Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
File:                     RV9UXiqU8FHOuPgPRGwcthwObI4.mft (raw, json)
Hash identifier:          R6V21ee5U+R97sxBRWVwjJkZG9tak0E8LUhTI+MNIys=
Subject key identifier:   3E:02:A5:B3:B7:A5:A7:FC:7A:FD:7D:B1:B9:A3:B1:C4:C4:BA:67:77
Authority key identifier: 45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E
Certificate issuer:       /CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
Certificate serial:       019EBF9140B49AC8E17168FD66153A109811
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
Manifest number:          037D
Signing time:             Sat 13 Jun 2026 06:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:27 +0000
Files and hashes:         1: RV9UXiqU8FHOuPgPRGwcthwObI4.crl (hash: QVrh3HA7pM4o+fGBEBAI+/8xvI1Y0OoNNq56U4GGsAA=)
                          2: TGnGTCkP1dTeSG5Z0jeGksx2_TM.roa (hash: 4RJjvyKtkRooo1Te20TythHJtDrbG5VCS6d6MKrm0hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:40:b4:9a:c8:e1:71:68:fd:66:15:3a:10:98:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
        Validity
            Not Before: Jun 13 06:00:27 2026 GMT
            Not After : Jun 14 06:00:27 2026 GMT
        Subject: CN=3e02a5b3b7a5a7fc7afd7db1b9a3b1c4c4ba6777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:67:6c:a6:31:3f:0e:9e:5d:78:b0:93:b6:a7:
                    e7:9e:47:6d:2b:f8:0e:af:03:8f:f1:5f:47:3c:a8:
                    41:d6:9e:21:c7:cc:fe:41:89:89:ba:62:d7:5d:b9:
                    17:97:a2:5f:c6:3f:71:1d:d8:4b:6a:0d:c2:61:6e:
                    30:e7:e1:aa:bf:ba:32:8f:2e:a0:68:7a:c7:89:91:
                    b2:bc:0c:f8:15:2b:27:60:1b:e4:5a:8b:48:6b:a2:
                    7e:22:92:30:3b:79:f7:41:09:7f:fd:81:9c:d5:fc:
                    fa:8b:26:95:4f:7e:e0:1b:68:03:cc:2d:87:bf:2e:
                    bb:be:e5:1f:21:cf:42:e4:29:4d:17:a1:35:b2:c3:
                    cb:0d:8e:d9:b9:ca:ad:8e:c0:5f:14:78:e6:e2:a1:
                    87:fc:9e:98:82:e6:7a:8d:af:81:b7:2a:53:3d:e3:
                    8d:b7:91:ba:83:9f:cc:d6:9f:6f:b7:7c:1e:e0:42:
                    66:ae:82:34:5c:06:04:9c:10:9b:80:10:fa:7a:f1:
                    a3:a6:76:34:27:48:26:d0:53:2a:24:ad:24:f6:ff:
                    23:71:f2:d5:4d:a8:c7:6a:fa:fc:13:ed:41:4e:47:
                    9f:50:0f:27:b8:f6:a5:68:49:a9:6d:5e:b8:4d:a2:
                    25:4e:82:83:c0:23:dc:59:92:6e:34:55:56:0e:e9:
                    89:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:02:A5:B3:B7:A5:A7:FC:7A:FD:7D:B1:B9:A3:B1:C4:C4:BA:67:77
            X509v3 Authority Key Identifier:
                keyid:45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:a5:a6:22:0a:4f:0a:de:aa:81:02:fd:55:22:11:4d:59:
         a6:38:5c:c0:a7:c3:47:6d:99:f3:1f:6f:c5:31:21:ca:29:71:
         3b:ec:73:55:d1:f0:bb:02:13:1f:fb:a7:b5:b2:c0:c1:c6:f9:
         c7:4f:12:59:51:76:13:8e:a9:a0:b9:1d:50:ad:60:44:9b:fa:
         ba:ee:00:18:45:d7:a0:e4:40:2a:f0:fa:be:5d:79:c3:fe:9d:
         85:10:79:e5:30:f2:32:6f:3e:e4:68:86:27:61:4d:ea:e6:ae:
         23:4f:dd:48:2b:f8:0d:e4:d1:da:f0:a7:2b:9b:50:46:16:6d:
         e8:7a:41:24:e0:d0:75:a8:28:17:17:2b:de:3f:5a:c2:29:ab:
         55:3e:05:63:8c:2d:1c:09:5e:bc:77:31:3b:ff:36:09:52:3f:
         4e:0d:dc:f8:56:3d:40:56:f4:84:9e:46:55:58:73:42:3c:d7:
         1b:e3:ac:31:8e:f8:02:7d:1a:08:79:26:02:ae:fc:99:88:34:
         c0:c6:01:78:30:ec:bd:95:3d:64:f5:ad:f5:db:22:f8:93:19:
         ac:83:69:a2:c8:5d:c4:f1:ac:af:82:2b:e6:25:47:73:d0:26:
         ae:54:56:f6:28:c3:8c:49:b4:c8:8b:0d:cf:81:35:5a:a9:95:
         4f:e6:90:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:19 2026 by rpki-client