Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File:                     0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier:          epvp/TuTEhgNK57XEw+EZq/mnp14QBiQscJE5EqusTk=
Subject key identifier:   64:08:C8:DE:F3:98:88:99:A5:AD:40:40:6F:DE:EB:A1:78:6A:1B:1C
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer:       /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial:       019EBF91290E9C863A01AC2353D5758F53C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number:          1322
Signing time:             Sat 13 Jun 2026 06:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:21 +0000
Files and hashes:         1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: xg8ZofiVgcg1TXWbxKr9zMRADPYNhNDX8x1sQ0jVuFk=)
                          2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:29:0e:9c:86:3a:01:ac:23:53:d5:75:8f:53:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
        Validity
            Not Before: Jun 13 06:00:21 2026 GMT
            Not After : Jun 14 06:00:21 2026 GMT
        Subject: CN=6408c8def3988899a5ad40406fdeeba1786a1b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:a5:10:54:e4:44:34:28:b4:5f:60:3a:23:
                    72:ce:7f:70:8f:83:aa:40:d2:a9:36:9a:38:d9:7c:
                    b5:0b:60:8b:b7:1f:53:ae:8e:18:42:42:25:e3:9c:
                    fb:bd:97:65:aa:f9:91:aa:07:1f:79:64:73:b0:85:
                    69:4d:86:28:41:4a:f3:f9:64:ac:e3:de:e9:11:d5:
                    7c:89:27:e8:b7:08:bb:40:ee:3f:08:ac:45:26:b1:
                    b4:da:bb:74:a8:20:8d:32:bc:65:d9:e1:df:41:d7:
                    7f:2f:4b:d9:46:62:de:e0:9d:7f:ec:af:be:8b:dd:
                    8f:ec:2e:7d:c4:f1:2e:d4:2d:98:85:89:fe:ff:9a:
                    2e:3a:ab:67:f4:36:e9:29:57:2f:f3:47:c0:2b:e2:
                    ec:b6:3a:6a:bd:c5:c8:5c:cf:f4:7e:eb:30:58:a3:
                    5c:c1:36:1b:6a:31:65:82:1e:cd:d1:fb:57:03:84:
                    01:a8:1c:1b:ed:a0:3c:30:f8:00:c0:66:01:83:00:
                    c7:05:eb:db:48:f1:c8:2f:6b:6e:c6:81:60:72:34:
                    1d:69:73:32:f7:b5:25:bc:ac:05:25:e5:70:c3:b8:
                    d5:99:c4:2f:4c:84:3b:f4:fa:1e:8b:19:61:93:6f:
                    39:5a:e3:3c:0c:ca:73:50:c7:42:eb:35:d3:a1:58:
                    7b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:08:C8:DE:F3:98:88:99:A5:AD:40:40:6F:DE:EB:A1:78:6A:1B:1C
            X509v3 Authority Key Identifier:
                keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:3c:57:ed:2d:b1:eb:69:76:68:45:c1:1f:7f:de:30:8f:90:
         8f:3d:69:d9:ac:9b:9a:e2:f5:19:eb:06:86:0b:5f:03:bd:99:
         e4:bd:c5:86:1e:93:37:fa:5e:68:89:94:8c:f1:c8:01:ea:ad:
         52:f6:27:d6:8b:c5:c3:e5:31:1f:be:d0:bb:4b:59:89:ad:2b:
         19:79:f7:50:34:a5:f7:d1:0f:3f:23:44:69:12:0c:27:cc:60:
         ed:23:ff:8a:5a:30:af:7a:f5:e4:c9:0a:8e:d3:95:9e:6c:61:
         9b:fc:ab:44:28:ef:8e:a7:84:18:f8:75:2d:16:e4:9c:57:c7:
         d2:f9:14:8d:6e:d6:60:52:f1:32:6b:81:88:66:ff:e1:b5:fe:
         01:fd:1d:63:56:49:1b:93:4a:8a:f0:fb:88:b0:29:54:d9:9b:
         4f:4d:ac:dd:b5:11:87:d8:5a:b5:e8:6c:9c:d6:22:de:54:52:
         42:b0:92:a2:39:6a:6d:83:b8:e3:41:25:eb:f9:75:9b:55:d5:
         30:a5:ae:11:dd:8a:52:5c:9a:0d:b8:e2:02:dc:b0:b7:f1:fc:
         76:69:22:56:fe:2e:f8:3c:74:15:1e:ae:93:f9:ec:26:38:59:
         a5:6f:27:8b:d3:be:fa:46:22:f8:c0:6e:92:56:76:bb:c5:3b:
         41:a3:86:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:47 2026 by rpki-client