Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
File:                     D4nIaX93ksqvWZZk6JrOZSRPiug.mft (raw, json)
Hash identifier:          G3sciwKtlx2A8uUeL73MS6ahsgTJw77MxR3RpMZAEFE=
Subject key identifier:   AC:E9:50:1C:83:16:7F:CC:C8:10:26:F1:84:24:6B:B3:99:71:CA:68
Authority key identifier: 0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8
Certificate issuer:       /CN=0f89c8697f7792caaf599664e89ace65244f8ae8
Certificate serial:       019EBE115E0AEDB145EA91D179D0F1149FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 23:01:09 +0000
Manifest this update:     Fri 12 Jun 2026 23:01:09 +0000
Manifest next update:     Sat 13 Jun 2026 23:01:09 +0000
Files and hashes:         1: 3gWQQGBcbMv1PcGiymFULbhDgQk.roa (hash: R5FpPwb0TIXhum/MUuquZBI0EvROR3vjJFQryTKsboI=)
                          2: D4nIaX93ksqvWZZk6JrOZSRPiug.crl (hash: 22eI1yasoPfgQRm6mxa4hbd6H3E7v1LCedBPw/XYFp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:5e:0a:ed:b1:45:ea:91:d1:79:d0:f1:14:9f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f89c8697f7792caaf599664e89ace65244f8ae8
        Validity
            Not Before: Jun 12 23:01:09 2026 GMT
            Not After : Jun 13 23:01:09 2026 GMT
        Subject: CN=ace9501c83167fccc81026f184246bb39971ca68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:72:06:d2:71:fc:9c:f5:b7:71:53:f3:3f:
                    60:4c:b6:9f:51:13:85:89:a8:09:2a:a6:ea:bf:5a:
                    3f:8f:b9:6c:38:4c:80:0a:63:12:8b:8f:29:a3:3c:
                    19:fb:3d:d3:02:a9:b8:d5:41:61:4e:5b:66:b3:45:
                    5d:5a:e1:11:65:2d:26:93:2e:dc:20:7b:bd:87:43:
                    cc:c3:84:1e:29:6c:ae:bd:8b:1e:dc:08:ca:23:1a:
                    78:8a:9a:f3:db:81:60:63:c3:2c:3e:08:c7:73:f4:
                    08:c6:93:77:c0:c5:64:0e:8d:2b:ca:81:a9:03:e4:
                    d0:60:04:f8:f2:67:9c:d5:5a:07:18:39:b6:64:9c:
                    8a:86:98:49:0a:a1:0a:64:c2:96:fd:14:05:86:fa:
                    40:ea:c4:00:af:6e:ed:d3:e2:c4:48:07:79:55:08:
                    4f:64:7f:40:a3:6e:16:1a:24:0a:5b:57:f3:c4:30:
                    04:22:7b:d7:6c:39:bb:00:0a:9c:d3:20:7b:08:de:
                    89:ba:b8:85:86:5e:aa:9a:e9:6d:74:40:ae:e2:26:
                    2a:61:35:79:01:b6:1c:05:92:52:3d:91:28:c9:49:
                    86:34:31:47:42:4d:69:6f:a9:fa:9b:c7:a9:f6:50:
                    16:a6:a8:4c:73:bf:f2:26:6c:49:f3:d8:59:4b:ab:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E9:50:1C:83:16:7F:CC:C8:10:26:F1:84:24:6B:B3:99:71:CA:68
            X509v3 Authority Key Identifier:
                keyid:0F:89:C8:69:7F:77:92:CA:AF:59:96:64:E8:9A:CE:65:24:4F:8A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4nIaX93ksqvWZZk6JrOZSRPiug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5f3187-3beb-4c4b-9a44-d6bd55a9e36d/1/D4nIaX93ksqvWZZk6JrOZSRPiug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:99:b4:48:d4:e3:0e:ee:13:2e:7f:b2:29:a3:f2:ef:fc:61:
         cb:58:1a:75:6e:f5:31:d2:73:33:a5:ab:09:22:4f:29:bb:91:
         25:b1:93:44:52:31:63:2a:9a:5b:8d:a1:a1:a3:c3:50:aa:71:
         6d:1b:11:71:b3:7a:8d:a9:71:c1:da:0b:fe:e9:f7:15:30:d4:
         3e:6d:47:bd:12:70:bb:51:23:48:f9:62:a7:36:e7:94:98:e7:
         48:15:ba:92:e6:22:2e:a0:95:bc:ec:99:0a:9f:fd:6b:93:c5:
         7a:35:a0:e8:c0:ea:88:e9:24:dd:92:4f:50:e2:4d:c3:2c:19:
         c8:e2:c6:21:4b:e5:ca:d6:0a:0d:b1:e7:e8:53:ff:7f:e7:57:
         6e:3a:b0:04:e5:10:da:41:5a:2e:fa:1f:2d:0d:da:52:ff:6d:
         96:d0:12:da:32:b3:b0:84:7d:b2:01:b1:f7:89:97:70:17:d3:
         22:1c:f9:2f:d1:d4:8e:9a:a0:df:af:d6:34:7e:f0:1d:16:7b:
         a9:13:d1:ed:c1:60:e5:68:07:ae:0f:4e:90:ad:85:72:23:19:
         d6:ed:f8:d5:61:b0:a3:49:53:a5:6c:4c:f7:d4:b3:9d:2b:55:
         ff:0e:d8:fb:a5:84:61:cc:d0:1f:1e:50:d7:a7:e6:a5:b2:2e:
         13:73:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:38 2026 by rpki-client