Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
File:                     36vRQuiUFoiDzkUicxf5-lAiGU8.mft (raw, json)
Hash identifier:          h2LdQyM/X+5qUs7btz1uwkM7N54Q4cQ3OxXGjPu4Qxc=
Subject key identifier:   DF:6A:F5:83:23:E6:38:5D:CC:F0:F2:63:3C:7F:87:82:7D:50:91:DA
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Certificate issuer:       /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial:       019EC1122F4C7EA859D68304C13E90DF64B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
Manifest number:          0F56
Signing time:             Sat 13 Jun 2026 13:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:54 +0000
Files and hashes:         1: 36vRQuiUFoiDzkUicxf5-lAiGU8.crl (hash: u9qh7/uEEhgOvM+chb4dhbizO56L/0oZ6csLNdPjn+Y=)
                          2: uI-quQ5_A0kZBp2yrmzexnFbllM.roa (hash: rDYsx8yebGIjiP0Kf0GxRBRYizjVck1GA16b9PLZbjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:2f:4c:7e:a8:59:d6:83:04:c1:3e:90:df:64:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
        Validity
            Not Before: Jun 13 13:00:54 2026 GMT
            Not After : Jun 14 13:00:54 2026 GMT
        Subject: CN=df6af58323e6385dccf0f2633c7f87827d5091da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:af:e0:f0:51:63:b8:c9:2c:66:fc:2e:d6:b6:
                    5a:18:ea:9e:cd:57:61:f3:c3:8d:22:87:3d:67:f5:
                    bc:d4:bd:ff:74:ec:b4:1a:90:84:a0:19:d7:16:1b:
                    d7:0e:f0:6e:b2:7c:5e:4e:de:54:dd:c5:4e:a4:08:
                    63:c6:a1:3b:7c:b1:48:0d:62:ff:1e:23:fe:aa:c2:
                    52:17:92:b6:82:e5:72:67:77:08:22:e7:49:d9:8f:
                    2c:9d:48:b0:83:f5:ee:3c:fc:14:cc:31:23:c7:5c:
                    0b:63:00:79:97:44:4b:9e:80:d4:f9:cc:4b:40:a6:
                    ef:ff:e7:9c:a5:e5:49:22:a3:50:f2:08:1d:4b:a6:
                    ee:f6:31:b3:e6:a5:b3:ca:cc:27:3b:4c:99:b1:18:
                    f2:57:1e:04:f3:c8:18:2b:d3:1c:70:46:bd:90:bc:
                    98:5d:32:8f:1f:c7:19:59:26:86:c5:f0:bc:16:dc:
                    12:1e:ed:53:c8:a3:bb:6d:c9:75:84:a1:f9:03:ee:
                    c3:9e:c4:19:7e:14:2f:4c:b0:06:0c:73:49:63:5f:
                    01:00:2c:ac:08:1d:28:de:5f:34:8e:f1:3d:25:c2:
                    8f:0d:c0:20:4d:9c:ac:c2:91:6a:81:c8:bf:c3:e9:
                    7e:06:1e:b9:e5:3f:16:67:35:be:e1:38:73:26:ec:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6A:F5:83:23:E6:38:5D:CC:F0:F2:63:3C:7F:87:82:7D:50:91:DA
            X509v3 Authority Key Identifier:
                keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:22:2f:25:1a:a5:d9:09:56:9c:a3:15:96:23:be:d4:85:
         27:4c:0d:85:af:7f:e5:26:91:5c:52:f9:ae:32:07:68:fd:f4:
         d7:8b:4b:32:d4:79:bf:66:fb:1b:2e:ef:b0:08:9b:d2:95:d3:
         6c:5c:f6:3d:eb:a1:87:82:37:cf:23:f9:1e:36:8c:ab:24:b0:
         b6:7a:c4:48:29:85:3b:a8:c4:0c:4c:31:7e:5a:f6:b2:01:d8:
         3f:51:43:33:ae:c7:54:3e:e4:8a:47:0e:1b:42:df:03:9d:40:
         ea:99:ae:15:97:8a:8c:f6:73:d7:4a:43:21:cf:d0:cf:3a:92:
         a4:13:76:1f:9c:8f:37:45:42:0a:b0:57:a2:77:bf:c0:8a:c1:
         d5:1b:d2:bc:d7:c9:f1:d5:1b:22:63:42:03:32:b3:27:8a:45:
         1d:0f:6e:1f:a6:a7:0b:18:14:9d:1e:5b:ba:51:58:f8:bf:21:
         da:79:88:0a:2c:be:2e:6a:6e:c4:26:0b:14:2b:ba:33:36:2b:
         b0:1a:6f:96:b6:b6:c7:47:aa:eb:6c:4d:06:a7:84:37:1f:14:
         b8:66:bb:7c:c8:27:49:33:8d:f2:f8:a1:fe:64:f2:9c:72:42:
         27:dc:c5:7b:dd:eb:13:46:07:47:64:32:50:c2:28:b0:dd:06:
         15:b7:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:21:47 2026 by rpki-client