Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File:                     24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier:          fKW27jMqpb0Zz/2nhuasqdQVA1+l6i8sTs0Smfk6Yj8=
Subject key identifier:   C8:FF:79:89:E8:76:A2:7A:0D:1D:79:5B:7B:4C:11:64:0D:88:D9:85
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer:       /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial:       019EBE47FD2F58E25A19ADFE51B9D19578C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number:          1889
Signing time:             Sat 13 Jun 2026 00:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:49 +0000
Files and hashes:         1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: 7ka/ZwjjVXmF+guJMBPu/cGBQSlb1E5AASRG03LpwtQ=)
                          2: A9NIUCeS1zPwwahwolyizlkZ3pE.roa (hash: 8JsJoaGMbyf8/2BNS3dFhevL10xA6I6i94mb3d7NgJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:fd:2f:58:e2:5a:19:ad:fe:51:b9:d1:95:78:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
        Validity
            Not Before: Jun 13 00:00:49 2026 GMT
            Not After : Jun 14 00:00:49 2026 GMT
        Subject: CN=c8ff7989e876a27a0d1d795b7b4c11640d88d985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:d6:2b:b3:65:ad:9f:09:69:e4:fa:be:4d:
                    36:22:19:44:67:9a:79:39:43:d5:bd:c3:b9:98:ee:
                    0b:9b:44:b8:bf:28:1d:80:d2:d9:fe:0d:04:91:ad:
                    df:91:5b:f1:3d:29:3a:db:e1:51:9b:58:94:6a:46:
                    fc:2d:df:2e:11:a5:32:7d:a0:15:2c:6f:9a:89:6b:
                    a5:e7:16:84:71:38:fd:1d:09:23:9e:0d:45:13:24:
                    71:5e:5e:06:0a:95:cf:32:d7:20:d5:a9:f7:5b:9f:
                    35:56:16:55:5b:a2:5f:f8:5e:d2:05:87:ae:40:10:
                    e7:bc:26:37:9a:47:0a:08:8e:82:6d:c0:17:61:cc:
                    37:78:6e:4f:a3:ec:14:ad:5a:e8:93:e2:6f:a0:3f:
                    49:2a:df:f9:c6:36:bb:3e:7c:3a:05:c3:7c:95:07:
                    e6:5e:24:0c:10:94:0b:65:4a:82:8c:64:c8:f4:2d:
                    30:4a:28:72:f1:8c:22:cf:64:2f:f6:50:af:a7:7c:
                    74:71:38:f2:ca:7d:3d:d1:47:73:e4:ac:fe:0f:64:
                    ac:62:9d:3a:2e:13:47:13:83:5d:21:0b:49:8b:1c:
                    31:c4:83:4c:2c:e4:2b:61:fd:97:d1:83:21:4d:3b:
                    f6:f2:c0:c5:5e:4d:ab:ea:cb:f4:88:b0:71:45:c5:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FF:79:89:E8:76:A2:7A:0D:1D:79:5B:7B:4C:11:64:0D:88:D9:85
            X509v3 Authority Key Identifier:
                keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2e:11:eb:1c:e1:70:fc:90:0c:e4:5f:9e:da:d8:73:96:28:
         1c:32:ec:4d:c7:66:b3:64:11:48:6c:64:14:b2:f6:bc:0f:1f:
         da:66:3a:88:2c:56:af:34:a3:e7:b9:15:d3:0b:e3:43:0e:a2:
         05:89:fd:e6:27:1c:17:cc:7c:e2:9d:30:ce:34:a9:bb:34:d9:
         98:bc:c4:e6:78:36:13:4a:60:43:ba:9b:2b:21:6e:b2:ff:24:
         f7:b0:81:d7:64:06:e6:bb:87:36:85:8e:14:52:dd:fb:8f:d9:
         5d:b1:dd:b6:55:d3:10:e6:b7:42:29:46:f1:18:dd:a1:95:dd:
         0c:64:7f:fd:e2:9c:8d:ed:f3:a6:7a:6e:51:db:25:c9:5f:fd:
         3d:1f:12:c2:16:44:0f:f0:75:e8:94:1d:e0:67:32:1d:1f:c3:
         d1:05:6a:ce:0c:16:ba:b2:88:f0:a6:96:5c:4a:ed:5b:f4:77:
         a8:71:e7:65:3d:40:ef:f4:f5:78:8d:29:1e:bc:c8:d5:ee:9a:
         9b:d3:57:9c:0a:ef:10:bc:55:03:9f:36:b6:1e:70:65:72:f7:
         db:3f:5a:dc:a8:a4:6e:b5:5d:3e:fb:db:a1:ff:9e:24:9a:f8:
         42:79:37:85:08:21:37:6e:98:06:cf:0b:dd:34:b0:2d:c9:a1:
         a3:97:54:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:53 2026 by rpki-client