Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File:                     7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier:          h4+MmMzdYwiCfGPcY2cZ1PugLgOp4gkh/eM0iSOFY70=
Subject key identifier:   2C:66:39:35:CB:BA:CA:25:EF:07:9F:C9:8E:B4:AC:FA:EB:43:01:8A
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer:       /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial:       019EC22512E74092E613959872F9E7837306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 18:01:10 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:10 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:10 +0000
Files and hashes:         1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: /HEbGlSP1lD+UYRx/fG2xTpe57fdDRI2FD0XRd1+1GY=)
                          2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:25:12:e7:40:92:e6:13:95:98:72:f9:e7:83:73:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
        Validity
            Not Before: Jun 13 18:01:10 2026 GMT
            Not After : Jun 14 18:01:10 2026 GMT
        Subject: CN=2c663935cbbaca25ef079fc98eb4acfaeb43018a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:65:16:b2:12:02:06:6f:29:6d:71:ae:f7:
                    30:4f:b4:54:4f:bc:85:20:39:96:51:94:c6:4f:4c:
                    14:c2:12:71:4d:ac:2b:08:03:4b:47:2c:02:fb:53:
                    e9:84:d6:03:4f:2c:e2:b2:6e:c3:d0:6c:54:f1:cb:
                    85:9c:0c:71:50:6b:e5:ee:45:54:f5:a1:9c:51:b0:
                    24:95:e1:2e:f8:af:76:b0:48:d0:ad:a6:ec:f8:67:
                    6a:a9:bc:aa:f5:41:67:07:68:c7:1d:87:8c:bb:d5:
                    ad:f7:2a:e7:68:2f:e3:de:b7:03:ab:10:6c:a2:c8:
                    8a:67:2e:4f:f6:c3:2a:55:dc:06:60:78:14:21:78:
                    98:be:ea:f8:32:dc:3b:f5:14:bc:8b:f7:3a:a3:16:
                    03:91:86:d1:d0:f8:9e:82:3d:ca:61:c2:9f:01:a2:
                    ab:45:b1:11:7b:96:3e:bd:72:de:32:13:31:6f:2e:
                    45:14:3c:7d:96:c9:6b:ff:84:8a:9e:38:df:75:f3:
                    46:46:6f:c4:bd:02:03:10:82:26:78:bf:f5:8b:0c:
                    41:b7:ce:9f:58:ba:f1:a9:85:03:21:d5:ea:f1:30:
                    96:9b:ad:00:44:01:86:7a:ff:7b:6f:97:65:f9:f2:
                    41:12:d7:c4:a3:3a:66:6d:d5:61:e1:43:37:26:0c:
                    39:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:66:39:35:CB:BA:CA:25:EF:07:9F:C9:8E:B4:AC:FA:EB:43:01:8A
            X509v3 Authority Key Identifier:
                keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ab:a0:eb:31:80:18:b4:75:da:c2:8e:5f:b8:68:f0:c1:6d:
         5b:f2:d1:72:dc:76:3b:27:70:0b:40:e7:8b:90:84:43:70:73:
         19:38:f0:d4:12:14:15:da:5e:6f:02:44:5a:ad:6b:f8:14:ba:
         4d:0a:d8:bc:0f:80:a9:2b:75:19:6e:5c:d0:7f:a8:05:e8:d3:
         3f:e1:69:de:e8:1c:df:72:6b:6a:85:4d:8c:6c:5f:62:e1:35:
         20:70:9c:27:f1:3f:a8:38:a7:30:b2:e3:49:c0:6c:89:60:a6:
         ce:66:d3:31:e7:57:22:69:2e:f0:cb:aa:34:07:59:c2:a7:c7:
         f4:54:df:d6:6e:dd:9a:6d:25:a1:d4:ad:46:e8:43:d5:94:36:
         c0:f5:95:4f:db:4e:d9:c2:96:e6:c3:eb:82:6e:ca:99:4c:69:
         9f:d9:9b:30:c1:c8:e2:86:6f:46:ff:3a:96:c9:a4:51:e4:8f:
         d3:ab:02:8a:a4:71:32:b7:56:cb:10:7c:ad:4a:f9:ea:43:09:
         00:11:d1:9e:19:2e:20:6e:d9:61:f5:65:0e:01:37:73:8c:da:
         f9:d3:60:3e:f0:a3:eb:c5:fa:90:11:86:d1:69:67:de:b0:98:
         e0:47:b8:1a:bb:d5:8a:64:a0:22:e8:53:ff:76:c8:33:fd:ef:
         f7:4e:2c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:13:50 2026 by rpki-client