Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
File:                     B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json)
Hash identifier:          vzmbzKwB6kVc6kPE2OttoTeCbmnR5We4SGhXyQl3yAM=
Subject key identifier:   47:C4:06:26:D5:2A:D8:12:DE:D3:83:8C:46:7F:33:5B:4F:2E:B4:D9
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Certificate issuer:       /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial:       019EC22438585BF37D05A1D4873EBAA961D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
Manifest number:          1832
Signing time:             Sat 13 Jun 2026 18:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:14 +0000
Files and hashes:         1: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: 41Md8WqAPdnoXqEuBWYje1Dyd3b7lvu0v+GeYUXPPGg=)
                          2: QRYnwPzgKp-9B5SCFgwsSF3VtLI.roa (hash: g+/BMJPy7LXVieQvJddQ3qFl3eA3wSZtRhRO6IBuRQ0=)
                          3: ad8VziUyy5y7esWKDnVVM5dOvOs.roa (hash: BarUJX1J5UzrikBZata2TwtD1kQ45xC8YMxlVyw4wMU=)
                          4: mqgpdMuqiVglKY9miPJxo9C0iTQ.roa (hash: cS8JqXqtjXcEL0kXghoZe2Txkm/P1kISxoeWzSy0MNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:38:58:5b:f3:7d:05:a1:d4:87:3e:ba:a9:61:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
        Validity
            Not Before: Jun 13 18:00:14 2026 GMT
            Not After : Jun 14 18:00:14 2026 GMT
        Subject: CN=47c40626d52ad812ded3838c467f335b4f2eb4d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:76:fe:dc:0e:51:07:8d:f9:40:5c:81:0d:
                    ca:d1:51:9d:0a:f3:c2:68:4c:03:1a:26:9c:98:65:
                    21:fa:36:b4:4b:fa:7f:d5:67:36:f3:04:28:e0:95:
                    40:03:bc:4a:5d:3b:05:e1:92:b6:89:8e:79:6e:b6:
                    34:d1:00:9b:75:3f:ae:44:4d:1c:4a:e3:2b:e2:aa:
                    91:e9:9a:49:f4:63:71:e0:89:29:de:7f:bd:c7:7b:
                    01:32:1a:fa:b2:5e:58:97:a6:75:a9:fc:05:02:17:
                    0a:0d:07:89:a3:cb:d5:b0:13:0c:ae:cf:eb:fc:8f:
                    ce:80:4b:19:16:1e:50:43:b8:58:47:ab:b0:d5:0f:
                    b6:af:14:e0:28:35:8f:d2:eb:42:3a:d1:47:75:8d:
                    1f:49:34:a0:5e:f4:a0:35:7a:eb:c5:51:49:19:2b:
                    af:25:9d:13:71:f8:70:00:d7:7d:0f:f7:5d:d7:b3:
                    41:13:2f:51:c8:30:11:12:2a:dc:0a:6a:78:94:16:
                    e2:e5:12:6d:76:b4:3b:44:99:44:f8:fc:43:5c:c5:
                    c8:c9:cf:d9:0f:f4:9b:13:82:f2:ba:bf:3c:23:97:
                    0d:f3:d5:a7:40:6b:46:f5:c8:63:d3:a0:8d:58:d2:
                    ea:2d:c7:6f:c6:82:1a:3e:b9:72:1e:c0:f6:8c:6a:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C4:06:26:D5:2A:D8:12:DE:D3:83:8C:46:7F:33:5B:4F:2E:B4:D9
            X509v3 Authority Key Identifier:
                keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:37:b6:5b:76:92:d4:d1:c0:88:98:56:e9:6f:96:e1:cc:62:
         63:84:bc:1e:ce:b0:28:1e:50:25:0e:18:5a:41:fd:7f:6f:f7:
         46:c4:5a:1d:69:e8:c7:35:51:d4:bf:b2:58:0a:b0:53:1a:49:
         9b:1b:3f:0c:cf:f2:db:86:84:85:70:8a:f7:5c:a4:de:2f:82:
         92:45:92:e3:26:9e:ad:2b:d8:09:d2:e6:7a:f8:a8:6a:84:58:
         98:23:45:3e:4b:60:3c:1e:e6:72:a6:11:c8:66:c4:d0:e7:98:
         ce:bc:44:56:07:35:df:96:84:14:f2:36:a4:27:56:40:92:db:
         33:c2:c5:09:ec:b9:6e:b5:b0:ec:d7:12:df:bd:2e:01:d1:33:
         0a:ff:da:89:6e:77:aa:fe:a8:3c:6e:40:9b:52:14:32:7a:d8:
         b5:d5:a9:fc:26:00:02:a6:70:98:58:f1:b6:bc:74:5c:2b:cc:
         84:82:b0:39:3e:47:cd:8c:6b:f2:19:22:89:12:7c:5d:12:2f:
         07:11:45:4e:9e:51:a7:b8:69:35:29:c3:96:25:73:ee:ff:bf:
         ad:7e:92:fa:c1:28:21:09:a2:f9:de:82:be:22:45:ce:90:ad:
         95:d4:d8:22:cf:15:c4:9a:fd:26:a4:61:35:bf:cf:f9:65:c5:
         0a:b3:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:38 2026 by rpki-client