Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File:                     iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier:          nhQ7ur/0ddZC0k+a37UTiB0mtc0znK6JUmNu2POGem4=
Subject key identifier:   7F:71:8D:E6:D8:1B:BD:DD:44:80:2C:DF:C9:3F:9A:74:1C:D3:8D:69
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer:       /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial:       019EBDDABB524A5AE9E08D601502B1133281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number:          01A5
Signing time:             Fri 12 Jun 2026 22:01:29 +0000
Manifest this update:     Fri 12 Jun 2026 22:01:29 +0000
Manifest next update:     Sat 13 Jun 2026 22:01:29 +0000
Files and hashes:         1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
                          2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: tX1UPzHXSeE+zy1csWRmmlsbXswi5U1H+CD9yg84mB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:bb:52:4a:5a:e9:e0:8d:60:15:02:b1:13:32:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
        Validity
            Not Before: Jun 12 22:01:29 2026 GMT
            Not After : Jun 13 22:01:29 2026 GMT
        Subject: CN=7f718de6d81bbddd44802cdfc93f9a741cd38d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fb:62:13:7b:bb:8e:92:67:84:15:6a:79:68:
                    32:30:16:05:7b:21:57:53:3b:9d:c7:a2:1b:d8:c6:
                    4c:17:05:19:b7:e3:e0:bc:0b:d1:33:94:2e:c9:e6:
                    25:1d:66:a3:71:22:ba:07:ef:df:c8:cf:4d:52:dd:
                    ba:1b:5f:9d:04:54:2c:1c:a5:88:e0:00:60:fd:58:
                    90:17:bc:e9:8b:ad:20:1f:b7:90:ef:42:4b:ae:ba:
                    e5:46:25:8f:c4:6e:af:0b:cf:41:98:ab:5c:3d:ff:
                    dd:68:d2:2f:81:57:98:0c:22:13:2b:af:c8:02:6c:
                    16:16:89:8f:ca:4d:6c:63:90:6e:ec:6c:e3:cf:0c:
                    d2:b8:81:e8:44:a2:c7:c3:14:a0:00:df:13:82:eb:
                    18:79:f1:72:82:d0:a2:e0:10:18:e0:a1:7f:4a:b1:
                    96:be:df:83:34:26:7e:82:c3:f7:da:5f:0f:3f:62:
                    3c:89:50:d4:6e:06:76:f0:aa:a4:18:96:99:92:4b:
                    e5:10:fe:9a:68:97:b9:ec:6b:53:4e:d3:7d:fa:4d:
                    6e:8e:09:b7:82:3d:ae:ce:75:66:bd:ee:64:34:5c:
                    26:78:87:58:97:7f:20:ed:50:8b:0f:c5:61:40:e6:
                    fb:eb:08:c5:9c:97:f4:08:87:26:8c:9f:38:79:5e:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:71:8D:E6:D8:1B:BD:DD:44:80:2C:DF:C9:3F:9A:74:1C:D3:8D:69
            X509v3 Authority Key Identifier:
                keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a6:d0:fe:03:82:6d:68:78:91:fa:71:a8:97:d0:bd:1a:7d:
         d9:8d:27:73:b6:c5:e6:32:52:01:0c:0f:27:bf:47:07:6d:86:
         7f:48:2e:33:69:48:de:63:c5:93:ab:de:7b:b5:36:4c:22:0b:
         3b:4f:2f:b2:64:51:e0:dc:c7:d0:60:73:24:4a:19:43:8a:0a:
         0c:ab:19:3e:d7:63:6d:81:5d:f6:aa:b5:de:67:02:cd:e8:f9:
         fb:90:91:d0:4e:1a:08:6a:05:97:3a:85:60:12:d5:56:35:f5:
         b5:dc:dd:36:7f:6b:11:bb:d0:62:77:16:54:ca:6b:e5:59:2c:
         48:bb:6d:fe:36:46:07:31:2d:e7:37:c5:3d:f4:e1:17:c2:cf:
         de:7d:5c:eb:36:23:72:e9:40:f8:6f:ff:e5:6f:4d:70:8d:39:
         16:49:6e:46:fd:c6:13:67:69:7f:2a:83:34:8c:c9:23:77:8b:
         16:49:76:9c:d6:02:a6:a8:78:25:eb:3d:1a:ff:b9:0d:20:fb:
         d2:24:e2:8b:42:02:90:21:0d:f5:46:8a:d0:06:12:7a:5b:28:
         d8:c6:b4:66:22:43:2a:16:09:c0:72:8f:b3:ce:5e:2f:88:83:
         f7:63:bc:ae:18:c7:b2:7b:cf:68:ea:e3:97:49:ba:5d:c5:5a:
         e8:60:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:48 2026 by rpki-client