Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File:                     3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier:          LY1PwLzsEG3MQdPEaoUfIzAgI6H9V4K1FH2+wnzL1eE=
Subject key identifier:   AD:25:3D:F9:35:83:88:21:0E:83:42:FF:46:1F:2F:6B:1D:44:28:8B
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer:       /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial:       019EBDA2C5807A58C2D2B99BB0BE6CA8E062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number:          10BB
Signing time:             Fri 12 Jun 2026 21:00:21 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:21 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:21 +0000
Files and hashes:         1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: ywfNh3a9uLb6O7u5Rl97jYnY9rvZMmBdx2qvAz80qdc=)
                          2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:c5:80:7a:58:c2:d2:b9:9b:b0:be:6c:a8:e0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
        Validity
            Not Before: Jun 12 21:00:21 2026 GMT
            Not After : Jun 13 21:00:21 2026 GMT
        Subject: CN=ad253df9358388210e8342ff461f2f6b1d44288b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:6b:fc:99:21:73:cc:01:08:0b:4f:db:bd:
                    67:71:f5:81:d8:c8:af:70:80:f6:52:1d:ec:0b:31:
                    dc:4d:d5:37:e2:e7:5c:62:8b:5b:43:4b:fd:6a:cc:
                    2b:13:07:92:a4:89:76:cf:a1:87:99:3c:17:62:32:
                    9b:42:cc:03:43:b8:0f:95:1a:cb:48:ac:13:f2:49:
                    8b:88:73:49:0d:c6:ce:8f:4c:d6:6a:63:96:c5:80:
                    b9:9c:d4:37:83:98:66:5d:e5:06:37:98:c0:55:fb:
                    82:4c:a7:6d:b0:cb:3f:08:31:93:12:5d:bb:34:6c:
                    da:45:7f:60:17:df:57:f6:0c:5b:f7:4a:73:06:e4:
                    cb:65:5b:8b:71:9e:b5:83:b0:66:76:06:58:b0:d1:
                    3b:ea:ae:24:d0:a8:86:c5:3e:8f:de:2a:86:e8:65:
                    3d:8e:50:d3:b4:97:b9:e6:15:a2:8f:5e:88:62:b8:
                    57:7b:44:75:fb:a8:66:01:87:4b:f8:e5:e3:06:1c:
                    15:3c:60:18:f9:0c:2a:03:87:ad:23:e5:d5:dc:02:
                    bd:e4:98:88:e7:e1:a3:d7:dd:8f:c9:f2:7a:8e:3d:
                    85:a9:2d:19:fd:14:f8:16:2b:8a:b3:b1:48:38:65:
                    3d:25:f9:4d:0d:ba:2b:1a:23:a5:57:47:aa:28:39:
                    46:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:25:3D:F9:35:83:88:21:0E:83:42:FF:46:1F:2F:6B:1D:44:28:8B
            X509v3 Authority Key Identifier:
                keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:83:83:ca:da:07:fb:9e:c6:39:a3:e9:1f:de:e9:37:6e:db:
         ed:05:27:41:b3:73:95:51:2b:e4:05:0e:ea:d4:cd:12:5d:0b:
         ce:31:d0:df:14:7e:06:5f:97:08:92:cc:41:74:2b:b3:ff:a3:
         4d:df:44:14:34:40:d3:32:39:c3:61:55:d1:45:09:40:f7:dc:
         23:0f:5e:e7:e0:0b:18:96:ef:69:25:e8:91:f6:82:d8:67:70:
         c4:1e:82:6b:74:d2:ae:68:c8:c8:ac:11:47:e7:27:c2:26:84:
         46:98:52:36:43:1f:c1:71:58:de:53:2c:06:ef:08:81:d9:8d:
         8a:a9:ec:bb:b6:51:52:6d:67:fe:4e:99:17:9f:1d:53:6f:66:
         a1:46:a4:e0:d4:91:9e:2d:65:3f:26:d6:f3:ba:6f:36:a6:30:
         56:ff:5f:11:7d:ec:0b:d4:22:2b:37:a1:f3:a5:c0:41:f0:80:
         91:19:dd:3b:5d:c1:5c:a4:34:2f:52:b0:a8:0d:ec:69:a1:19:
         25:f8:a7:6d:d6:10:1d:e1:bc:7e:02:f1:d4:0a:ac:f4:8f:95:
         1d:72:5d:77:40:89:24:6c:c7:7d:35:a2:c2:9f:26:1f:38:5d:
         dd:2e:27:a0:d9:c0:8e:48:06:26:59:87:61:ff:9f:d4:7e:93:
         ff:1f:ef:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:48:48 2026 by rpki-client