Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File:                     F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier:          xCHErdYVHOUeG7QMRoQGkoGIxK02idDhV2W7BQesxg0=
Subject key identifier:   03:65:E1:A0:3E:72:C5:03:28:A9:01:F5:72:2D:08:8A:58:B0:03:6B
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer:       /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial:       019EC300041D4738F7F653021109C8E3769F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number:          02C7
Signing time:             Sat 13 Jun 2026 22:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:18 +0000
Files and hashes:         1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
                          2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
                          3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: OrgzTkTvLb2bXksAiYWprzVPVZO+WuGQgolD4sGDEAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:04:1d:47:38:f7:f6:53:02:11:09:c8:e3:76:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
        Validity
            Not Before: Jun 13 22:00:18 2026 GMT
            Not After : Jun 14 22:00:18 2026 GMT
        Subject: CN=0365e1a03e72c50328a901f5722d088a58b0036b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:16:85:43:68:ca:c0:f4:25:28:9a:7b:5d:
                    0b:7e:fc:f1:40:19:28:5b:47:cc:92:a5:af:08:c7:
                    4d:83:9a:59:c5:00:57:91:6f:92:ec:2f:a1:41:0f:
                    a1:40:b9:50:e0:31:90:e3:6f:ca:94:fc:7e:cb:c2:
                    be:5b:8c:3e:42:5d:da:eb:17:9e:74:85:e9:45:ba:
                    e0:1b:42:1c:8c:b2:cc:1d:76:a3:82:cc:32:ad:b4:
                    63:60:5b:a5:02:04:d4:8c:cf:65:2a:5a:af:a1:c0:
                    f1:23:3b:8f:26:23:36:0a:14:ba:52:15:15:f3:73:
                    a2:45:8b:7b:b6:b2:4b:3c:e7:ff:8f:ec:8b:50:31:
                    73:25:0c:35:f6:a3:2e:63:29:5d:0c:ab:55:cf:15:
                    9c:aa:b4:85:1f:7e:00:aa:c3:4e:58:21:70:25:3b:
                    8d:1e:83:95:5e:20:df:e6:aa:c3:8e:33:b0:4c:52:
                    f7:38:b3:24:28:ec:41:68:84:4b:49:ed:8c:55:8f:
                    28:ee:ef:12:3b:d6:5f:a1:cd:75:b5:f8:fe:3e:a1:
                    31:19:1c:90:60:4f:8a:bf:d9:a2:84:b1:7a:18:3a:
                    fe:fc:18:43:20:6e:52:a3:18:ab:67:73:39:fb:59:
                    83:23:93:b3:15:fe:8d:c1:9e:56:7e:ac:75:0d:19:
                    5a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:65:E1:A0:3E:72:C5:03:28:A9:01:F5:72:2D:08:8A:58:B0:03:6B
            X509v3 Authority Key Identifier:
                keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f9:59:71:92:7c:26:11:fa:18:88:91:48:53:ac:79:24:c9:
         eb:b5:e9:7c:90:32:78:41:88:55:d6:6f:77:0e:97:6b:f8:ec:
         cf:c7:dd:2b:e6:d1:8a:2a:70:29:56:9c:86:25:ab:44:a5:62:
         8d:9b:32:da:63:7e:81:92:34:8e:2b:6e:30:0d:88:89:a4:66:
         81:00:47:dd:23:7a:d9:87:f1:d1:22:92:82:b5:90:55:0b:50:
         f8:0b:be:bc:f7:cd:07:8a:ca:1c:9c:91:5c:33:32:0c:39:86:
         b7:48:4e:72:36:4e:98:53:2a:5a:d1:2c:3b:4e:bd:99:d6:3e:
         2e:5c:f2:4a:65:b9:ed:ec:f0:c5:c8:f9:19:87:f9:06:e0:82:
         39:66:95:f4:56:7d:de:f6:18:ef:e9:2c:64:7a:89:3a:b6:84:
         b1:b9:c1:df:38:4d:24:e7:c9:d3:73:f8:1c:9a:b0:f0:5b:db:
         22:8a:41:90:78:21:a5:0f:e8:68:2b:0c:97:ba:34:85:d9:98:
         35:50:83:a5:b0:73:3d:6b:7b:ab:1e:14:1c:b3:a2:2b:14:04:
         b8:5e:5c:1e:5d:e5:2d:90:04:cf:41:24:ab:13:c4:5b:cf:ec:
         99:b4:7a:89:fe:f1:6a:ac:77:a0:11:9b:c0:bc:7b:f5:2c:a2:
         21:b6:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:20 2026 by rpki-client