Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
File:                     0dXq4THDsQiP-wI3mA1u4YiWaMY.mft (raw, json)
Hash identifier:          R/ltM5217J+6nrJdjgBxxBvtXj6S1B+mDkNZVf8FnU8=
Subject key identifier:   13:00:DA:0E:57:BF:13:08:85:82:B5:CB:F9:8D:A2:72:80:17:90:1E
Authority key identifier: D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6
Certificate issuer:       /CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
Certificate serial:       019EC44A8E5604773907CB3D0EDE6776F06D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
Manifest number:          02D7
Signing time:             Sun 14 Jun 2026 04:01:20 +0000
Manifest this update:     Sun 14 Jun 2026 04:01:20 +0000
Manifest next update:     Mon 15 Jun 2026 04:01:20 +0000
Files and hashes:         1: 0dXq4THDsQiP-wI3mA1u4YiWaMY.crl (hash: 3H6IbckU1TL2EB2xS1AVtOLljwmfLgVsL5CE8H3N0Yw=)
                          2: 0w_3pj-YjXdlGCOQrO5MmHi3QRU.roa (hash: NCRRT15Nw1RlGwpm/ytoJz8CpfLxBA4RH0mKpwLqRd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:8e:56:04:77:39:07:cb:3d:0e:de:67:76:f0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1d5eae131c3b1088ffb0237980d6ee1889668c6
        Validity
            Not Before: Jun 14 04:01:20 2026 GMT
            Not After : Jun 15 04:01:20 2026 GMT
        Subject: CN=1300da0e57bf13088582b5cbf98da2728017901e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:e0:69:f2:ae:ac:dc:f2:b8:7e:b8:56:4c:
                    33:c2:94:fe:70:d1:f1:52:22:91:be:3a:fd:d2:70:
                    e4:55:a6:24:48:26:0f:8a:fc:6c:96:7f:1e:9b:92:
                    48:1e:c0:1a:1c:3c:29:22:b4:36:50:a0:63:69:a3:
                    52:db:44:57:94:e8:ce:70:59:a6:30:bf:1f:96:bb:
                    b5:8c:fd:e6:da:3b:69:b2:c6:31:79:b5:0e:e8:ba:
                    b1:76:e8:c5:3b:52:cf:15:0f:01:9c:ea:d5:4a:3b:
                    70:45:7a:85:f1:11:df:de:a0:63:45:1d:b9:1a:aa:
                    7c:73:7a:94:c5:74:4f:a4:b6:2f:de:4e:3f:d5:5f:
                    1c:20:62:ed:f2:61:4c:9e:22:98:a6:d3:e8:6a:32:
                    82:6e:2a:5f:db:22:1b:33:47:4a:30:cc:61:f7:3d:
                    3a:75:fb:53:5f:39:0d:68:10:38:83:86:4f:41:e8:
                    ba:9f:08:fb:f4:99:44:94:5f:70:57:47:93:44:41:
                    56:40:da:90:1b:c8:a8:31:8c:5c:51:69:bb:71:f6:
                    65:58:6b:e6:0c:f9:65:13:56:f6:23:fb:50:16:e9:
                    53:97:c9:2b:91:89:8a:f5:92:70:f3:a5:71:91:7c:
                    c0:02:44:46:ab:ba:62:0b:1b:fe:e6:37:ee:24:a4:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:00:DA:0E:57:BF:13:08:85:82:B5:CB:F9:8D:A2:72:80:17:90:1E
            X509v3 Authority Key Identifier:
                keyid:D1:D5:EA:E1:31:C3:B1:08:8F:FB:02:37:98:0D:6E:E1:88:96:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dXq4THDsQiP-wI3mA1u4YiWaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/12eadf-53b7-428a-81ed-9da2cf4e6065/1/0dXq4THDsQiP-wI3mA1u4YiWaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:b3:d9:0b:f5:7b:bb:c1:0d:a0:b4:05:c5:d3:fd:02:60:38:
         73:4d:df:1e:10:2b:49:f1:b6:19:c9:cb:5c:03:ee:6f:6a:3b:
         7e:ef:ba:40:cb:c4:49:54:d0:46:09:d6:5c:e0:bd:ac:f7:2e:
         17:b6:af:90:24:a0:11:f1:57:0d:27:60:e4:ca:9a:f1:03:bd:
         e1:bd:a1:13:3b:01:d3:11:52:64:4b:d6:a4:6c:32:12:0e:a4:
         83:23:88:90:8d:a0:b7:5d:38:a4:e7:3e:55:f3:66:95:b1:73:
         ed:00:1c:e8:90:f1:ee:2d:93:a9:ec:d1:ce:52:aa:3c:cf:6f:
         28:22:67:44:bf:75:80:18:b5:f6:91:7c:cb:2d:3c:fd:4e:0d:
         3b:08:b8:7f:b1:26:d8:51:bb:5d:61:90:12:e1:4b:c4:e2:44:
         3f:a6:98:91:51:16:7e:d2:56:62:53:1b:03:b3:91:ea:59:85:
         6d:19:df:cd:4d:ef:4c:58:7d:9a:26:32:ab:5c:a3:1b:c3:ed:
         52:c2:73:cf:0c:e3:52:8d:f3:12:ea:6b:be:b1:1d:83:93:12:
         91:4c:40:10:15:24:3d:d2:91:48:12:59:d0:e2:57:a1:d4:c1:
         3c:ed:32:14:33:73:7e:11:47:a4:3d:cc:f3:3d:98:74:13:95:
         3f:d3:a8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:10 2026 by rpki-client