Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
File:                     II3G2-Xnc9eq1wBdbP8m5HFDyng.mft (raw, json)
Hash identifier:          ge3DpJAruuDlC0xszIPoB25Uv/kmNWhJjxyI7kVrQA8=
Subject key identifier:   D6:B5:E3:8C:D4:21:37:AE:09:FB:37:10:74:BE:A2:73:FD:23:18:A5
Authority key identifier: 20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78
Certificate issuer:       /CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
Certificate serial:       019EC2CA125B2DBC35A8DFFAED0F972AD785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
Manifest number:          013B
Signing time:             Sat 13 Jun 2026 21:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:23 +0000
Files and hashes:         1: II3G2-Xnc9eq1wBdbP8m5HFDyng.crl (hash: 0RQ93Cq3ZTTUV4RDBRHwwER9hoYwnXBF5WvQVnkk8wE=)
                          2: VD6M1TalIBGQDQhDlzk5W__Y3uc.asa (hash: jjpCurqNQ5oMU8caZ7eCROEYaNl81c0Drp5VvZH2RWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:12:5b:2d:bc:35:a8:df:fa:ed:0f:97:2a:d7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dc6dbe5e773d7aad7005d6cff26e47143ca78
        Validity
            Not Before: Jun 13 21:01:23 2026 GMT
            Not After : Jun 14 21:01:23 2026 GMT
        Subject: CN=d6b5e38cd42137ae09fb371074bea273fd2318a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:af:49:58:b0:ac:3e:1f:84:04:2d:1e:aa:
                    67:1b:b7:e0:f8:66:ea:7f:ef:b5:01:1d:f4:07:16:
                    b1:1a:a6:8e:03:19:25:36:bb:3c:fa:29:81:0f:ab:
                    be:f2:3c:ab:cd:64:c0:6b:cd:e9:e3:63:06:d4:27:
                    53:37:cd:81:5f:18:77:78:94:d4:58:6d:d5:10:2c:
                    a3:37:6e:6b:ad:66:5d:17:55:cc:f1:d8:57:0e:9a:
                    cd:d0:1d:1c:e0:5d:22:f0:40:ef:22:03:e4:de:22:
                    a4:4f:c8:fb:49:f7:9c:8a:f0:4c:7a:3c:c6:8a:b9:
                    b7:87:e2:71:7d:34:1c:4c:30:0c:9f:5d:ae:da:27:
                    eb:5a:d7:7a:a6:e7:36:8c:31:c9:dc:6f:2e:72:6d:
                    36:7f:fe:ea:25:fe:51:95:05:a5:65:98:91:13:48:
                    0e:b0:86:38:86:91:70:0e:73:75:2d:48:ed:07:8c:
                    63:21:74:5b:b7:e7:92:d6:14:f1:f2:c6:a4:08:42:
                    9f:70:b0:bf:d9:61:ab:04:ae:14:4c:93:b8:ad:4b:
                    02:64:c1:83:11:6e:67:00:3d:92:50:ed:51:47:da:
                    44:a2:f2:87:d0:ef:74:c1:9b:76:47:c1:fa:08:36:
                    93:fa:5b:39:30:9c:db:9b:cb:47:2c:47:02:13:2e:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B5:E3:8C:D4:21:37:AE:09:FB:37:10:74:BE:A2:73:FD:23:18:A5
            X509v3 Authority Key Identifier:
                keyid:20:8D:C6:DB:E5:E7:73:D7:AA:D7:00:5D:6C:FF:26:E4:71:43:CA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3G2-Xnc9eq1wBdbP8m5HFDyng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/7969ab-d129-4a6b-a1f1-f58a2546491a/1/II3G2-Xnc9eq1wBdbP8m5HFDyng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:7b:69:63:e9:aa:96:28:c1:d4:0e:53:39:21:dc:1f:91:6b:
         16:49:9d:e6:0b:94:49:f1:ad:f8:c0:30:45:99:3d:34:e6:41:
         d7:6d:e3:c3:2a:94:59:9a:96:ea:14:57:a8:d5:4b:86:91:c6:
         be:16:79:71:9a:01:8a:c8:ba:8d:fd:57:94:7e:97:09:de:e1:
         41:49:37:99:02:94:66:da:f5:bb:70:71:25:f7:e7:b9:da:dc:
         27:c2:40:04:0d:90:5a:86:1b:ce:f4:67:d3:66:a7:a8:0a:6a:
         98:3b:ed:53:83:a2:c7:77:4c:fe:cc:49:e8:71:08:6e:0c:1c:
         3b:7a:5f:43:8e:ce:e4:7c:ec:ce:d6:bc:95:78:f0:e0:aa:cb:
         53:52:95:75:7b:0b:17:af:0b:20:e6:1c:d5:78:dc:81:8e:5b:
         cb:67:5f:83:03:9c:f8:05:ac:15:e5:80:95:8d:65:b7:3b:94:
         76:28:c7:2c:3e:6a:dd:38:66:c6:70:f9:7b:8a:ca:00:29:81:
         0d:01:88:d0:33:95:e6:75:3a:1c:9c:e8:f3:c7:53:6f:91:16:
         c9:28:0b:7b:3f:d5:b9:96:bf:fd:bc:4b:43:53:e5:c9:a9:e8:
         90:97:97:6b:e9:11:ae:25:76:6c:aa:f6:29:90:ed:d1:a6:70:
         46:20:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:29:51 2026 by rpki-client