Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
File:                     dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json)
Hash identifier:          vgKRjvUWbFbLKleqpB0dYApu5sXUD1qcEgFCM5NNp9M=
Subject key identifier:   87:0C:11:64:81:41:7D:26:76:02:CC:2C:CA:53:5E:58:FB:31:16:FA
Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC
Certificate issuer:       /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
Certificate serial:       019EC3008594CD5C77DE76765F046465E2F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 22:00:51 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:51 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:51 +0000
Files and hashes:         1: PgUrSIC9VZIEAZAbzS3jonr68QU.roa (hash: 9aI4vQahlWjZFs2Tm+F0vRoH/2f981aEB9UaeXyLxMc=)
                          2: UjQ5_8P-tgBJJ1sJwKgrCTSAhHw.roa (hash: hSVwua4gNpTICWykb8bpfvs1YDj+/tR6yuNNGb31SDc=)
                          3: YFl0dNeZwCdbfQ3WGJ1MIOQDpdo.roa (hash: 1mP71yZ3Cuf0zDsZ+9/tw2WORdFZj0h4UY03Wvub7b8=)
                          4: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: rfnjnoKFROndz/28XQJF7u4d2KqXGGQyL/CMLzMr4hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:85:94:cd:5c:77:de:76:76:5f:04:64:65:e2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec
        Validity
            Not Before: Jun 13 22:00:51 2026 GMT
            Not After : Jun 14 22:00:51 2026 GMT
        Subject: CN=870c116481417d267602cc2cca535e58fb3116fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:81:7e:04:0c:03:e0:a6:da:8f:7a:ac:4e:
                    32:0f:ad:f7:a6:cc:30:c5:80:90:29:ee:ef:e5:17:
                    2e:8c:c3:3e:39:92:bc:a5:6c:99:80:42:ad:12:19:
                    50:33:f3:18:74:9e:c9:9a:ac:50:c4:7f:06:c6:27:
                    38:62:72:d8:56:61:51:c3:9e:0c:ce:7f:36:dd:ef:
                    af:34:75:7e:45:ff:ff:ae:54:5b:75:d7:86:e0:b2:
                    c0:e3:79:ee:82:5a:65:4d:e5:c9:87:f0:d9:cc:7c:
                    66:00:d4:29:78:51:05:7c:db:d9:0b:aa:09:0d:8a:
                    b4:fc:a8:19:a3:cb:53:6a:a1:ed:64:58:a3:62:bc:
                    8d:37:9b:a2:96:36:06:f7:dc:f6:8c:78:d3:12:8d:
                    12:2f:bd:28:7b:28:dd:dd:3c:bf:1c:13:70:6b:57:
                    82:db:6a:53:78:80:a3:9c:f4:0f:3d:51:f2:19:d2:
                    f5:aa:5e:e4:87:87:46:aa:e4:bc:7c:de:f6:5a:1f:
                    4f:15:4f:f4:b3:66:d3:a8:22:80:29:c9:74:c8:f4:
                    6a:a0:1e:2e:3e:e8:cd:bb:5e:ef:cb:ca:7e:a4:4c:
                    35:8b:29:98:4b:93:df:9b:2a:84:65:a0:73:3f:c1:
                    75:e5:71:ab:fc:f4:e6:ce:23:6d:ec:9c:bc:e1:48:
                    f1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0C:11:64:81:41:7D:26:76:02:CC:2C:CA:53:5E:58:FB:31:16:FA
            X509v3 Authority Key Identifier:
                keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:77:bf:ac:f8:42:9c:c9:f3:69:04:af:40:e6:40:aa:cb:
         db:8e:97:93:35:3a:c0:b4:2f:3d:be:cc:23:ca:00:37:18:f3:
         f1:22:45:7c:6a:28:d0:4d:55:61:31:b1:3a:28:c4:0c:34:da:
         d0:49:6c:ae:86:ef:bf:7a:9f:f4:cc:0a:f3:6b:12:62:31:d3:
         41:4a:a8:38:15:60:ed:5b:5f:84:2e:5b:b7:81:81:6e:71:17:
         4c:47:1a:37:97:b4:00:54:95:a8:17:0c:9f:07:f8:b5:4e:45:
         31:82:2f:d0:29:c2:53:0d:34:bf:e8:41:10:46:a0:c2:71:cf:
         ce:af:23:b3:66:cb:c6:e2:34:83:a0:a5:cb:56:fb:94:ef:9f:
         50:84:4f:ff:ed:c1:93:53:cf:f0:b7:a0:5d:41:dd:38:ac:7d:
         bb:77:11:bf:ed:d8:a9:a5:02:5d:3b:a7:e1:e1:10:8b:fa:38:
         ad:b0:73:7b:69:fc:34:36:20:12:42:ff:88:58:b0:fe:fa:30:
         3f:5e:cd:a0:c8:42:6c:a1:27:78:e0:80:49:c2:b6:5d:1e:7a:
         17:47:23:ae:17:31:73:c2:30:08:86:15:91:21:64:f3:ab:cd:
         1f:bd:64:1b:66:70:59:13:0e:b2:29:a0:ed:7a:c8:19:02:28:
         3e:b3:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:45:45 2026 by rpki-client