Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File:                     dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier:          pvPqQdO1PrEQhQDFFe88x/IMpvxn7WGBD92o98cK40Y=
Subject key identifier:   43:97:BD:80:1B:59:6B:F2:1A:38:68:22:8F:FC:15:98:CF:E0:EC:9E
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer:       /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial:       019EC41331976488F883B1DB9F024F262BCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number:          1436
Signing time:             Sun 14 Jun 2026 03:00:52 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:52 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:52 +0000
Files and hashes:         1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
                          2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: GkBZ5iwQuP4dSuOYGNprqy4v5cSeo9bRxebGwnaxIus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:31:97:64:88:f8:83:b1:db:9f:02:4f:26:2b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
        Validity
            Not Before: Jun 14 03:00:52 2026 GMT
            Not After : Jun 15 03:00:52 2026 GMT
        Subject: CN=4397bd801b596bf21a3868228ffc1598cfe0ec9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:1f:ad:99:ba:4f:fc:e9:d0:f6:1e:51:25:
                    e7:52:54:f2:2f:b6:94:8e:6c:0e:78:07:8e:44:b5:
                    18:d9:63:1c:cc:35:1b:5e:74:4b:51:70:d1:ec:6d:
                    d7:93:f7:ba:40:33:b8:a8:d0:8d:03:36:39:91:e1:
                    93:f3:b7:44:9d:dd:30:c0:e0:05:20:70:db:f8:4a:
                    ec:a3:ee:e0:8c:d0:8f:f7:7e:ba:1d:c2:c0:27:7f:
                    af:6f:b4:58:d2:0a:93:38:91:2c:b1:58:09:79:fc:
                    13:39:be:76:34:b3:fa:c5:1b:1a:e8:f5:5a:b3:23:
                    14:ba:30:c0:34:53:fd:29:5c:f8:23:9d:d1:bb:54:
                    d7:4e:2b:3f:3c:85:91:c6:d8:15:bc:b7:5e:da:ac:
                    d5:f9:24:4c:27:0d:d1:83:53:9d:d9:17:01:ac:cd:
                    d8:cf:39:c7:1e:e7:0e:6f:86:4c:75:6d:41:4e:76:
                    45:67:0b:0e:6c:94:36:fb:0b:68:ef:95:6e:bd:62:
                    85:a9:07:b8:b6:d9:73:51:96:b1:73:15:42:fa:c4:
                    a3:8d:93:c7:2e:b0:a2:52:69:ed:f9:99:40:58:34:
                    8c:f3:e5:63:80:63:a8:f9:38:28:92:4f:64:bc:77:
                    18:60:d1:9a:be:8d:c4:80:33:a5:fe:69:93:e7:29:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:97:BD:80:1B:59:6B:F2:1A:38:68:22:8F:FC:15:98:CF:E0:EC:9E
            X509v3 Authority Key Identifier:
                keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:30:60:ca:fb:29:0d:b1:29:04:e7:66:a3:b6:fe:58:6b:b6:
         8a:12:a9:f4:64:52:93:7e:26:0a:81:f6:3d:f2:e9:b3:a9:74:
         d8:76:a7:67:fe:9a:a1:ab:70:4d:fe:34:98:d0:95:02:19:c9:
         66:e9:ec:06:0b:46:3d:9d:82:8d:67:30:e7:36:78:e6:90:af:
         30:1c:98:25:cf:85:b8:ed:59:a2:3a:0f:da:ee:09:b5:50:b4:
         31:92:e3:69:0d:61:3e:d3:e4:88:05:e9:69:ce:28:e3:4f:61:
         71:9a:e9:05:8d:18:df:3a:7d:bf:ce:e7:75:d2:ae:e2:6a:70:
         2a:4f:91:8d:50:9a:3a:ff:51:e2:94:50:92:df:87:de:5b:8f:
         11:b4:b4:17:7b:ba:97:c1:9e:90:eb:32:b9:00:87:65:54:63:
         70:a9:60:7b:02:a9:2e:c1:7e:b7:b5:69:ef:1e:cb:0d:9f:ca:
         9b:d3:0b:90:64:23:58:20:83:5f:c1:ac:fa:af:40:52:e6:7f:
         ae:95:15:34:fb:9a:cf:80:5b:fb:30:4a:ec:f5:fb:06:52:a5:
         bc:ae:f7:66:24:b6:14:e4:de:c4:c8:16:9f:8b:c0:c7:05:3b:
         ef:09:88:7d:98:b5:90:aa:a9:e9:d0:6c:19:e7:f1:41:90:f7:
         b4:5e:09:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:55 2026 by rpki-client