Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
File:                     2s4o8ixufkRLsKflKhUzuA3ueBg.mft (raw, json)
Hash identifier:          UNVyEcS1grZ/pCJAPEHiU0ty40/nC8sjHRLMQ4bQXRU=
Subject key identifier:   E2:F1:39:A9:4B:5D:1C:5C:B7:53:36:DC:F7:B9:47:6A:66:52:2E:4B
Authority key identifier: DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18
Certificate issuer:       /CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
Certificate serial:       019EBF918C66279402F592F1DFE1B18E4A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
Manifest number:          03C7
Signing time:             Sat 13 Jun 2026 06:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:47 +0000
Files and hashes:         1: 2s4o8ixufkRLsKflKhUzuA3ueBg.crl (hash: ndAAW4qu2WkdigWmaudNNyxjeoA29bXDXJEK+vExg0w=)
                          2: uzwRSecIzXXYWfgJfZsJeESUkdo.roa (hash: F/+k7rYQfNtdvgAZPkZ7IVUpCs68QRZv55pPhKsqLbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:8c:66:27:94:02:f5:92:f1:df:e1:b1:8e:4a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dace28f22c6e7e444bb0a7e52a1533b80dee7818
        Validity
            Not Before: Jun 13 06:00:47 2026 GMT
            Not After : Jun 14 06:00:47 2026 GMT
        Subject: CN=e2f139a94b5d1c5cb75336dcf7b9476a66522e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:7c:ff:48:5b:0b:05:5d:82:48:27:24:a9:
                    cc:19:82:d0:3a:28:f5:28:e5:c5:a1:71:5d:bd:2f:
                    54:7c:cb:d9:db:dd:13:8c:43:32:c9:f3:08:ec:2e:
                    dc:6c:0e:de:66:02:9d:82:a4:65:d1:0a:68:2e:25:
                    ac:6c:21:eb:a3:b2:94:9c:2f:e0:9d:7e:d1:1f:e8:
                    55:34:c4:61:69:c8:51:eb:18:46:51:69:72:1b:be:
                    3a:79:9f:5a:41:37:6b:ac:6a:6c:dc:50:98:92:54:
                    a9:e1:dc:4d:dd:cc:76:25:4a:40:b0:db:9c:e8:8f:
                    71:91:12:d0:53:e3:19:ba:3e:64:16:11:0b:3f:46:
                    6c:9e:4b:c4:02:e9:03:96:e5:fe:a0:9a:7f:78:59:
                    c3:12:f0:54:3d:08:2b:eb:dd:11:52:1b:3a:f0:3e:
                    e9:9e:e2:31:dd:ba:ff:41:5b:b9:7e:80:73:85:0c:
                    df:72:40:b6:7c:68:1f:8d:19:98:11:a9:fe:76:7b:
                    e8:9f:d8:1a:7b:10:cf:1a:78:68:96:02:b9:b6:ae:
                    83:4c:40:7d:56:4d:75:37:52:75:e9:1c:b2:dd:df:
                    52:ab:f4:e3:e7:7e:d6:23:b0:db:d9:3d:6b:ed:f3:
                    fb:b3:08:f4:93:8f:05:6b:29:9d:de:98:c8:4f:63:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F1:39:A9:4B:5D:1C:5C:B7:53:36:DC:F7:B9:47:6A:66:52:2E:4B
            X509v3 Authority Key Identifier:
                keyid:DA:CE:28:F2:2C:6E:7E:44:4B:B0:A7:E5:2A:15:33:B8:0D:EE:78:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2s4o8ixufkRLsKflKhUzuA3ueBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a96c9c-b855-4fda-a5f7-75c9b2478e3e/1/2s4o8ixufkRLsKflKhUzuA3ueBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0b:26:7b:a4:8b:e0:0d:14:53:84:a2:4e:38:a6:59:1b:8b:
         70:47:62:fc:12:a9:21:1f:95:29:bb:47:29:4c:3d:51:80:fb:
         dd:2d:d9:d8:16:e3:10:c7:16:92:ea:a0:96:25:0b:88:7d:d7:
         fc:45:07:1f:32:6b:eb:91:c6:7e:e5:99:ef:6a:c8:6b:6e:ef:
         32:24:62:b2:2a:1c:95:22:48:ec:35:14:d5:f1:cc:80:58:38:
         54:85:60:b0:3f:4d:ab:d9:b6:d4:72:2e:a4:df:69:53:96:8d:
         8e:8b:bd:7c:ad:7d:e0:8b:97:f6:a7:6c:a8:fe:e3:6f:1c:75:
         04:fb:a0:6a:0e:f2:e6:3a:9c:75:03:d7:cb:84:b8:16:d6:e5:
         cc:53:dd:74:8d:3e:1c:5b:e4:c0:5d:bf:cd:d6:5f:3a:f5:50:
         55:19:77:de:ff:e4:8b:77:54:53:b0:70:fc:d4:36:d1:84:3a:
         83:c9:ea:4c:76:b3:7c:6b:cb:9f:31:02:f8:aa:61:5e:b5:a0:
         55:1d:16:50:bc:8b:ed:a3:79:ed:39:11:d6:6d:e8:ed:e2:b8:
         00:6c:7f:58:cd:93:f3:05:a6:fc:3b:22:53:60:e5:42:59:ce:
         6a:4f:d0:57:8a:f7:8a:17:8a:83:e7:7e:6c:a2:c5:03:cb:f8:
         9c:e4:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:28 2026 by rpki-client