:29:b3:
         57:40:b4:fb:e5:1e:60:3d:9d:97:1f:c4:b6:d3:69:30:fc:51:
         76:76:87:dd:00:2d:57:4c:fd:6f:69:1e:91:1d:61:13:d7:4b:
         9b:28:f1:e3:7e:ec:0b:75:4b:36:31:d4:41:24:71:70:f8:ab:
         02:3e:ba:ba:05:cd:e0:dd:f8:9d:5b:8b:55:54:d3:26:3b:1f:
         c5:12:c0:56:77:57:7e:1a:8d:95:86:20:7f:fd:fc:93:26:83:
         99:26:d5:8e:fc:fa:28:33:d6:8f:74:04:ba:09:eb:88:8a:e0:
         27:9b:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:22:00 2026 by rpki-client