Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
File:                     7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft (raw, json)
Hash identifier:          iD3DNBvrvSCncCL5yXxsq2YyYAGGa/uwKaPWpLSdJ/g=
Subject key identifier:   85:9D:80:35:39:6A:76:8C:89:2C:72:12:47:4C:9D:98:18:5A:7F:2A
Authority key identifier: ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22
Certificate issuer:       /CN=ed82f323359382d801ed0b93ec1bfa030de63622
Certificate serial:       019EBDA2E576B258C1F95BC167B963A10C0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
Manifest number:          01DB
Signing time:             Fri 12 Jun 2026 21:00:29 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:29 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:29 +0000
Files and hashes:         1: 7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl (hash: B2TDjsEihU9wbLU9fDTmM08XJ2qmtShUHl+PBCk5kyA=)
                          2: KrMAKHUoQ7DCojxr2JV7WevtfuU.asa (hash: 6gOFRqSNT9IfTn2CyMN0Yl8x2WVaFnGFx6aC2n5aVLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:e5:76:b2:58:c1:f9:5b:c1:67:b9:63:a1:0c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed82f323359382d801ed0b93ec1bfa030de63622
        Validity
            Not Before: Jun 12 21:00:29 2026 GMT
            Not After : Jun 13 21:00:29 2026 GMT
        Subject: CN=859d8035396a768c892c7212474c9d98185a7f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:6f:86:4c:83:9f:17:7f:30:aa:d8:20:a5:
                    56:c1:84:37:9b:21:ba:ec:c1:4c:f6:74:db:d8:07:
                    d4:93:ac:8f:e7:62:54:06:e0:29:c9:6d:84:56:ee:
                    48:b9:e0:93:5a:a0:25:fb:bb:2b:60:eb:e5:b8:65:
                    4e:b4:e0:41:0c:14:8e:20:e9:1b:26:46:47:17:2e:
                    d0:92:b4:5f:92:e9:ea:aa:28:75:72:3d:d0:b9:ba:
                    9d:fb:0d:2e:82:2b:50:9f:bd:dc:28:3d:2e:44:11:
                    59:2f:d2:78:aa:f3:43:64:4a:9c:42:27:9a:25:29:
                    b5:49:68:9f:27:16:28:a0:66:ff:b1:4b:be:28:a7:
                    44:aa:d3:7f:75:d0:a1:62:de:31:b8:95:29:65:bf:
                    91:c7:a3:0d:70:70:c9:31:75:a4:72:7d:a5:5b:a2:
                    f7:92:5a:d1:a8:5c:46:4d:30:ff:b0:0d:b1:e8:a0:
                    52:0e:63:f3:50:f2:a9:9e:a7:ea:28:c7:2e:10:30:
                    02:af:e1:00:11:8c:5a:13:53:03:98:8b:46:b5:09:
                    e4:d2:54:12:82:2b:b8:73:cc:e0:f1:26:42:ac:e3:
                    5c:85:8c:60:ae:bc:5b:59:5f:a0:82:cc:ef:08:72:
                    1a:77:4b:9d:e6:0e:cd:a1:57:48:d9:21:80:fa:99:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9D:80:35:39:6A:76:8C:89:2C:72:12:47:4C:9D:98:18:5A:7F:2A
            X509v3 Authority Key Identifier:
                keyid:ED:82:F3:23:35:93:82:D8:01:ED:0B:93:EC:1B:FA:03:0D:E6:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4fdc46-e8ee-44f6-b42e-167dd15dcb59/1/7YLzIzWTgtgB7QuT7Bv6Aw3mNiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4c:90:9d:76:fd:dc:eb:e3:9e:a7:2a:13:7c:5b:65:8f:bb:
         cd:44:90:4e:2d:9c:1c:67:89:f4:b0:d4:ea:38:7c:c9:b6:58:
         4f:22:bc:6c:64:8f:16:41:c7:bd:08:4d:bb:ac:33:7e:84:89:
         22:8d:55:7f:2d:96:14:39:67:fc:35:83:81:d1:04:43:d6:10:
         db:b4:f6:9c:4e:17:93:47:71:28:f9:13:98:97:d1:42:04:a1:
         12:61:7e:f9:63:45:8e:58:6b:e5:68:5c:91:b2:b3:e0:ca:73:
         38:64:b5:54:e6:73:01:8a:c8:9c:ae:66:b9:e6:14:20:86:42:
         dd:70:9c:13:88:5b:dc:b2:30:f0:2d:40:29:fe:46:b1:f3:0f:
         3b:4b:18:32:ee:c2:cf:87:92:d2:51:9e:f8:02:33:a1:b1:3f:
         35:ce:ba:04:ea:28:42:cf:e1:82:56:e3:e1:d7:57:a5:f6:85:
         c6:0b:e8:b9:c3:7d:fd:7c:35:90:3b:8d:d7:a1:c5:2b:f7:18:
         be:01:96:79:7a:91:24:74:1d:88:68:a4:6f:c3:33:4e:52:2a:
         08:6b:cc:b5:98:dc:d7:a5:f6:67:89:31:4a:a2:88:60:46:ba:
         90:5f:a3:20:0e:c4:9e:cf:46:0c:35:d3:8b:c3:2f:a5:35:5d:
         38:a0:59:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:27:42 2026 by rpki-client