Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
File:                     32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft (raw, json)
Hash identifier:          k2mOx4Xyv/Xbnfa6axErUfTqmZYWAseCaAZGsakFWdM=
Subject key identifier:   AE:5D:12:98:30:E5:B7:E8:BD:26:BF:F9:C8:7E:1A:0E:E6:59:1B:F5
Authority key identifier: DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63
Certificate issuer:       /CN=df6a9267b18b36d828890a86387f310b84c04b63
Certificate serial:       019EBE10A597D718DB796CFF13E71E45051D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
Manifest number:          10F2
Signing time:             Fri 12 Jun 2026 23:00:22 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:22 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:22 +0000
Files and hashes:         1: 32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl (hash: puRXfhhu/tW/dW2r3XtYlW345NLG3wFzG898Gq3TzbY=)
                          2: eZW6Hra3VKDaHpIw4oWeb7v-Ing.asa (hash: prXq7zIRsAV9jtqOkMC/JnDXSMdKIhkp+Aj/pefkjkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:a5:97:d7:18:db:79:6c:ff:13:e7:1e:45:05:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6a9267b18b36d828890a86387f310b84c04b63
        Validity
            Not Before: Jun 12 23:00:22 2026 GMT
            Not After : Jun 13 23:00:22 2026 GMT
        Subject: CN=ae5d129830e5b7e8bd26bff9c87e1a0ee6591bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:db:3b:21:4a:fd:1a:f2:f3:f2:7c:01:36:55:
                    a8:25:7b:05:19:b8:1c:38:4a:03:ee:7c:ad:75:ad:
                    4b:83:32:cf:ba:e9:c2:83:11:85:09:48:56:0a:5a:
                    41:e5:a7:3a:65:ad:2f:b3:91:b5:7c:83:99:68:37:
                    9c:ef:fe:2e:76:dd:69:83:bf:8d:7e:d8:cc:12:29:
                    9f:e7:bf:8d:98:ab:5d:10:e9:e6:c8:ad:52:a0:da:
                    c5:aa:a5:b7:a8:88:b1:e2:c5:67:3d:48:b0:d1:d8:
                    9b:97:83:c2:f2:31:ac:c0:4b:ec:bc:ff:62:6b:e7:
                    cb:18:1b:7a:ad:19:e3:9a:28:f5:22:f0:82:7c:3e:
                    9f:9b:b9:05:e5:16:72:51:42:c8:8b:80:f8:58:49:
                    be:8c:67:0b:3d:f7:4a:82:e5:7e:73:49:92:b4:17:
                    15:b5:45:2d:31:4f:b1:44:2e:fb:2e:86:33:8b:af:
                    8e:5f:e9:89:4c:e3:07:71:48:86:4d:46:a1:98:e0:
                    80:66:a8:25:db:89:30:18:5d:ab:5e:64:ab:cd:68:
                    14:d5:52:e0:31:1d:0d:b8:3a:f7:b3:b8:b5:9e:f8:
                    82:3b:ad:f2:7e:28:c4:75:c6:82:22:8b:5c:1b:ea:
                    b0:68:2b:45:a2:c7:48:e2:87:57:05:25:7e:c2:47:
                    40:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5D:12:98:30:E5:B7:E8:BD:26:BF:F9:C8:7E:1A:0E:E6:59:1B:F5
            X509v3 Authority Key Identifier:
                keyid:DF:6A:92:67:B1:8B:36:D8:28:89:0A:86:38:7F:31:0B:84:C0:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32qSZ7GLNtgoiQqGOH8xC4TAS2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c60c20-bb42-46ba-b215-99f7beca875b/1/32qSZ7GLNtgoiQqGOH8xC4TAS2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:46:0e:fd:e2:62:a2:48:f9:c0:8d:a0:18:7e:bc:27:cb:9b:
         ee:63:95:9d:dc:f2:3a:b2:1b:79:ac:96:4a:da:ac:cd:0a:bc:
         be:db:04:8d:21:ab:b2:85:63:74:ee:06:15:6d:05:c7:29:99:
         dd:1a:f6:d1:78:d5:ec:40:44:89:b2:b8:56:40:82:60:8b:1e:
         93:01:37:2f:f4:a4:3c:f9:fa:51:70:85:fc:85:7e:8e:bf:11:
         d4:41:97:3e:4a:74:0d:59:a1:47:7e:46:26:78:fe:64:cd:ff:
         99:70:bf:ad:74:6b:fd:c4:2f:78:c0:11:43:fb:8f:66:d5:64:
         6c:d7:88:4b:e6:88:c6:6b:04:6c:37:8e:25:32:bd:66:9c:63:
         5a:71:c3:54:35:33:7a:fe:cd:7c:e2:e2:b8:f1:5d:a7:16:41:
         fa:d3:aa:e0:f5:d6:e3:a3:78:08:47:26:e0:30:c1:e3:6a:a1:
         84:31:d8:d1:2f:da:3f:d7:1a:68:4f:62:25:e5:55:67:d0:85:
         0a:51:3d:b7:85:d8:0d:26:8c:b2:50:d8:1d:f5:5b:b5:06:7e:
         9d:f6:13:76:7c:35:88:9d:77:d5:d2:a7:e8:e5:bc:7a:df:3f:
         4d:c7:04:e6:f6:ce:68:ef:2f:77:02:80:c8:b1:4c:10:95:1b:
         57:05:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:11 2026 by rpki-client