Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File:                     24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier:          LMF+QjrZ9OA1X2Uhz6A49dk0+Cp5ozACTlc9aL2QkkQ=
Subject key identifier:   EB:47:FF:6C:C1:DD:8F:B4:5C:C3:C2:A7:B4:99:AF:D4:23:73:C1:6E
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer:       /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial:       019EBFC8414CAFE374D5570772CA95B6ADC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number:          1054
Signing time:             Sat 13 Jun 2026 07:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:32 +0000
Files and hashes:         1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
                          2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: YfPscCSU3ts9eFqKcTtMCuX7Eu325o/lzcR31mxo/9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:41:4c:af:e3:74:d5:57:07:72:ca:95:b6:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
        Validity
            Not Before: Jun 13 07:00:32 2026 GMT
            Not After : Jun 14 07:00:32 2026 GMT
        Subject: CN=eb47ff6cc1dd8fb45cc3c2a7b499afd42373c16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:47:89:0f:53:41:bc:73:05:95:ca:6f:f2:
                    a4:9f:cf:db:8e:7e:e9:0a:cd:61:d6:71:2a:7e:d1:
                    b5:1f:f5:42:4c:50:4c:91:13:29:76:d7:b6:e3:7e:
                    79:13:8f:55:4a:a7:08:e6:50:68:d6:1c:82:a7:f1:
                    b2:4a:b2:96:d4:c2:31:f0:f0:fa:40:fd:f6:d3:0a:
                    d3:d7:b6:92:52:69:f9:0b:7e:98:20:b2:f3:ed:ac:
                    76:92:1d:b7:c8:bf:11:30:a4:a4:82:c1:de:6a:e5:
                    6e:88:9b:a6:21:eb:7b:bb:20:5b:41:c7:53:56:51:
                    c8:90:6f:9c:42:d3:88:5f:ce:04:11:3e:d8:fd:54:
                    e4:4f:b4:9f:f7:c9:91:7a:fa:fb:e0:5f:63:73:9c:
                    e7:d2:79:d5:6a:1c:91:c6:51:37:ca:fd:d4:ed:a4:
                    f5:c6:24:6d:64:67:b4:7a:b8:30:96:db:44:c7:0d:
                    cf:9d:3b:4e:c0:a0:8f:62:c1:46:fd:8d:15:e2:a6:
                    66:70:22:7c:6a:83:b8:fb:90:0a:f5:71:a2:f4:31:
                    40:f8:eb:5f:96:2d:b1:40:4f:95:da:1d:11:bb:90:
                    dc:48:80:c7:d6:27:0c:24:9a:45:64:b0:ea:e4:29:
                    88:58:36:fe:28:9e:ea:af:98:be:ba:3b:2b:39:4d:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:47:FF:6C:C1:DD:8F:B4:5C:C3:C2:A7:B4:99:AF:D4:23:73:C1:6E
            X509v3 Authority Key Identifier:
                keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:57:47:72:66:53:9a:5a:be:b8:a7:f0:64:62:61:fc:97:
         16:e3:4a:48:e3:88:80:f3:b4:57:9a:5e:9d:9c:80:c0:4a:02:
         39:e1:71:17:29:08:54:39:51:bf:9a:a4:35:3d:a3:41:56:aa:
         c4:1b:03:6c:c7:e0:80:3c:db:62:68:85:37:f0:9a:f3:c2:45:
         82:a0:fe:eb:18:77:fe:c3:e5:02:01:62:f4:57:a2:82:b1:ac:
         e9:40:19:c5:24:22:82:0e:0a:08:57:37:fd:66:1b:5a:09:d9:
         bc:5c:5d:79:71:90:24:fb:14:13:c0:90:4c:51:3a:ab:e0:9f:
         22:41:32:cf:76:74:31:5e:74:eb:d5:3e:0f:4b:1a:cb:99:61:
         62:fb:1a:b3:63:58:a4:46:4b:dd:a4:b0:d6:a3:68:a1:85:3a:
         5b:d5:40:94:3e:86:8f:e0:b1:33:9b:cc:bc:29:a3:32:41:01:
         70:b6:7d:e4:a3:7f:de:67:eb:ba:cc:41:07:07:b5:fb:00:fb:
         6e:c9:24:5e:0b:9c:e9:5c:1a:23:de:ff:9f:b8:3d:ab:f3:f5:
         bc:66:10:ed:e8:56:aa:33:88:5f:2d:7a:c4:83:c3:03:63:22:
         bd:bd:44:4e:73:19:0f:7b:3a:f2:88:49:90:21:a5:09:3e:f6:
         1d:a2:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:46 2026 by rpki-client