Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File:                     481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier:          SKC2MLzyrYywNT1IBVAxtqvJQnxYt8T7q85wP8BuWXs=
Subject key identifier:   76:79:1C:83:99:38:F6:A4:4E:35:CF:DB:80:57:07:99:CA:28:8C:42
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer:       /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial:       019EBDDA3DFF0636637EF5736E4978AA4365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number:          084D
Signing time:             Fri 12 Jun 2026 22:00:57 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:57 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:57 +0000
Files and hashes:         1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: LC/vlBU+CoiiWfTj9QgPJkUOw6rYvBewxRcTSCRVXTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:3d:ff:06:36:63:7e:f5:73:6e:49:78:aa:43:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
        Validity
            Not Before: Jun 12 22:00:57 2026 GMT
            Not After : Jun 13 22:00:57 2026 GMT
        Subject: CN=76791c839938f6a44e35cfdb80570799ca288c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fb:46:56:eb:8c:19:43:d6:15:60:c4:0c:d9:
                    3c:5c:95:9c:b0:f5:91:3e:a2:be:f0:7d:f1:f2:ce:
                    e8:d5:51:4b:c9:7f:3f:f4:ea:b3:3d:cd:42:73:32:
                    55:8e:af:af:79:a6:b0:c7:1d:5e:f9:bd:f8:bf:91:
                    4a:aa:ab:0c:52:3e:da:a9:e0:cc:fe:ec:0b:c7:a7:
                    65:18:21:b1:d5:8a:5a:9d:36:d4:52:b5:13:64:45:
                    b1:ad:f2:49:a5:8c:74:5d:3e:aa:57:98:d8:cd:c1:
                    0d:68:5c:25:a2:e9:04:35:b8:df:fc:14:a3:60:fd:
                    ae:6c:68:8a:e8:e1:11:d4:b1:58:ac:18:18:e7:3d:
                    07:5a:82:d8:76:eb:17:d8:85:50:bf:0f:00:76:fc:
                    2c:53:3e:62:aa:e9:d3:63:0d:6f:bf:dd:36:84:d5:
                    a1:a0:af:41:ba:38:cb:ce:65:6e:dc:8a:f5:c9:e0:
                    3d:f0:64:4a:de:a0:f1:c9:b8:a3:a3:81:66:64:3f:
                    0d:88:67:93:57:32:62:f4:88:e3:16:49:14:47:32:
                    c8:5b:99:16:57:ba:31:9b:ab:a9:3e:c4:d6:5e:76:
                    c8:26:05:bc:6d:91:8f:01:d5:3c:ac:f6:2a:22:d4:
                    3c:cc:d2:6e:fc:7b:b4:f3:e9:3a:9a:de:1c:75:c2:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:79:1C:83:99:38:F6:A4:4E:35:CF:DB:80:57:07:99:CA:28:8C:42
            X509v3 Authority Key Identifier:
                keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:83:1a:ef:cb:45:2a:f2:dd:7a:85:05:ee:9b:91:93:d4:61:
         4a:a0:ff:33:36:a4:d5:b9:8e:fd:50:77:04:dd:b5:0d:ef:75:
         b0:fd:f4:09:e6:f9:9a:87:45:2e:fb:c9:71:29:a9:3b:48:f0:
         47:eb:b1:af:53:29:57:33:58:80:ce:ae:f6:28:df:cb:01:b1:
         7c:45:18:fc:24:9f:d8:e4:c1:7b:18:e7:96:b8:51:dd:f4:b4:
         65:ec:d7:a9:fc:8f:11:7d:97:d5:50:0c:f3:21:0d:4b:2e:b4:
         b0:b6:68:54:fc:46:0e:02:1c:a2:5c:b1:cf:bb:b6:4d:c3:98:
         d3:5c:60:8b:6f:58:35:ed:d3:ab:2e:85:8d:11:d9:82:1a:28:
         a9:4b:4a:68:0a:63:1c:09:e8:a2:5b:8d:84:50:48:51:be:cd:
         49:bd:f4:05:bf:e0:3c:ea:f1:10:e6:ae:11:da:10:cd:4e:48:
         06:48:79:3a:ca:a1:40:cd:1b:8a:40:62:63:b1:e2:f5:c3:e5:
         01:2e:78:16:93:bd:23:5c:c9:19:9d:db:a1:8c:be:21:d5:df:
         48:a7:21:34:5a:8a:d8:d8:45:42:19:8f:c3:ab:0f:eb:cb:65:
         83:6c:9c:b2:1b:39:cf:78:2c:90:68:13:51:6b:f6:6d:ea:80:
         ac:d9:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:42 2026 by rpki-client