Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
File:                     1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft (raw, json)
Hash identifier:          9423zTp6ALByS9eFYFN/fnNOEugrpCdlvHSYVZ3Zk64=
Subject key identifier:   26:49:3A:C3:01:CE:F3:85:6B:6E:61:B5:31:BB:DC:23:22:EF:98:91
Authority key identifier: D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90
Certificate issuer:       /CN=d47d79c78a830699781b3e4331be092597c34b90
Certificate serial:       019EBE47BC47579660F2B30CD1369F11F54E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 00:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:32 +0000
Files and hashes:         1: 1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl (hash: ia9zoHjpZR3gJANeNqlMjBgtCT7SE1WaziLt+tTTBog=)
                          2: UjFwX21JbiqjDw7jVogurOY6vK0.roa (hash: StMP6W4VJaKc6UNnpuMnvzgEyfJwsKnjjavPWXE2/og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:bc:47:57:96:60:f2:b3:0c:d1:36:9f:11:f5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47d79c78a830699781b3e4331be092597c34b90
        Validity
            Not Before: Jun 13 00:00:32 2026 GMT
            Not After : Jun 14 00:00:32 2026 GMT
        Subject: CN=26493ac301cef3856b6e61b531bbdc2322ef9891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:b9:f6:5e:44:b4:da:59:6b:78:84:ec:b1:
                    2c:a0:b3:01:40:d5:f5:f8:26:0f:57:69:95:24:ce:
                    d2:8b:79:d0:3e:b4:53:fb:a4:a8:e0:d8:6d:ae:08:
                    8e:de:dd:10:61:13:d1:c8:de:c5:74:bb:30:c5:67:
                    40:1c:ed:8e:09:5e:06:13:fe:b3:4c:b2:cb:7f:74:
                    7c:ca:cd:a3:87:dd:6c:f1:79:ea:b2:83:58:f6:7f:
                    b0:81:9b:38:f9:29:2b:a8:06:12:59:40:43:37:fc:
                    73:b4:20:45:48:3c:70:dc:76:f6:aa:09:27:14:8b:
                    7b:95:e5:5d:6f:85:77:dd:d1:53:6d:e4:e1:5e:71:
                    cb:e2:2f:eb:c3:27:ca:6c:80:14:35:aa:4d:53:f4:
                    bf:05:7e:c9:54:fb:9a:80:0f:2c:c7:04:ff:58:73:
                    2c:3a:79:34:80:99:f5:46:16:69:ac:09:9b:46:8a:
                    86:bf:01:69:5e:ab:d1:ee:6d:8b:d8:64:dd:cf:7e:
                    b2:be:1b:aa:47:a4:bc:dd:0a:f2:4e:ca:9f:8f:a2:
                    12:20:7d:6d:16:bc:ea:d3:9d:5e:2c:75:db:2e:29:
                    36:b9:b3:6b:57:5a:b7:17:87:bf:64:51:2c:ce:e3:
                    c7:33:88:11:92:93:0a:47:2f:0c:66:b9:f8:41:af:
                    f7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:49:3A:C3:01:CE:F3:85:6B:6E:61:B5:31:BB:DC:23:22:EF:98:91
            X509v3 Authority Key Identifier:
                keyid:D4:7D:79:C7:8A:83:06:99:78:1B:3E:43:31:BE:09:25:97:C3:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H15x4qDBpl4Gz5DMb4JJZfDS5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e39a42-67b7-473c-83cd-196455524a62/1/1H15x4qDBpl4Gz5DMb4JJZfDS5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:b1:95:d5:41:8a:64:83:8f:09:7d:2a:32:b9:43:e8:71:
         22:69:f2:c9:30:7f:9c:e3:6a:3e:93:32:bf:76:58:05:6b:9f:
         c7:68:b6:fe:d0:7a:cc:be:8f:46:62:2d:9d:c5:f3:07:31:15:
         c8:11:02:b3:7e:5f:d2:a6:2d:4b:f1:67:06:3a:b3:16:47:f8:
         bf:74:cb:13:90:70:af:d9:55:de:08:f5:5f:d4:9a:c7:01:28:
         39:e9:11:02:ce:c4:fc:4c:0f:8e:e9:45:9a:17:59:25:d8:b3:
         e6:10:f2:77:2b:42:0f:1b:17:14:2c:c7:e5:e8:7a:19:e4:0f:
         00:74:64:71:a6:5f:19:a4:35:36:1a:46:7c:0e:63:39:a1:62:
         32:17:92:5b:cd:ec:50:fa:26:99:f7:2d:4f:ee:2c:e0:31:51:
         b3:b2:f9:ad:7d:ce:16:55:f4:52:ac:ba:54:dc:96:40:0d:bb:
         5e:53:5b:98:0f:23:69:91:2a:c1:16:32:16:b5:98:98:91:23:
         fd:2f:81:57:93:30:26:3e:91:93:15:44:4f:2a:7a:6e:c2:d2:
         77:39:8d:79:58:70:7c:f9:76:97:c5:65:e6:6a:19:24:a0:41:
         49:25:63:61:b8:e1:59:09:fe:d0:9f:03:1a:11:20:ef:23:18:
         d0:00:bb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:30 2026 by rpki-client