Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File:                     RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier:          lZMWI23PyxN9iOCFYsvnNnu39CZXjilIgngONs7fKFs=
Subject key identifier:   69:20:BE:54:50:10:73:58:2D:CF:4F:64:4B:73:76:AE:F5:94:1C:40
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer:       /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial:       019EBE7FDE8926C3D19E8E346106F1D2208B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number:          0108
Signing time:             Sat 13 Jun 2026 01:01:51 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:51 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:51 +0000
Files and hashes:         1: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: BNsEmwXKojU2uKKyu+IsKcMujlE9LTgVvGXR9ugoJgg=)
                          2: gbt_B8vVXTypNEnXce8HlY3ojHQ.asa (hash: /VQ5E20iFSb11ZwdrgV0PkgeT2bkuefW1BPmr+djQBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:de:89:26:c3:d1:9e:8e:34:61:06:f1:d2:20:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
        Validity
            Not Before: Jun 13 01:01:51 2026 GMT
            Not After : Jun 14 01:01:51 2026 GMT
        Subject: CN=6920be54501073582dcf4f644b7376aef5941c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:70:c1:e1:bb:e6:1c:4c:50:90:64:a8:0c:
                    ad:b2:95:46:6a:c5:5b:ee:3b:4a:0f:4e:72:43:63:
                    91:b5:3b:f5:29:07:32:e0:54:4b:c2:e0:bc:5d:1d:
                    67:8a:cc:26:18:4a:b1:1e:fd:e8:fc:31:d7:94:43:
                    3e:8d:87:a5:29:d6:10:a9:63:c6:2b:bb:ff:34:d1:
                    6d:97:fa:18:c2:ea:59:6f:e2:62:f7:d7:7e:38:16:
                    6c:a2:a2:7b:62:08:1f:bf:40:e3:29:c3:b8:b4:61:
                    71:0f:c8:61:8a:e3:8e:ed:6f:50:cd:64:f0:f6:24:
                    09:b7:6e:8e:df:64:a0:19:05:3b:fc:64:0a:0c:27:
                    06:9f:b3:da:3e:ad:36:ca:73:a1:ef:8c:a6:78:86:
                    7d:8c:cd:8e:fb:2b:ff:e6:11:82:4e:d9:34:49:12:
                    d1:8c:b5:16:50:10:70:f3:28:ce:aa:f7:0b:d3:d1:
                    4b:9d:7d:ee:72:bc:58:01:ad:38:b6:45:77:f5:b9:
                    c5:fb:67:ba:7e:b6:6d:c3:c1:55:4c:dc:82:f5:70:
                    50:1e:27:a1:b1:77:d4:98:de:af:4a:1b:13:50:be:
                    ce:81:55:ff:80:86:60:e6:53:dc:06:4a:48:28:93:
                    5e:d0:16:80:30:7b:0b:c2:17:98:f0:86:be:03:83:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:BE:54:50:10:73:58:2D:CF:4F:64:4B:73:76:AE:F5:94:1C:40
            X509v3 Authority Key Identifier:
                keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:a6:a8:af:56:bc:ad:3b:cf:8f:bd:0a:11:96:21:2e:e2:85:
         ab:2e:25:92:81:5b:01:fe:7d:53:39:00:6d:20:50:43:c1:39:
         11:d0:71:f0:2a:fc:a1:7d:bd:22:34:09:56:7d:ce:42:b2:6b:
         e4:78:ea:04:b7:b8:db:3e:a0:01:3e:32:12:86:bd:bf:da:98:
         44:1c:87:7b:6e:2a:dd:ed:ae:96:80:c4:e8:e1:89:1c:5a:81:
         7b:db:d3:0d:a9:d5:4c:23:24:04:e2:aa:49:92:a3:01:a1:c5:
         9b:e9:88:43:f8:63:42:3b:6a:4a:47:71:4f:64:4c:cb:de:12:
         e4:a0:6f:c0:c3:96:25:83:28:47:1b:9a:17:22:72:16:f4:ec:
         2d:49:fb:96:c9:e9:9d:1d:11:89:65:08:71:23:0c:9e:94:00:
         db:04:ec:50:78:a1:78:bf:0a:69:70:e3:81:db:2d:d5:6a:e1:
         ff:ae:e5:a7:18:ed:e0:5b:78:5e:fd:de:11:14:5f:e3:8b:b6:
         c5:9f:c6:c0:a9:90:b1:32:f2:a3:3d:25:1a:df:25:36:89:7c:
         5d:40:b8:66:09:40:21:7b:01:ca:e7:18:a7:0c:d5:18:36:6a:
         72:9e:37:2c:14:56:d0:c4:2e:af:ca:2a:15:60:12:07:c9:19:
         f1:b7:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:03:26 2026 by rpki-client