Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          +mfBvpLxyxXwmtRl4VCIfuUcjukKK6lWYULw84+HmTY=
Subject key identifier:   DD:30:22:17:CC:66:3E:11:E4:75:7D:8D:AF:C5:7F:25:67:F4:0F:37
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       019EC336F377250C06DA759C35B2AF92A1B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          0410
Signing time:             Sat 13 Jun 2026 23:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:18 +0000
Files and hashes:         1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: KpLOOsuWyuLZS0ASrzzIQhpSOIULOrdQk8XDp3lMOUw=)
                          2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:36:f3:77:25:0c:06:da:75:9c:35:b2:af:92:a1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: Jun 13 23:00:18 2026 GMT
            Not After : Jun 14 23:00:18 2026 GMT
        Subject: CN=dd302217cc663e11e4757d8dafc57f2567f40f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:47:a0:90:e1:7b:8d:f3:d0:8f:e6:cb:63:0f:
                    d4:1f:bf:78:9c:40:03:49:f4:2a:ce:49:65:08:f1:
                    b5:b6:f1:72:6d:6c:ac:3d:ae:5d:d2:95:41:4e:fc:
                    af:58:c4:94:e0:8b:10:c3:83:3f:9b:a9:84:fe:aa:
                    cb:63:12:b8:7a:eb:00:8f:73:52:37:56:fa:cd:61:
                    54:e0:fd:0f:26:d3:9a:64:b1:cc:84:56:1e:09:57:
                    36:f5:cd:80:0a:9d:fa:d2:6e:2f:dd:8b:53:23:4b:
                    ef:21:cb:b1:1d:f9:7e:57:6e:5e:65:65:89:54:65:
                    41:30:92:cc:cf:fb:12:b1:67:d6:5f:12:ee:65:28:
                    8b:1b:b9:99:a3:96:a3:a2:1f:c3:87:b0:f4:ec:2c:
                    59:90:ea:39:ea:2b:cd:3c:d2:32:b4:fc:b4:06:f5:
                    dd:59:72:34:d8:58:10:9e:51:d4:ae:a2:a3:72:26:
                    c0:64:26:f6:85:48:a2:41:2a:72:10:5e:16:d3:0a:
                    e3:89:13:6b:a9:e4:a6:30:9b:c4:bb:f4:74:da:66:
                    31:43:fb:02:b6:01:3f:8e:09:72:0d:50:24:f7:83:
                    e4:15:6d:a6:83:65:42:68:9b:5f:f4:45:4e:4a:c2:
                    f8:b8:51:5b:df:28:7f:b6:51:ea:d0:07:e2:1e:42:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:30:22:17:CC:66:3E:11:E4:75:7D:8D:AF:C5:7F:25:67:F4:0F:37
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:72:92:0c:d7:9d:72:6e:c2:da:20:4d:99:a6:6e:33:f6:aa:
         8a:c8:0f:06:bf:fb:7f:08:9d:d1:9d:05:34:af:1c:6b:89:a7:
         c6:5a:57:17:af:0b:4c:e6:e3:94:87:94:97:28:f6:c0:2c:e8:
         0e:04:6e:e1:00:a8:4a:59:38:51:a4:00:69:93:87:5c:b1:86:
         38:60:b6:ee:c3:b6:2c:49:c7:3c:9b:2b:b8:28:1c:e2:b4:26:
         50:b6:1b:1c:a4:60:34:a0:11:65:8c:fc:32:28:a2:41:11:56:
         a8:25:16:16:03:b0:26:94:fd:b7:ba:6e:7f:0c:f3:45:55:0c:
         a3:3e:23:fa:8a:1f:62:b0:0e:ab:0d:76:c0:e6:81:96:9b:07:
         63:0a:cd:cd:2c:ec:56:74:2c:ca:d7:4f:c0:f6:1a:a8:a5:95:
         d8:8a:f0:01:6f:88:b9:b6:8c:46:2e:67:0d:f0:a8:42:c6:9d:
         22:64:d7:9b:55:5d:c0:5d:be:0b:d3:38:f0:45:4c:31:90:dd:
         32:20:2c:f4:6c:6a:c4:b9:ab:2f:d8:8f:29:8d:4c:88:b0:95:
         bc:c5:eb:6a:fa:e7:1f:70:88:84:47:3e:d3:8f:ae:51:5a:a1:
         30:dc:be:68:2e:d8:e6:6c:ec:fc:a9:6c:c2:19:60:e8:6a:e0:
         4d:ff:97:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:39 2026 by rpki-client