Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File:                     d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier:          E/8/YiOK/NJCv7GsPm2xzgqYXvkFjNQpIVPV37xHWrI=
Subject key identifier:   B7:30:83:2B:10:F7:F0:48:BE:A8:50:DD:B6:7D:58:E8:16:F4:4B:C5
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer:       /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial:       019EBF237CA3C1D592510F3C2EB17615717E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number:          0836
Signing time:             Sat 13 Jun 2026 04:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:34 +0000
Files and hashes:         1: GZzLxFCp1bVkiSpEsTLVVr4H9XI.asa (hash: ivqvyTFoXDuekBB8qUC8sgSfxDY8iNPCYAvAp+TmOlY=)
                          2: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: o2PwCPy8SUmqD9BgdPmuL1mrrfxRr+2jEaFDdP+tY9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:7c:a3:c1:d5:92:51:0f:3c:2e:b1:76:15:71:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
        Validity
            Not Before: Jun 13 04:00:34 2026 GMT
            Not After : Jun 14 04:00:34 2026 GMT
        Subject: CN=b730832b10f7f048bea850ddb67d58e816f44bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:85:42:04:5b:08:2a:b6:97:bb:8d:fc:69:64:
                    ff:60:3d:20:96:f9:1c:f9:83:a3:70:fc:3c:d4:4a:
                    75:97:41:35:25:46:1d:03:85:99:0f:38:93:50:cd:
                    4a:f4:11:36:51:af:27:03:c7:6a:e9:97:7b:42:f6:
                    33:eb:37:3e:e4:00:c9:8a:86:6c:c0:73:a3:55:d4:
                    fe:a0:fe:99:d2:cb:66:b8:01:03:b2:6a:64:4f:f9:
                    9e:24:93:73:52:e5:c1:49:75:76:59:4a:a5:43:4b:
                    6c:9c:36:d2:c5:df:b9:08:98:83:62:f7:1f:66:d7:
                    e3:49:1e:69:4e:1d:a9:6b:f9:a1:06:71:ba:2c:a9:
                    bd:84:9e:49:32:81:13:a4:a2:da:87:48:27:86:5c:
                    1d:6f:0b:c4:f9:c3:6c:55:d8:a4:f7:6c:63:6a:fe:
                    1b:e8:51:99:84:ea:2f:ff:95:17:d6:e2:e7:ca:d2:
                    88:8a:ac:da:ee:ee:77:0d:8e:44:61:aa:78:d2:a8:
                    fc:81:ca:8f:71:e8:9e:c7:92:77:9d:38:8b:fe:68:
                    ff:e8:31:50:f2:09:69:6b:76:94:41:a9:f3:6c:70:
                    23:2d:59:55:69:00:25:21:7c:df:0b:75:19:54:28:
                    b2:e3:f4:6d:6c:bd:6c:de:25:34:76:52:90:3c:d9:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:30:83:2B:10:F7:F0:48:BE:A8:50:DD:B6:7D:58:E8:16:F4:4B:C5
            X509v3 Authority Key Identifier:
                keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:71:55:a8:45:f9:52:1f:9a:1b:56:0b:93:0d:28:22:56:37:
         35:55:3f:10:e0:59:ce:fa:aa:24:6a:1d:b5:9c:3d:d6:35:42:
         57:6e:96:ec:b9:1d:72:65:07:58:6e:bf:17:f3:97:cd:e1:74:
         d0:56:db:c4:bb:bb:4e:2d:89:20:c9:04:34:2f:2d:ca:54:eb:
         f4:de:c7:aa:b6:1b:7a:f8:64:94:d5:50:f1:8f:b9:9f:92:2f:
         c3:0d:2b:38:cc:dc:a8:0d:a1:a3:c7:49:2f:0a:29:15:43:ee:
         8c:47:3b:4f:54:0e:17:d1:c1:d2:0b:a1:55:81:1f:d2:de:04:
         5b:60:28:72:a7:8e:1d:14:49:99:59:96:03:f1:bd:32:a0:f8:
         69:8b:94:1c:f0:9a:7a:67:bc:bf:60:64:62:89:78:33:44:4d:
         65:72:fa:48:61:f1:43:c1:f1:4c:a8:4f:3f:49:b6:8d:a2:1f:
         21:9a:c9:77:2e:02:36:3e:47:7d:76:9c:03:58:81:83:9b:75:
         f4:01:77:3c:72:c9:c9:b4:bf:91:c8:6e:a0:cf:8c:d5:b7:a2:
         99:df:eb:41:30:62:a8:4c:c5:fd:e1:d9:c7:39:71:11:33:30:
         6a:fe:f4:c7:d8:9d:74:9d:05:86:55:73:49:2d:48:32:99:76:
         19:98:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:37:13 2026 by rpki-client