Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
File:                     1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft (raw, json)
Hash identifier:          cScjGLGoFYlv37NmNJqPkVe5eNptAXd3hRXMsY8Gxvw=
Subject key identifier:   EC:48:7E:7B:52:64:75:F0:6C:1D:B8:7F:0E:3B:BB:BB:22:25:C4:17
Authority key identifier: FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A
Certificate issuer:       /CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
Certificate serial:       019EC17F8CC8A504226640FD0D7B2D0FC9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
Manifest number:          02C0
Signing time:             Sat 13 Jun 2026 15:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:22 +0000
Files and hashes:         1: 1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl (hash: 7Yk5UUXW66q8poO1DadI3zJafzQ/ZykN+mjKmm0q6OI=)
                          2: pDA7nhW3yNSdUeX1KR6FhLMPZZY.roa (hash: ZZ1m4P8j+XlJcdrV7Ome2UFD4l54PQHH5x2pAoymEag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:8c:c8:a5:04:22:66:40:fd:0d:7b:2d:0f:c9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa5755762dfe4c70cd83b30a13b782c4ffc15f5a
        Validity
            Not Before: Jun 13 15:00:22 2026 GMT
            Not After : Jun 14 15:00:22 2026 GMT
        Subject: CN=ec487e7b526475f06c1db87f0e3bbbbb2225c417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:10:e4:7d:8c:0e:7e:07:08:e2:24:63:ab:dd:
                    a4:b5:01:e6:68:a6:02:ca:46:98:5c:58:c1:63:9b:
                    60:f8:3a:09:38:39:d5:2b:7d:63:da:c1:57:ea:13:
                    e8:0c:b2:58:e9:55:27:c1:c7:4f:98:54:2f:b0:98:
                    3a:41:9b:98:b4:34:8b:84:12:7b:4a:1b:5a:5c:3f:
                    f8:f3:85:0e:32:b4:48:29:55:a5:6c:ab:ab:ec:b6:
                    90:ed:da:7b:ef:99:6f:81:d8:13:8a:16:40:5f:25:
                    c1:75:6f:e5:f0:b7:04:50:e8:0c:f2:ae:b8:d1:57:
                    77:0b:15:4d:75:1e:62:e4:8b:2b:40:60:fa:0e:9b:
                    51:fe:16:c5:2b:a3:6c:aa:4f:57:1b:83:4b:78:0a:
                    67:dc:2e:66:f3:7e:a5:7a:c0:ee:d9:2c:e3:a8:3f:
                    a8:00:2b:7c:3a:d2:28:41:d9:fc:cd:8d:f5:a8:34:
                    d7:b4:99:23:e6:f5:34:5d:04:6e:5e:b6:4a:9b:b8:
                    02:83:a4:a0:02:2f:d7:04:ed:c0:83:ae:07:88:c6:
                    cb:dd:70:40:3c:b2:f5:c0:8f:4c:a0:04:db:75:5b:
                    ce:9c:da:c8:c6:4f:5d:fe:4d:79:95:78:fc:2c:19:
                    82:55:b8:a2:4d:e3:97:6a:38:d9:a3:b1:58:f2:16:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:48:7E:7B:52:64:75:F0:6C:1D:B8:7F:0E:3B:BB:BB:22:25:C4:17
            X509v3 Authority Key Identifier:
                keyid:FA:57:55:76:2D:FE:4C:70:CD:83:B3:0A:13:B7:82:C4:FF:C1:5F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ldVdi3-THDNg7MKE7eCxP_BX1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d59246-953e-423a-9704-931414101a01/1/1-ldVdi3-THDNg7MKE7eCxP_BX1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:46:e5:6d:fb:66:c2:ec:e3:3d:b5:56:1a:e3:1f:d8:80:2c:
         0c:43:a8:a5:a1:9b:ff:a0:74:a4:bc:8e:0c:1a:99:92:fe:de:
         61:f0:1d:7d:46:bc:27:f8:6d:e8:dc:6a:20:f2:18:f9:d2:03:
         76:88:9a:7b:0d:bf:1a:7f:81:18:df:b2:c9:28:a1:12:d9:f2:
         a6:62:dd:9c:f9:fc:25:c7:18:06:64:6e:32:41:f5:15:c1:77:
         c4:15:f3:60:7d:dd:7b:28:de:2f:4d:e2:6b:af:8d:a8:60:27:
         3a:2b:9a:7f:2a:e3:ef:69:f3:8f:37:aa:76:9e:57:87:9d:6e:
         70:83:ce:68:65:2c:43:dd:41:9e:94:d3:23:87:1a:82:51:63:
         5f:c7:af:5d:74:c0:bd:55:06:6c:fa:28:16:fe:10:39:98:7e:
         74:ab:3b:f0:2f:9d:9a:29:29:35:f6:fb:1f:73:0a:05:5d:c2:
         ce:32:98:5f:35:16:5d:d9:66:a2:e8:7e:97:61:56:d9:d8:17:
         d5:c2:dd:85:1d:d7:e0:c3:94:c4:48:36:17:75:8f:3a:e4:50:
         37:32:68:c1:b1:d5:b5:67:04:00:6a:82:87:2b:37:1a:d0:25:
         1a:7d:d2:eb:76:b4:c6:4d:1a:02:93:b7:f5:46:f6:93:1f:79:
         fe:01:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:58:24 2026 by rpki-client