Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File:                     RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier:          T1a4TWwJAX/JE3uR15G5rptJRIshJHksBCixkaN4ODA=
Subject key identifier:   D8:DD:89:30:CE:D6:05:AE:6B:D6:9B:12:8A:FE:AB:DC:CD:D1:DE:84
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer:       /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial:       019EBE4870DE644002B18BFA6B56191C2AFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number:          0464
Signing time:             Sat 13 Jun 2026 00:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:18 +0000
Files and hashes:         1: BWVL9f-KpOOHJHITcd_zmQga4BM.roa (hash: 16slF0zkT/3GuOWybhDOTweAZ519QDUn0ORtD9/qMi4=)
                          2: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: fD6ZpqFmhxr1J0rMc7QotgYVJSrJsdU3OlomwLxiYZI=)
                          3: wFIGK-hJfwnzYHOy-0zpMlYIwX8.roa (hash: ijX/47c/1yaEzAjtMYS0nchNRSTG2HHJG2gdZxBcrMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:70:de:64:40:02:b1:8b:fa:6b:56:19:1c:2a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
        Validity
            Not Before: Jun 13 00:01:18 2026 GMT
            Not After : Jun 14 00:01:18 2026 GMT
        Subject: CN=d8dd8930ced605ae6bd69b128afeabdccdd1de84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:14:b3:2f:cb:20:77:93:1c:60:dc:21:a7:
                    a5:79:4d:fa:df:72:7d:bf:e0:be:a8:0a:bb:0e:e3:
                    0e:95:86:48:da:6a:a3:34:46:50:2a:3a:29:ce:57:
                    53:bc:54:28:6f:90:20:3a:b1:86:1d:dd:e4:36:e3:
                    38:18:92:30:0c:ba:a1:97:35:28:75:46:e5:df:56:
                    76:76:0b:65:46:06:8a:87:74:4a:69:e2:cc:33:8f:
                    11:6f:09:48:a2:46:b1:b6:c2:d8:7c:1d:62:db:88:
                    e3:49:dd:ab:a2:ce:1f:44:bf:ce:dc:a7:b8:ea:b4:
                    03:c6:f0:fd:48:4e:13:0d:ca:16:f9:d8:fe:27:ca:
                    c1:a3:c4:7b:a2:5b:8f:68:09:cf:45:c5:f8:58:e7:
                    62:e9:f1:94:2d:37:5c:9c:5d:18:43:cf:03:d0:e2:
                    34:da:5e:1c:4f:ba:24:ae:a1:fe:63:88:67:1f:bd:
                    f9:79:e6:b3:fb:9e:87:74:f5:84:65:0e:86:7f:db:
                    82:21:6e:42:a5:7b:42:3d:26:3f:3f:d6:3f:67:6f:
                    5b:f2:db:f3:05:ff:3a:4f:7b:30:82:1f:34:ae:61:
                    22:d8:0b:f1:97:06:5a:7a:6c:5a:ec:f6:50:0b:bd:
                    e2:28:5c:d7:9c:17:dc:8d:bf:98:0e:e8:b1:d5:60:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DD:89:30:CE:D6:05:AE:6B:D6:9B:12:8A:FE:AB:DC:CD:D1:DE:84
            X509v3 Authority Key Identifier:
                keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:57:53:bd:a4:37:32:17:59:a9:a9:3f:db:55:9b:4a:f0:9a:
         54:f3:51:cf:c7:c0:4c:17:92:e1:71:5b:fe:9e:2e:35:91:c7:
         36:1b:c2:98:ff:8f:5d:5a:c0:ce:fb:8f:9f:aa:3e:41:66:71:
         8d:d8:89:9c:f2:f2:dd:3e:c4:57:68:30:68:7c:32:6c:0f:ec:
         1d:76:2c:12:f6:72:e3:31:66:2a:68:9e:b4:22:07:f7:fc:cf:
         c7:fb:f1:0e:c7:e8:4b:22:00:6f:40:34:e1:22:cb:8c:fb:59:
         5a:7b:be:3c:c7:0b:f9:58:9a:fc:20:66:5e:7e:8e:34:3e:42:
         9b:df:3e:c9:1f:22:9e:e6:ff:06:03:68:08:15:60:a8:a0:ac:
         51:b2:5a:02:de:86:b7:64:f9:f8:af:e4:14:47:5f:38:16:e5:
         70:7c:a1:46:9d:49:f4:7b:29:7b:f9:53:cc:65:38:9e:6a:d9:
         3a:6d:72:ca:6c:65:30:c6:af:d0:eb:11:a4:61:83:2c:e9:b8:
         fb:22:33:cd:20:59:2d:f3:38:47:b6:86:20:73:c9:8e:5b:6c:
         09:8d:59:9f:22:7e:3b:09:19:21:47:6c:9b:38:42:34:92:f7:
         57:03:02:5d:df:bb:8e:aa:09:4e:bf:02:b5:80:5f:aa:5b:d0:
         cc:c7:9d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:25 2026 by rpki-client