Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          SmuBPoZgA+/KEbE+fSfEo89VLMtn0qmHmvnO9fFnOtU=
Subject key identifier:   A9:97:49:3F:A6:F3:69:FA:A3:1D:C9:72:FD:6C:7B:E8:32:B2:EC:B9
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       019EB76A945C59261DB5D11C7E897AEE4307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          063A
Signing time:             Thu 11 Jun 2026 16:01:15 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:15 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:15 +0000
Files and hashes:         1: 3lauIf0YpbUjYSTnhhTVxklgLKk.roa (hash: yggx4J03w1luy3uhGhFmtwjE58TFme6YVBEKV6qwxTo=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: 78LyDmzXr2nKTEb8bOdYXG2wRqpR4d85k9sVhuIHoiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:94:5c:59:26:1d:b5:d1:1c:7e:89:7a:ee:43:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Jun 11 16:01:15 2026 GMT
            Not After : Jun 12 16:01:15 2026 GMT
        Subject: CN=a997493fa6f369faa31dc972fd6c7be832b2ecb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:ef:39:9f:90:ea:1c:29:03:f3:cd:19:67:
                    80:58:cf:90:10:44:74:96:5d:d8:57:1e:1f:ac:21:
                    75:97:5a:80:f0:97:16:6a:90:81:c5:c1:31:61:4b:
                    41:02:74:78:a8:b8:de:7d:00:84:b7:4c:ad:03:ed:
                    63:4c:0c:ab:79:db:61:27:4e:e5:ab:7a:4f:45:35:
                    46:65:93:bc:20:d3:b4:e1:74:4f:f9:a0:ba:34:90:
                    e6:24:ad:8b:20:78:f7:7b:ac:65:e9:dc:46:02:da:
                    80:b3:ae:d9:a1:36:d9:81:91:ce:9b:1a:f0:20:cb:
                    0d:8c:f8:6f:ee:58:c8:70:c8:9f:8a:2e:83:4b:e6:
                    e5:7e:c3:b5:7d:aa:c7:bc:38:71:8e:42:ac:64:9d:
                    a1:db:6c:fb:41:94:be:aa:70:fc:9f:a1:dd:50:46:
                    c4:b4:02:80:49:c7:4b:2f:0c:e5:52:5e:e2:97:e4:
                    e5:38:82:fc:34:a2:ca:e5:d3:f0:ad:76:86:10:2d:
                    82:91:b4:cf:a3:e2:b1:fc:c5:6b:ac:38:bd:0a:76:
                    06:95:b2:c0:65:6e:d4:8a:99:9a:90:9a:d2:81:33:
                    f5:26:5a:f9:f4:52:4c:23:88:d1:89:40:78:24:66:
                    1b:3d:b0:6d:1d:9c:b0:33:6c:07:31:2f:3f:6f:27:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:97:49:3F:A6:F3:69:FA:A3:1D:C9:72:FD:6C:7B:E8:32:B2:EC:B9
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:06:f3:41:75:37:5d:b1:ad:d5:b6:29:ca:fc:3b:47:e8:6d:
         54:32:1e:7f:ea:d8:2c:b2:7c:d0:89:3e:a1:99:78:d1:bb:c1:
         23:66:3b:ac:32:fd:7b:31:f6:8d:7c:1c:aa:ef:b1:96:d3:98:
         a5:b4:b3:d3:f2:3f:10:c8:68:08:ce:8e:d8:38:f3:30:a5:13:
         f6:af:b9:8d:2c:95:25:45:8e:29:83:5e:e6:80:3f:4a:3c:58:
         e7:f9:f5:a7:46:98:28:6f:63:0c:62:41:49:ca:a2:51:c3:d8:
         7f:06:e1:31:91:18:7f:21:2c:34:1c:99:40:7a:a6:54:b8:ab:
         e1:5b:e8:e9:d3:6f:dd:21:9d:08:91:ca:a5:2e:46:56:00:3f:
         18:0b:4d:ac:f6:39:96:7a:b5:b7:a3:c8:bf:96:54:6c:5a:5b:
         e9:c8:0a:55:1a:a5:7d:61:38:7a:c6:1d:a4:e5:87:5c:ea:bd:
         94:84:98:3f:63:82:e6:5f:f1:6a:13:42:53:c3:d4:84:97:a6:
         02:8f:36:5c:83:cb:b4:06:31:bb:af:14:56:48:ea:e8:77:b9:
         8b:f5:f9:7c:d6:cb:62:c3:19:85:6f:2b:2c:93:6c:28:76:8b:
         3b:5b:62:54:0f:e7:38:67:24:6e:d6:0a:d8:93:35:46:ce:e8:
         f3:c2:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:01 2026 by rpki-client