Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File:                     1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier:          xPkKn7mhAKRGLzkexhDKsmcfuujhP4pBXomLQrhc6/U=
Subject key identifier:   CF:33:4B:9B:4D:67:CE:11:B8:80:F1:33:12:82:82:84:90:57:9F:3E
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer:       /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial:       019EBFC80100634B7E6B0E461151C8AD90EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number:          056F
Signing time:             Sat 13 Jun 2026 07:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:16 +0000
Files and hashes:         1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: widelHfq3ZKKc5K6+z8akNuWmOlTYaxs+I/Zf3Fp9oU=)
                          2: PchT168ujFib-nY79tBpP-zJgdY.roa (hash: X54RZoJH7rp6pAWMbh3u6FOekQubaYZ6ugL/JB3twaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:01:00:63:4b:7e:6b:0e:46:11:51:c8:ad:90:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
        Validity
            Not Before: Jun 13 07:00:16 2026 GMT
            Not After : Jun 14 07:00:16 2026 GMT
        Subject: CN=cf334b9b4d67ce11b880f1331282828490579f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:7d:b7:bf:27:6a:dd:ab:68:49:29:5d:e3:
                    bb:53:37:3a:c8:fe:18:93:41:e6:ae:9b:13:c7:31:
                    66:f7:a9:ea:ac:64:b3:9c:df:91:b8:26:da:80:3a:
                    72:7d:c3:ab:6c:5f:0b:ce:38:70:93:7b:dd:e4:5c:
                    21:38:42:7d:5c:2a:f2:69:09:53:61:e6:26:33:78:
                    8b:b3:10:f8:27:bc:6a:e0:6b:6f:6a:8e:7e:60:6a:
                    03:8b:c4:cc:d5:52:54:43:fe:4e:65:cd:43:3b:31:
                    3d:77:66:a6:24:bd:9b:81:10:9e:49:56:4a:1d:3e:
                    29:20:57:3d:58:ee:a5:83:5d:2c:34:08:2e:54:ed:
                    22:e2:af:88:85:27:c7:c6:0d:0d:66:4e:30:29:29:
                    92:7b:5a:4c:34:2c:7e:b4:19:4a:a3:e4:ab:ae:7d:
                    3e:62:e2:a8:26:25:97:4b:3f:59:7b:5d:51:65:68:
                    75:d9:b5:4e:5b:3d:af:f3:e2:98:34:5b:ff:83:7a:
                    d9:4e:e2:a6:2a:2b:b5:05:9a:0a:cd:41:ac:67:a6:
                    5b:1d:5f:38:21:2e:f9:83:e2:48:84:85:4a:31:ce:
                    04:dd:6d:dc:3b:ee:a1:ec:6e:0d:ba:bd:a4:54:ce:
                    28:48:b7:1b:b8:6a:67:b2:a2:32:ca:9e:62:90:e2:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:33:4B:9B:4D:67:CE:11:B8:80:F1:33:12:82:82:84:90:57:9F:3E
            X509v3 Authority Key Identifier:
                keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:48:63:1f:46:31:c4:00:15:21:cb:e1:1a:77:c2:73:ae:aa:
         9d:4b:ed:2f:b9:27:a7:c3:df:b6:ae:af:33:d7:b3:67:3d:b4:
         03:f0:6d:9b:f9:c8:1e:f4:84:f0:a3:ac:16:38:22:6b:7f:2f:
         89:44:92:2b:97:59:dc:0d:3c:17:55:93:6b:ff:38:54:75:7f:
         e2:45:45:c1:4b:a9:e5:49:5b:cc:73:04:92:00:e2:5a:fd:60:
         60:4a:28:fb:1d:82:d3:8c:c1:91:27:72:76:2c:96:7c:5a:11:
         2f:ce:a3:7a:65:39:21:46:a3:f9:4a:7b:c6:21:8f:7c:e4:b8:
         0c:6a:b6:50:00:62:40:ff:70:b0:ba:c1:a2:d0:78:fc:a4:ae:
         e4:75:94:43:f8:54:20:56:7b:28:fd:6b:50:6b:cb:73:80:3f:
         2d:fb:a3:1a:d4:fa:b2:5c:83:68:22:8f:5b:76:09:14:f6:bb:
         7d:da:5a:d1:9f:be:20:5e:4f:1b:bb:e5:32:25:f4:45:61:15:
         6a:b4:5a:d4:f9:43:82:64:31:b7:ba:09:e2:65:bf:ac:e4:b3:
         a8:2b:1c:34:d0:f8:13:10:cf:17:5c:56:6f:f2:a6:75:92:b0:
         c0:c4:ae:e9:b3:d5:b3:2f:4c:b3:48:cd:fc:d5:ae:f7:5b:34:
         a8:6b:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:27 2026 by rpki-client