Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File:                     V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier:          zxyQbZNJVgnjQ97gjgSyqSDeS2K0WPI0KHR9RzkOWIY=
Subject key identifier:   10:9E:7C:24:1F:A1:92:A2:E2:E9:E8:CF:C0:C6:2E:97:ED:D2:71:96
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer:       /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial:       019EC148E280239DAD0220EC82C6CA8BC439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number:          0688
Signing time:             Sat 13 Jun 2026 14:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:39 +0000
Files and hashes:         1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: c2tLbK8TKqlgQUJHmwL6OEIyCrGdwsXotnRYnMhAPBE=)
                          2: iz1NumDDEP4HEocZooUpzgUrWuA.roa (hash: Xh3SqqlYQ0WusNga4Qj1Gif5nRzkl+/fhOngglLEBZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:e2:80:23:9d:ad:02:20:ec:82:c6:ca:8b:c4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
        Validity
            Not Before: Jun 13 14:00:39 2026 GMT
            Not After : Jun 14 14:00:39 2026 GMT
        Subject: CN=109e7c241fa192a2e2e9e8cfc0c62e97edd27196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:84:ce:36:e5:0e:8e:70:62:67:5d:c2:81:
                    c3:57:50:fd:fa:84:00:9e:98:28:19:3a:ea:d3:2f:
                    e5:38:e9:e9:9a:4e:be:05:50:4b:fd:f2:fc:eb:f4:
                    f8:53:10:1c:78:84:31:63:5b:8e:9b:dc:8f:83:3c:
                    4f:f3:93:11:32:9c:db:00:f0:bd:97:46:f5:12:77:
                    53:af:c5:5a:c7:9c:f9:4f:79:0e:3b:cf:52:fa:d7:
                    7e:28:28:ba:cb:81:6c:1c:3a:3a:47:35:40:d9:b8:
                    da:1e:52:c8:7d:e0:36:95:6c:96:c1:c9:ed:14:a1:
                    c8:07:69:e4:d9:dc:ce:43:05:17:7d:aa:55:1f:2d:
                    f0:f4:d7:68:ee:7e:1a:db:2f:8e:40:2d:76:c2:29:
                    54:e9:c9:e4:20:ba:6c:47:f5:0d:97:04:77:9e:20:
                    f6:09:25:85:a2:21:a8:c7:45:a9:15:ee:07:e0:7e:
                    25:66:0b:fd:85:b3:f2:7d:5d:09:2e:14:5e:8a:28:
                    ec:a1:86:9f:16:3c:62:81:ae:9d:86:43:82:5d:4c:
                    bf:de:d4:6f:4d:f1:68:c2:5b:e9:12:a4:39:16:ac:
                    c1:d0:60:1d:6b:20:73:11:41:04:ff:a2:43:54:6d:
                    d1:d2:2b:70:fa:de:35:98:fd:52:14:ad:1a:cc:49:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9E:7C:24:1F:A1:92:A2:E2:E9:E8:CF:C0:C6:2E:97:ED:D2:71:96
            X509v3 Authority Key Identifier:
                keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:38:d0:9c:d3:2f:a8:c3:96:64:31:0b:6e:d2:f9:18:1e:f9:
         0d:e7:d4:a8:0a:e4:34:d5:d1:8c:88:5c:bb:16:cc:a5:bd:ea:
         13:83:63:a6:ee:ba:2f:11:82:db:79:a3:c3:4e:84:30:2f:54:
         76:c2:cf:55:3d:59:de:8a:c8:e1:55:77:c0:d6:5b:64:30:c2:
         b1:03:44:99:b5:a0:75:94:0e:ef:a0:ba:d8:d7:55:80:e9:f0:
         55:4d:bc:06:e5:18:42:2e:e9:fe:33:ae:7c:d0:f9:13:0e:0d:
         e9:de:bd:3e:fe:0f:29:08:ea:58:a3:c1:c3:8b:0e:75:10:59:
         d3:1d:1a:2a:74:ea:4c:07:36:ea:77:8a:66:6b:e0:a6:a0:b1:
         0e:a2:b0:2d:c3:60:6b:ec:ce:a0:b1:1a:6e:50:c9:bc:57:f0:
         1e:31:52:9a:4e:5e:8f:e8:52:fa:b6:e8:a0:c8:3a:46:54:1b:
         d0:99:b1:59:57:dc:3e:d5:37:d9:5f:a8:ce:06:3d:ff:ad:4f:
         fb:47:ce:da:96:f8:a0:ca:70:f4:60:81:42:8a:51:61:7c:19:
         ed:20:63:40:fa:3c:b7:97:09:64:f7:39:d0:3f:1f:af:7b:19:
         c0:0e:ff:e1:29:8c:6c:ca:3e:4a:9d:a2:2a:42:6a:14:88:65:
         94:6f:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:59:24 2026 by rpki-client