Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
File:                     R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft (raw, json)
Hash identifier:          scbRAYU6VSMM7xMZbAbmb51R/nOBDt4q3W4wbc2i+Iw=
Subject key identifier:   3B:23:11:A9:8C:FF:D5:40:39:FF:78:E7:F6:81:03:0B:1E:92:72:26
Authority key identifier: 47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96
Certificate issuer:       /CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
Certificate serial:       019EC17F79E1178E83FA716BA44FFD185799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
Manifest number:          013F
Signing time:             Sat 13 Jun 2026 15:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:17 +0000
Files and hashes:         1: 1-TqiAazLK9RAar2iXroZHFof6YM.roa (hash: WVVq8CYPuWlLC3tvTr+h2SKeyS4SEjc0OCpY8ivnCV8=)
                          2: R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl (hash: IcaAFjq2XxeFAiE4DVYlS8ZjRFmTeOOUloZpdMU/AZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:79:e1:17:8e:83:fa:71:6b:a4:4f:fd:18:57:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b7c458271ec953c9f0b89c2070b8459aaa6b96
        Validity
            Not Before: Jun 13 15:00:17 2026 GMT
            Not After : Jun 14 15:00:17 2026 GMT
        Subject: CN=3b2311a98cffd54039ff78e7f681030b1e927226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:fa:d4:5e:1b:ce:0e:d7:d5:12:6f:6f:95:
                    bd:95:80:b8:df:65:9e:55:dc:b7:be:68:b6:a5:00:
                    20:b3:3c:03:01:4e:c9:6a:56:fe:bb:5f:d5:fd:4b:
                    b2:4d:68:8c:70:eb:31:dd:4c:78:c3:ea:3c:7b:90:
                    ec:4b:3c:7a:81:95:9c:24:79:4d:6f:18:98:0d:e8:
                    58:09:22:53:10:91:f4:a9:e1:67:2d:cf:39:20:66:
                    b6:99:7e:83:26:a3:e1:cf:16:f3:74:b9:61:77:34:
                    6a:af:56:ce:81:53:9b:27:0e:8f:f9:61:18:d0:40:
                    c7:7b:d5:5e:96:67:ca:3f:a1:4c:69:ca:a3:4a:86:
                    cb:ec:c7:04:39:2d:71:df:90:a4:b9:c5:70:15:91:
                    92:30:71:69:f7:2e:e1:5b:66:ed:c0:42:83:f5:6d:
                    56:91:ac:b3:bb:a4:66:83:49:72:25:54:1b:9a:ea:
                    2f:80:c3:ff:e9:88:7d:c6:e9:8d:a1:f0:55:6b:ef:
                    6b:9b:10:0a:b9:d7:e0:bd:37:f1:98:c8:83:e5:c4:
                    08:36:37:ae:e3:40:ed:c2:38:f3:c1:54:18:52:98:
                    d2:68:81:84:a3:ea:9c:f8:4e:cf:31:0b:ab:4e:c0:
                    29:55:53:b6:34:2d:70:de:8e:c9:7d:e1:a9:2c:59:
                    0c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:23:11:A9:8C:FF:D5:40:39:FF:78:E7:F6:81:03:0B:1E:92:72:26
            X509v3 Authority Key Identifier:
                keyid:47:B7:C4:58:27:1E:C9:53:C9:F0:B8:9C:20:70:B8:45:9A:AA:6B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7fEWCceyVPJ8LicIHC4RZqqa5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/74cf89-6085-41ed-8a8a-393522a51bcc/1/R7fEWCceyVPJ8LicIHC4RZqqa5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:24:e1:18:63:ad:d5:7e:89:c8:5f:e6:eb:f5:45:f5:81:ae:
         a5:96:82:34:67:9a:29:a8:7e:02:a7:ca:66:24:b6:9e:86:5a:
         5d:43:55:ee:cd:65:77:28:07:29:c3:07:7d:67:5e:88:c4:0d:
         75:4f:b7:5c:8a:3e:0e:29:cd:57:e1:91:80:42:8a:88:20:6b:
         d8:28:da:4f:48:68:1e:f2:8d:9f:ea:b0:0a:b1:64:53:df:c2:
         2d:75:b8:58:35:14:c3:4a:50:c7:35:1f:47:aa:cc:d3:3a:52:
         b7:89:c4:4a:e7:57:e8:76:8b:35:9b:77:0c:d0:e7:25:9c:c5:
         04:cb:ba:b0:15:d3:c8:ed:41:4b:bc:36:3e:0e:bf:5e:61:fd:
         1c:21:60:e4:dc:75:84:83:97:8e:6f:98:85:c7:92:1d:99:03:
         a7:aa:5e:f5:bf:ff:cc:4b:1a:79:c7:55:d6:4b:0a:1f:92:39:
         9a:61:74:7c:1d:83:d7:99:9a:e0:46:6e:45:09:b7:88:fc:a8:
         f9:91:fe:e3:6d:b9:7d:94:9b:65:4f:27:5e:36:84:ab:e2:8c:
         c5:36:75:ba:5f:d4:b9:4a:08:bd:e8:51:7e:c3:20:ef:de:eb:
         1e:52:f7:3d:fd:a9:10:ec:02:bb:e4:eb:17:91:d7:65:66:21:
         4c:bd:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:42 2026 by rpki-client