Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
File:                     1XgxwfXmACVCvOut7yQSithG6vk.mft (raw, json)
Hash identifier:          +FJ7KgsTdhEX8C20MlVqviFz6oA/sEejw97gXHF1BJU=
Subject key identifier:   84:84:15:EA:0F:03:F2:7D:25:DB:B2:9E:F5:30:D1:2C:B4:C4:B0:E1
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Certificate issuer:       /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial:       019EBFC85706A9C34610F3A4A22E0F4CB516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
Manifest number:          041D
Signing time:             Sat 13 Jun 2026 07:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:38 +0000
Files and hashes:         1: 1XgxwfXmACVCvOut7yQSithG6vk.crl (hash: RfgzM0mHOMbNmIEnBjq/V70MN4Ev9mVHfxHqcx3O/YA=)
                          2: edoHN6_JsP-n0lJvF27iJ8eI6P4.roa (hash: 8NDkYnaMysyzTRQRKzPfGA1yeZmwSTwDWWtshuRs65s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:57:06:a9:c3:46:10:f3:a4:a2:2e:0f:4c:b5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
        Validity
            Not Before: Jun 13 07:00:38 2026 GMT
            Not After : Jun 14 07:00:38 2026 GMT
        Subject: CN=848415ea0f03f27d25dbb29ef530d12cb4c4b0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5f:77:4b:57:d2:5d:65:bf:7e:3c:66:00:f6:
                    b7:a1:06:0f:a7:ad:a4:27:44:40:12:0f:ed:da:79:
                    80:f3:05:51:5e:8d:ef:a5:7b:ea:8a:70:9e:4c:93:
                    a6:30:a8:6c:68:2e:52:d2:ca:9f:0e:c7:92:65:c6:
                    0b:c2:d2:19:bb:d9:5b:0d:51:13:3e:2c:47:81:50:
                    29:71:52:d5:6c:0e:f4:34:88:9b:60:14:92:28:df:
                    69:f2:1f:cd:13:bf:41:11:87:18:ad:90:54:d5:53:
                    01:3b:e6:38:04:b1:e1:a1:9d:43:0a:be:61:6b:d4:
                    d4:16:80:af:d0:9f:be:90:10:eb:b3:84:c6:eb:74:
                    73:9c:07:c0:d2:43:65:d0:67:0f:c8:db:0a:77:df:
                    47:4e:d6:d7:ff:da:95:a6:84:5c:38:07:83:d0:76:
                    86:b3:42:b0:3a:f1:7d:0a:cd:c1:13:23:c4:f7:a0:
                    df:75:98:94:7b:0f:09:a5:51:9a:39:f6:e8:68:d1:
                    c8:ad:b1:a2:32:0a:b7:3d:ee:4a:09:f5:a9:04:c4:
                    ff:c0:26:0f:a9:75:70:7f:63:6e:a0:24:d7:fc:9a:
                    ae:68:69:bb:e4:9b:73:36:74:71:ae:9f:6d:06:71:
                    04:3b:47:0c:05:97:bd:75:4a:8e:bc:51:d7:35:9d:
                    60:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:84:15:EA:0F:03:F2:7D:25:DB:B2:9E:F5:30:D1:2C:B4:C4:B0:E1
            X509v3 Authority Key Identifier:
                keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:70:19:6e:22:9a:36:60:bf:6f:ad:22:19:53:bd:51:41:
         16:2b:14:25:40:95:4f:5d:dd:82:d7:38:5c:95:d0:0b:71:f6:
         07:1e:96:c1:22:7b:2a:08:ed:3b:52:33:7b:5a:28:36:db:af:
         c3:66:11:3b:fd:45:e5:66:3f:31:91:72:5d:b3:5d:a0:81:39:
         6a:e0:5f:32:94:6f:9a:0d:1f:83:1c:5d:ac:4b:3e:95:41:e7:
         1e:c9:41:b4:a5:49:d9:11:a0:2e:0a:26:8d:d0:d5:31:90:e6:
         2d:ae:e2:41:fa:33:96:74:a0:e5:7e:72:70:a0:4f:78:69:46:
         e1:22:2a:ae:89:68:82:5e:61:a6:62:fd:e8:9d:2b:0b:be:9d:
         6b:e4:2a:1d:e3:c6:37:b1:c1:38:b6:04:64:95:59:e1:b3:bb:
         0d:69:32:ef:50:6a:e2:bd:34:16:3f:ba:d6:54:7c:04:cd:2c:
         6c:b4:77:7d:fa:6d:bd:8d:ef:58:26:e1:11:28:45:44:80:e5:
         d3:87:06:74:83:b0:33:cf:87:bf:cd:ac:1b:94:e0:55:14:6b:
         cf:ac:e1:7d:85:b0:5e:04:fc:e7:10:cc:65:cc:aa:ec:9c:d6:
         72:a5:01:9e:7a:21:60:27:62:4a:7b:19:3c:37:4c:01:11:ac:
         1f:cf:3f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:12 2026 by rpki-client