Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
File:                     cLpEaydfH7B3gkLA1jNipZqs81M.mft (raw, json)
Hash identifier:          1iHKBQMIc0KdDlZ1NMBUzOxf2BtK0nF45sv37s9Puy8=
Subject key identifier:   E3:FB:12:80:D0:04:7A:EE:EA:EA:91:56:58:76:73:6A:3F:25:C9:68
Authority key identifier: 70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53
Certificate issuer:       /CN=70ba446b275f1fb0778242c0d63362a59aacf353
Certificate serial:       019EC1487D94C2D6BF007E19C37FC3099D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
Manifest number:          01E5
Signing time:             Sat 13 Jun 2026 14:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:13 +0000
Files and hashes:         1: 25rki9raSskY_1lKa4rwJV1Jksw.roa (hash: D5anQB7jArwGFoNuxj26rwHUlWIxs7xjqOd73F4p8HM=)
                          2: LgALOI5_I6jb53Ow_J_nnO3aXdQ.asa (hash: eU6LOPHHMrKuq0WuI7L7NZjJ1j5BudGRJxH8SR2SSVs=)
                          3: cLpEaydfH7B3gkLA1jNipZqs81M.crl (hash: JdPavu9zm2XiO5B8YDcNf2b6dhkLK7qtrDFlTKgNnOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:7d:94:c2:d6:bf:00:7e:19:c3:7f:c3:09:9d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ba446b275f1fb0778242c0d63362a59aacf353
        Validity
            Not Before: Jun 13 14:00:13 2026 GMT
            Not After : Jun 14 14:00:13 2026 GMT
        Subject: CN=e3fb1280d0047aeeeaea91565876736a3f25c968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:ba:7c:66:c0:d1:73:74:7b:00:81:f1:3c:
                    bb:9b:a0:0c:cf:53:e8:76:39:88:72:68:a2:03:35:
                    93:af:c6:d8:05:6e:63:d7:39:28:39:a0:f6:3d:f9:
                    94:2b:b8:b4:8c:13:94:46:f5:a0:c3:5a:b8:63:3e:
                    e5:cc:d2:01:bb:ea:87:ac:28:b9:7d:03:b4:45:44:
                    92:e1:e2:38:77:6c:92:b2:4e:d4:1c:39:bc:43:4c:
                    69:79:c0:ff:6f:68:78:82:54:89:90:8c:b1:e5:8c:
                    e1:85:54:7d:11:26:59:72:47:e0:06:cb:91:14:58:
                    29:f5:18:dc:ca:72:f6:03:04:ea:de:0e:6c:79:a2:
                    f0:8e:a5:98:d4:10:37:6f:8d:49:f2:ed:a5:92:a4:
                    d3:32:fc:5f:f2:48:da:15:02:69:6c:4c:64:0c:55:
                    22:c1:41:02:31:c9:3c:c7:19:b8:62:e2:90:09:75:
                    1c:9a:23:21:5d:33:72:e3:c9:16:a5:0d:f1:73:5a:
                    c8:2a:cd:3f:e4:72:8a:ac:3c:54:36:86:9f:3e:5e:
                    cf:16:28:eb:b9:0a:b1:90:62:13:b5:f3:c3:0a:9b:
                    9e:00:88:07:8f:86:e9:9b:9c:b2:9b:2c:26:9e:f2:
                    13:b2:28:53:8a:43:7f:9e:39:a6:fa:13:6e:c9:27:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:12:80:D0:04:7A:EE:EA:EA:91:56:58:76:73:6A:3F:25:C9:68
            X509v3 Authority Key Identifier:
                keyid:70:BA:44:6B:27:5F:1F:B0:77:82:42:C0:D6:33:62:A5:9A:AC:F3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLpEaydfH7B3gkLA1jNipZqs81M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/e32293-673b-4fce-91cf-202d2453945c/1/cLpEaydfH7B3gkLA1jNipZqs81M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:09:19:55:13:10:1f:41:7d:b9:5d:e4:ff:e5:2f:1e:b3:8a:
         3b:2d:3f:c5:97:7e:b7:c6:37:8f:34:18:49:d1:3f:b9:b8:3e:
         85:ee:30:49:45:37:bc:ee:4c:e0:4d:3a:8b:59:0b:b4:44:5a:
         d3:bd:7c:da:f6:fb:04:b9:eb:ec:72:f0:40:4e:5c:89:c8:d9:
         bc:02:a8:d7:b8:47:d7:aa:f3:03:c6:08:64:3e:1a:0d:16:66:
         52:21:bc:67:b3:24:66:f4:ff:55:1c:f8:06:a5:dd:1c:2d:0c:
         c6:e3:84:96:d6:cd:fb:84:23:a9:4b:95:40:5a:3a:f6:60:33:
         67:b7:74:14:d5:e7:ea:5e:d8:f6:58:7c:2d:4c:1a:22:0a:4f:
         d5:0c:94:02:20:bf:27:21:be:56:5d:93:04:86:07:40:ac:46:
         76:47:28:13:a5:de:0e:af:c9:e1:09:83:1f:eb:15:ee:79:ef:
         98:be:e8:2b:6f:2a:b6:15:cb:b0:53:11:f3:0f:fa:c5:e1:09:
         b8:af:76:96:e5:1d:58:13:7f:8b:6d:47:e2:4c:fa:fa:3b:8b:
         56:61:85:23:c0:25:b1:07:42:cb:17:1b:f7:30:ae:01:94:3f:
         39:08:b6:fa:94:55:20:75:77:37:34:82:1f:e3:64:86:0c:62:
         e9:ff:ed:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:51:10 2026 by rpki-client