Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
File:                     D97nlErE2jERKV2B4p3roAwWOpY.mft (raw, json)
Hash identifier:          XGgdFyT9Au4L+iTcFoCdU2f+K26cwGmF8DD8Mw0u2pY=
Subject key identifier:   BD:A5:AA:0D:EE:DE:D3:31:1F:D3:30:61:08:3C:6E:76:F1:BE:C6:38
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Certificate issuer:       /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial:       019EBE7F33E11A50D55F7622DF63266CC02F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
Manifest number:          1354
Signing time:             Sat 13 Jun 2026 01:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:07 +0000
Files and hashes:         1: D97nlErE2jERKV2B4p3roAwWOpY.crl (hash: 4Z7+Fu9IfAjlHTVi9dLXl2y3C2A4+MuBYjGXtQTjOTc=)
                          2: WgNv7-eEqKwSW95Nva_O1MQX1iY.roa (hash: 9ipqetu8ePvj0pp7eCO9cwEQqK0gXGR/o2mUfaHu77U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:33:e1:1a:50:d5:5f:76:22:df:63:26:6c:c0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
        Validity
            Not Before: Jun 13 01:01:07 2026 GMT
            Not After : Jun 14 01:01:07 2026 GMT
        Subject: CN=bda5aa0deeded3311fd33061083c6e76f1bec638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:d2:5e:9a:3a:04:f5:55:7d:02:96:e2:28:
                    9a:2f:84:74:ad:96:e6:d9:7c:6c:46:63:9e:aa:16:
                    d1:c3:e7:12:50:61:42:a6:c0:08:27:03:fc:d7:0a:
                    41:35:72:d5:36:cd:e5:69:8f:ad:a2:1d:0c:b8:10:
                    40:34:c2:67:50:43:3e:b6:78:85:2a:d4:59:64:86:
                    7f:12:f7:86:40:76:30:db:cd:fe:e9:90:30:54:e3:
                    25:8c:eb:45:b3:6e:a9:eb:8b:4c:51:a2:2b:89:7b:
                    83:59:b5:08:3b:e6:f4:ad:08:66:d4:43:4d:c5:b4:
                    90:9b:77:72:65:15:5d:9b:07:f4:20:d1:d0:af:49:
                    b3:2d:81:ce:af:f6:2a:47:72:e0:ed:56:40:2f:67:
                    c5:b6:cd:a7:4a:1c:58:9f:17:72:37:7a:6e:de:4e:
                    6f:d5:c4:34:46:ed:5e:2b:7e:57:71:bb:f8:2b:28:
                    ea:52:af:78:b1:aa:51:72:75:cd:83:08:13:0c:ef:
                    71:ae:7d:30:45:08:e6:52:a1:89:27:eb:61:7b:c6:
                    b6:2e:ab:c6:1d:64:1c:68:4f:86:12:d3:4b:62:80:
                    f7:ba:03:ec:d4:fa:b6:e8:39:91:b5:04:4f:be:b5:
                    11:40:f3:8c:ae:cd:82:6e:17:ca:7e:94:14:f0:8b:
                    8d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A5:AA:0D:EE:DE:D3:31:1F:D3:30:61:08:3C:6E:76:F1:BE:C6:38
            X509v3 Authority Key Identifier:
                keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f4:cd:7e:f8:23:d3:b5:39:de:b0:91:bb:34:36:dd:5a:68:
         03:0f:cf:33:b4:fb:5e:c4:a9:ec:52:35:49:ca:ff:fa:22:c2:
         c6:51:e1:96:ca:50:60:bc:a1:62:29:ac:80:7e:ac:4d:75:7a:
         46:61:73:64:7d:88:3a:e8:0c:80:53:78:97:c9:39:4e:6b:94:
         8a:56:a3:9d:09:b3:90:b7:74:84:fc:ca:9c:f6:8c:73:ca:74:
         fa:da:b3:f7:4c:55:06:18:d5:25:10:5c:53:63:a8:48:34:0d:
         64:da:fb:35:c2:e6:87:bc:69:ac:81:ca:f0:35:b7:56:58:19:
         9e:f8:04:cd:4c:c1:79:c0:08:40:1d:be:bb:27:69:e1:be:d0:
         e2:5d:5c:18:7c:31:5d:39:29:d2:5c:11:12:ac:e5:97:3c:f8:
         3b:0e:3e:31:ee:68:ad:e6:af:da:f6:16:fb:ce:9b:16:01:6e:
         11:af:b3:aa:2c:41:b4:b4:91:17:5b:25:6b:5a:68:b7:87:68:
         4b:38:84:57:3f:37:01:0f:82:5e:f7:fc:56:b7:44:bc:61:e7:
         fa:f0:04:91:ec:45:85:20:06:06:ec:13:24:ec:6a:de:42:ef:
         96:2d:dd:ad:f9:2a:a4:52:67:84:e2:a5:6f:f6:80:b0:60:ba:
         72:20:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:32:30 2026 by rpki-client