Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File:                     GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier:          HdZihDNf5/7B6ngNSzbjGAqX9dcWBIZYiuWSDwzbERE=
Subject key identifier:   E0:0E:BC:23:AF:EC:72:57:B2:43:F0:0D:E3:47:B4:F9:76:66:A6:08
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer:       /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial:       019ED386B1641ECC5482293BCAD251EBA9E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number:          0E41
Signing time:             Wed 17 Jun 2026 03:01:20 +0000
Manifest this update:     Wed 17 Jun 2026 03:01:20 +0000
Manifest next update:     Thu 18 Jun 2026 03:01:20 +0000
Files and hashes:         1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: buyjRYdiqiVQ4TpVnZjy5JJH5Xa46HJ2N4Pz3ZnZJ8I=)
                          2: SkKZfC38ghmrpySCpGvRpFixxKU.roa (hash: o3RJWOBJfQjmbxei+seF+/aOYTLshRFp1ICoacA0zAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:b1:64:1e:cc:54:82:29:3b:ca:d2:51:eb:a9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
        Validity
            Not Before: Jun 17 03:01:20 2026 GMT
            Not After : Jun 18 03:01:20 2026 GMT
        Subject: CN=e00ebc23afec7257b243f00de347b4f97666a608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:4e:46:3a:de:bb:ac:e5:63:ed:e9:ef:93:
                    ca:c2:36:f5:5a:ae:62:21:85:d7:fb:32:58:40:cc:
                    7f:67:2e:57:bf:08:7c:48:b5:79:a7:05:6f:af:b0:
                    dc:46:98:09:d0:32:31:25:ca:6e:9b:02:a7:9c:df:
                    c7:03:6f:ba:d1:42:55:7a:b4:88:d0:61:20:48:ab:
                    60:71:f9:12:34:52:b0:f7:ba:b8:95:12:4d:e9:47:
                    92:6c:1f:be:50:5a:b9:3f:ad:68:0e:c5:46:fb:2a:
                    dc:02:e1:a9:6a:4a:8f:f8:e9:c9:84:ff:5b:69:96:
                    0f:66:39:0c:36:87:8c:03:46:82:b6:e0:eb:76:9e:
                    8b:85:70:ae:73:b4:b4:cc:4d:0e:ae:3f:ac:0c:5a:
                    c3:05:3f:0d:2e:fb:42:4c:1d:86:b2:84:28:fc:4c:
                    53:8a:a9:78:f3:6b:a5:2c:c2:59:ce:fd:69:a2:30:
                    00:5e:92:1b:12:c0:bc:3d:1c:4d:4e:8c:44:ee:60:
                    73:e1:a8:3e:1f:f9:a6:71:5d:27:01:be:bd:52:7d:
                    66:48:0d:6e:99:34:68:03:62:29:f0:5b:0b:a1:fb:
                    a0:60:ae:5e:50:6f:eb:e7:0b:0e:13:15:90:38:77:
                    c9:80:5c:19:73:cd:36:a9:f0:2a:65:49:52:06:7a:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0E:BC:23:AF:EC:72:57:B2:43:F0:0D:E3:47:B4:F9:76:66:A6:08
            X509v3 Authority Key Identifier:
                keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:c7:74:6e:af:c2:f0:46:e9:a2:4e:7e:af:f3:34:02:80:
         02:66:c9:74:96:69:2f:7c:c9:39:e2:c9:45:a1:ef:75:b6:78:
         a2:ee:37:f0:d5:68:e2:41:89:af:d1:da:f3:ec:9f:73:e6:6e:
         2d:6e:b8:01:38:23:c0:7e:23:69:ca:18:52:3b:56:d8:ac:c6:
         93:06:82:af:d5:d0:40:b7:3a:72:0b:88:6e:dc:fa:0a:a7:c4:
         65:e0:37:50:09:0d:4c:a5:96:5d:20:52:1b:e1:25:9a:14:60:
         65:d6:90:6c:96:d5:87:df:90:76:02:25:d2:df:d0:63:97:4b:
         e9:bd:1c:a2:5f:42:7b:82:7a:a2:4c:b1:88:de:dd:55:da:61:
         31:b8:81:86:33:a1:dd:d9:1e:a2:12:8b:24:89:a2:76:0c:d8:
         9d:b5:75:5d:5c:a8:82:67:f0:ed:d5:66:e7:07:bb:f9:f2:ad:
         01:98:91:2e:4e:33:f7:ca:00:94:5c:80:e2:c9:f9:2d:d2:ff:
         0a:5b:2d:20:19:32:c8:5a:9a:cf:e1:68:10:12:6c:23:5a:6d:
         a2:f1:58:52:1f:82:3b:bd:9b:50:e1:13:8e:5f:31:73:c0:7a:
         19:c6:92:d9:db:48:6b:22:df:6c:a5:46:81:bd:b4:4d:ec:44:
         39:58:5d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:51 2026 by rpki-client