Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File:                     3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier:          dwKP5xAN5+MBAG26qkKgeAoV4ud29YHMDIBiql1R9/0=
Subject key identifier:   96:0A:EC:EA:50:39:78:2A:53:CE:AD:C6:8E:70:8A:DD:8B:BD:FE:37
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer:       /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial:       019EBD35B03225F1FA97DDF4489BFC22E660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number:          0C77
Signing time:             Fri 12 Jun 2026 19:01:12 +0000
Manifest this update:     Fri 12 Jun 2026 19:01:12 +0000
Manifest next update:     Sat 13 Jun 2026 19:01:12 +0000
Files and hashes:         1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
                          2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: CvHzaHlUvO9dWkS3C7efMp5Mp3l2gKuBKsoKK/XGV9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:35:b0:32:25:f1:fa:97:dd:f4:48:9b:fc:22:e6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
        Validity
            Not Before: Jun 12 19:01:12 2026 GMT
            Not After : Jun 13 19:01:12 2026 GMT
        Subject: CN=960aecea5039782a53ceadc68e708add8bbdfe37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ad:20:21:5f:28:11:2f:7c:fa:b1:1b:76:65:
                    41:d7:d7:cc:1f:c7:8b:55:49:5d:13:d4:8b:5e:4a:
                    c8:08:82:eb:9e:c7:eb:66:a3:20:39:b7:ac:f5:4f:
                    c9:86:0c:12:63:a8:d6:17:db:47:fd:26:73:c2:b6:
                    46:27:b3:00:e2:be:12:ab:13:87:fd:a1:e7:07:7b:
                    af:53:e9:bd:a7:3b:70:d4:55:0f:ff:0d:f9:11:00:
                    d9:26:92:d5:fa:77:0f:43:d6:0b:2d:a4:3a:9b:29:
                    1c:03:b3:5a:42:93:db:a5:1b:ae:38:9d:ca:8f:5b:
                    b4:7b:10:b9:2e:01:0b:a2:8c:8e:b5:78:29:b6:14:
                    8b:71:25:7b:f1:99:f6:c9:40:3b:83:57:97:d7:97:
                    75:ad:6e:9c:7f:4f:be:aa:5b:bd:4f:a7:50:07:f8:
                    8b:ed:0c:eb:c2:0f:32:0f:43:76:87:4a:9b:cd:fb:
                    0b:ec:57:ae:40:a3:f2:5d:cb:ff:12:62:38:3f:3b:
                    0a:8c:a3:17:c7:18:50:23:b2:ae:de:17:10:c1:a1:
                    b1:1a:c5:47:92:8c:88:d5:34:ba:c1:c5:d1:90:c9:
                    05:38:8e:67:40:b4:52:59:5d:55:63:9a:14:12:a2:
                    41:72:af:57:ad:4e:1e:85:98:bd:83:5b:9e:d7:dc:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0A:EC:EA:50:39:78:2A:53:CE:AD:C6:8E:70:8A:DD:8B:BD:FE:37
            X509v3 Authority Key Identifier:
                keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:be:36:27:e4:25:98:70:0d:7a:9b:03:16:57:c1:92:93:7b:
         7e:e7:10:b9:90:bd:12:8b:ef:55:d0:d3:e7:9f:d9:07:c4:f8:
         fb:4e:c7:9d:f3:58:d9:57:89:4f:2d:ba:6f:c9:72:a7:9f:91:
         d0:c2:f7:ad:fd:78:7c:65:e1:9e:51:f5:e6:9c:a3:ac:a6:09:
         da:25:38:c9:e4:7b:d7:c7:39:74:53:8b:54:4f:b3:d7:dd:e9:
         f8:02:f8:0d:b3:9f:72:3f:98:d8:af:ca:0b:5a:35:d4:11:6a:
         8e:b6:05:da:92:72:d1:b3:df:e8:84:71:78:f3:a7:9b:6e:22:
         39:0b:f8:44:27:55:24:8b:07:49:ac:a3:22:ab:fb:7d:10:a1:
         7b:60:ff:c2:4a:6e:4b:6b:28:16:50:c0:ae:31:d7:c1:3e:6e:
         74:80:21:8a:eb:1c:d7:70:19:3c:10:c7:47:77:1d:7e:5d:ae:
         f5:30:b7:43:d2:d5:57:7e:68:82:89:86:15:a4:9b:94:14:b1:
         0f:f1:7f:e3:81:68:c7:ef:de:40:6c:7a:50:6c:4f:05:48:43:
         79:33:0d:bb:ed:0b:10:d0:9d:de:da:a0:7b:74:bc:dc:70:10:
         d6:52:78:17:c9:e2:d2:68:b3:44:28:f7:4c:98:e2:e1:22:d7:
         f6:e0:81:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:43 2026 by rpki-client