Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File:                     0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier:          jwRgz5pSkCvRliDEZWm5tkRH6rIqT9zYHRyy447JIW4=
Subject key identifier:   91:93:3E:97:13:94:91:03:48:6F:D6:59:FE:88:63:0D:AC:C7:B2:13
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer:       /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial:       019EC2C918B7FDA49517496E08E16DF8ED2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number:          0B45
Signing time:             Sat 13 Jun 2026 21:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:19 +0000
Files and hashes:         1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: hg/qz4AMu5WVNkq0nHm7iCdusdmhpDH0JedOKtXhTlE=)
                          2: X_8Np37khTcPCEtRXHbNQfqvQNE.roa (hash: XNLBBBK7IAMNXci8RcPDaNEkuHX48HSzOY+bMxN50u4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:18:b7:fd:a4:95:17:49:6e:08:e1:6d:f8:ed:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
        Validity
            Not Before: Jun 13 21:00:19 2026 GMT
            Not After : Jun 14 21:00:19 2026 GMT
        Subject: CN=91933e9713949103486fd659fe88630dacc7b213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:0f:e3:09:10:28:b4:23:14:a2:6c:71:7f:
                    90:15:be:51:d7:e6:96:84:ea:0c:2f:4d:a9:ef:cb:
                    cc:83:45:1a:d9:92:41:0b:fa:ea:51:85:5b:fd:38:
                    28:6e:a4:be:c3:01:14:04:12:6b:39:41:3b:0f:4b:
                    67:b6:4b:66:f7:32:36:a0:d7:74:90:cb:69:ef:63:
                    08:40:19:f5:41:d2:67:20:0c:70:95:56:50:03:d5:
                    4b:9e:51:9b:05:08:a2:b1:3c:98:0f:9b:6a:e1:b9:
                    c9:c0:3e:57:39:a2:ef:bc:8a:b9:35:67:50:cd:d8:
                    cc:1a:f6:0c:ef:52:cd:00:b9:44:41:db:2c:e2:78:
                    05:49:58:0c:d6:cc:a2:47:b0:d1:08:01:e9:de:92:
                    fb:29:91:86:74:70:a2:77:1b:99:a6:80:6c:81:dd:
                    dc:1a:13:d2:db:be:a9:c1:57:ca:0d:f6:a3:4d:0b:
                    7a:13:03:f0:f4:8b:b6:3b:2e:5b:f2:3d:91:59:e6:
                    a0:13:71:45:2d:90:00:e8:7b:c2:42:53:9c:66:bc:
                    84:8b:5b:ab:d8:45:e7:e0:9e:a5:ce:88:92:0f:a0:
                    10:25:28:1b:56:14:b5:d8:a2:e6:38:e0:25:0f:b7:
                    61:f8:54:b7:1d:a3:69:46:0c:b9:12:19:4f:ea:9e:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:3E:97:13:94:91:03:48:6F:D6:59:FE:88:63:0D:AC:C7:B2:13
            X509v3 Authority Key Identifier:
                keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:c2:d9:4b:e8:9c:cc:85:88:45:6c:ca:04:58:df:12:33:
         d4:a9:8b:3b:97:36:54:7e:8e:b0:ee:76:b5:45:f6:e7:87:e4:
         32:9c:f6:3a:3b:54:5e:ee:57:a5:e3:f9:0d:6c:0b:6e:6b:d0:
         32:e0:9b:d9:db:ce:a2:48:77:e0:22:fd:98:02:40:44:6f:7a:
         e3:2c:b1:18:d7:a3:82:87:82:ad:cd:47:c3:14:74:ec:97:66:
         16:01:06:0a:62:66:b1:43:9b:c3:7b:da:0c:95:37:84:c8:ed:
         eb:52:ad:44:a6:72:56:f8:c0:8b:fd:21:1a:7a:d1:9f:75:a4:
         f4:5e:4e:05:22:9d:f6:29:ef:c7:04:aa:75:ff:51:cd:54:c8:
         11:9d:35:b7:96:f8:59:e5:ac:6e:d0:85:af:1b:31:64:42:8f:
         25:72:27:24:5c:45:38:9d:cc:68:03:a7:9d:e5:98:85:49:c0:
         25:74:78:54:bd:dc:0b:fc:9c:a2:08:b4:2d:24:dd:cd:c4:d4:
         44:af:89:6b:4c:7a:68:aa:aa:7c:6b:75:4e:90:c0:7f:4e:12:
         df:53:27:f3:5c:62:96:69:4f:30:6b:47:8f:fc:d0:1c:a7:cf:
         99:2a:20:81:1f:e6:24:f3:df:7e:ee:5a:d4:c7:4d:0d:b4:ad:
         8c:7e:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:09:19 2026 by rpki-client