Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
File:                     0luQuJgbWR11p-k14TBKdAdWAv0.mft (raw, json)
Hash identifier:          K/tPA3wyuKKY7ibnfCGDiw4KuJRTefdeMcDL/g7t/Ww=
Subject key identifier:   2C:9F:40:87:07:DC:FC:A0:9D:DA:B0:02:B3:B2:4B:5F:15:EE:3B:F3
Authority key identifier: D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD
Certificate issuer:       /CN=d25b90b8981b591d75a7e935e1304a74075602fd
Certificate serial:       019EBFC903C830D2F921D6B5136D172513DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
Manifest number:          1834
Signing time:             Sat 13 Jun 2026 07:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:22 +0000
Files and hashes:         1: 0luQuJgbWR11p-k14TBKdAdWAv0.crl (hash: iew+trplv55q5AX5oI48vihvkTNgpfKnHbCKi8l9omE=)
                          2: PzBJvCvuKoLcfTByzdz7KrKT9g0.roa (hash: 3oZ6E/qyPFCkNxJX9IOFDQ5m/aqdqH2CkJ/hq3ptHGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:03:c8:30:d2:f9:21:d6:b5:13:6d:17:25:13:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25b90b8981b591d75a7e935e1304a74075602fd
        Validity
            Not Before: Jun 13 07:01:22 2026 GMT
            Not After : Jun 14 07:01:22 2026 GMT
        Subject: CN=2c9f408707dcfca09ddab002b3b24b5f15ee3bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:4a:1d:ad:e5:1c:ec:fc:3f:b1:a8:80:7b:
                    86:0b:63:da:0c:14:12:a4:1d:13:71:cf:b9:e1:67:
                    d6:8d:b1:ab:cd:ed:38:16:4b:b4:3b:86:b7:67:d9:
                    57:ca:d3:77:24:86:9d:ed:bf:df:88:02:10:dc:44:
                    4b:2b:82:33:04:2e:c4:fb:18:87:f4:31:7b:b6:9f:
                    ab:2b:a5:1f:5e:1a:36:b8:f7:24:58:95:0c:87:06:
                    7c:7a:40:f8:55:b4:ea:0c:a6:33:11:54:1b:a1:c8:
                    71:e0:a8:80:49:2f:6c:a5:24:52:e3:10:50:59:a9:
                    e0:d5:8f:ea:91:fe:77:5c:e4:23:fe:31:a5:17:f6:
                    74:62:43:7c:ab:65:fb:20:ae:73:88:65:5e:10:00:
                    00:5b:bb:9e:c0:3e:1b:91:15:9e:ce:0b:38:5e:f9:
                    d1:59:1f:2f:d5:28:cf:22:cd:44:aa:04:e3:49:dc:
                    f0:fb:b7:dd:7f:5a:c0:80:3c:34:96:5b:ce:5c:42:
                    08:2a:ce:de:f6:9c:96:05:a6:07:62:32:bd:d0:81:
                    69:b5:75:e3:3a:db:09:c0:17:75:ce:65:65:c5:09:
                    f7:84:ee:97:ce:21:4c:d0:ff:a3:d9:3c:39:bd:6a:
                    7a:47:ea:8d:87:55:92:aa:98:f2:74:24:38:8f:1c:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:40:87:07:DC:FC:A0:9D:DA:B0:02:B3:B2:4B:5F:15:EE:3B:F3
            X509v3 Authority Key Identifier:
                keyid:D2:5B:90:B8:98:1B:59:1D:75:A7:E9:35:E1:30:4A:74:07:56:02:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0luQuJgbWR11p-k14TBKdAdWAv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2ce520-ec07-45ef-b587-a2abdadf5f90/1/0luQuJgbWR11p-k14TBKdAdWAv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9f:87:69:85:76:46:f1:75:45:03:6b:db:d8:6f:ed:00:6c:
         69:78:f2:bb:4f:f8:9b:5d:69:e1:5b:8f:08:6d:5e:a3:79:d1:
         7f:45:c6:5f:b9:3d:24:5c:17:66:c6:f4:68:f8:c8:26:2c:97:
         0b:ee:0e:c0:39:2d:b2:0c:b7:b9:9f:29:15:25:74:44:6e:1d:
         98:bf:4a:1a:2f:6d:e4:6f:a9:e0:0d:35:bf:34:8b:71:72:ed:
         f0:e3:8c:81:b4:f8:a4:bc:cd:bb:44:a4:6e:c5:56:98:7b:f5:
         19:64:cb:5c:a8:b8:f1:29:f2:6b:b4:db:83:33:30:9e:b8:b9:
         f8:4f:1f:fd:f4:c8:1b:f9:03:8a:f8:fd:c0:48:93:73:11:d5:
         81:7c:24:52:eb:85:47:77:b1:d5:08:77:ef:0f:c7:3d:7a:a6:
         42:fa:32:3c:8a:f8:ba:0c:00:a8:07:a7:c7:e0:29:df:fc:41:
         37:93:51:0b:b2:e4:6f:e2:57:90:ec:8e:d4:73:67:67:c8:41:
         c0:c7:fd:41:10:92:58:8e:e1:9f:97:a9:d6:22:21:41:1e:cb:
         1c:8e:d9:9e:a1:58:d5:56:9d:c3:c6:cc:b8:b3:c2:d9:84:d8:
         dd:b7:26:da:c3:76:e7:8f:4d:dd:8a:d0:20:5f:89:61:4f:eb:
         9a:15:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:06 2026 by rpki-client