Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File:                     M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier:          sxIu3xpUrHLaITq3F+sVtV2BABl1GDgAb5KsNbrYWIM=
Subject key identifier:   BA:83:3E:22:E7:56:4E:D1:2E:3A:46:8C:2E:B1:F9:4F:81:AB:0E:49
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer:       /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial:       019EC3DC63C25E1563FF209DC273169C1EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number:          1118
Signing time:             Sun 14 Jun 2026 02:01:00 +0000
Manifest this update:     Sun 14 Jun 2026 02:01:00 +0000
Manifest next update:     Mon 15 Jun 2026 02:01:00 +0000
Files and hashes:         1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: L+5KMkIz1jaeCD3ETARoLQKpt48Nd/DBRliTSQKRxJg=)
                          2: dspttiokyRWTJ0EiYPb4T9i6tOw.roa (hash: QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:63:c2:5e:15:63:ff:20:9d:c2:73:16:9c:1e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
        Validity
            Not Before: Jun 14 02:01:00 2026 GMT
            Not After : Jun 15 02:01:00 2026 GMT
        Subject: CN=ba833e22e7564ed12e3a468c2eb1f94f81ab0e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:c7:5e:5f:6e:71:dd:10:8b:1a:0a:09:0a:
                    d2:08:7f:1a:cb:1e:b1:67:c0:41:ce:35:e6:1f:81:
                    ad:57:1f:eb:86:0a:0b:1d:e9:10:7c:b2:66:13:bf:
                    db:bd:06:29:24:c7:47:91:8d:b7:d2:e3:a0:fa:08:
                    89:ca:1a:d0:7f:80:51:d0:1f:17:3a:02:be:27:11:
                    36:2d:7d:da:9b:39:b4:50:33:59:a2:47:3a:80:bc:
                    ec:ff:2e:f5:82:11:aa:a2:ca:e3:a0:5a:31:8e:35:
                    ff:18:e4:db:46:6c:f4:3c:88:26:d0:85:f5:58:a9:
                    cb:c6:c8:ff:64:81:9a:cf:b5:51:c1:f7:07:24:ce:
                    15:ed:15:97:26:15:27:38:30:de:97:ea:6b:e6:88:
                    48:0b:e3:c5:39:28:db:9a:24:35:ed:6d:c5:bc:9b:
                    37:cf:37:a3:fa:9c:05:84:61:8f:07:8e:86:b8:ea:
                    25:95:be:3e:c9:ac:45:7d:d7:65:28:5e:d2:c9:5d:
                    6f:8f:47:38:f7:77:8d:45:1c:9b:a5:14:fb:24:38:
                    33:74:6c:ed:b2:fd:e1:4c:e9:31:60:0d:11:ca:ff:
                    ca:0c:da:ff:ef:10:c6:82:e8:4c:50:fd:a5:d5:a8:
                    80:ed:0c:cd:53:ba:8b:78:5b:50:de:b8:22:89:45:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:83:3E:22:E7:56:4E:D1:2E:3A:46:8C:2E:B1:F9:4F:81:AB:0E:49
            X509v3 Authority Key Identifier:
                keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:52:03:b5:c3:08:66:b7:0b:11:1c:68:0c:79:c1:36:f4:de:
         50:9d:c1:f7:28:38:5b:67:ad:c3:3d:66:09:7f:a0:be:c9:37:
         1d:9c:f8:fe:55:7f:88:50:64:40:00:d2:0b:6e:97:d4:51:f2:
         14:77:a4:ed:87:36:30:e1:03:93:df:47:dc:be:a5:39:7a:c8:
         d5:d7:84:f8:b4:13:39:7a:9a:5f:81:2e:95:26:e6:cd:82:1c:
         a9:58:c5:e0:18:a4:11:b9:17:04:0d:b3:af:cb:11:2f:ac:bf:
         45:b1:b8:03:ee:c2:38:0f:cd:b7:c8:2a:5f:a5:2e:11:da:b4:
         2e:8c:7f:0e:73:09:73:cc:fb:99:c5:f0:a0:59:aa:5c:81:7b:
         02:01:c0:b2:d2:b1:03:83:cd:73:70:77:9b:59:17:65:44:9a:
         09:2a:bd:0f:4a:36:da:38:e1:d5:71:27:87:d3:4d:26:3c:b8:
         61:13:77:5b:3a:f0:8b:42:5e:a8:9d:b6:67:e1:41:32:4d:fa:
         c5:a1:16:47:07:d0:36:9f:4f:02:e8:33:69:ad:7b:c4:5c:18:
         2c:36:49:b9:fd:45:f6:23:58:e2:20:bc:e7:02:76:e4:15:d0:
         74:58:ca:06:e6:c8:f9:e6:70:b7:3b:a6:f1:14:89:d4:c5:44:
         77:1c:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:57 2026 by rpki-client