Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File:                     1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier:          UGHgmPvPLN9yCN393BPgEIssvX05qAZ1JEqTUTxMWus=
Subject key identifier:   6B:4C:F3:03:D1:E2:44:3B:ED:F0:71:B5:F6:52:C4:96:05:28:56:A0
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer:       /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial:       019F1867AC48D34F27C80ABD66A8F3EECC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 12:01:15 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:15 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:15 +0000
Files and hashes:         1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: K6sb32xYK5aB8moscipgytune8KmCjgumJoi0STeqDc=)
                          2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:ac:48:d3:4f:27:c8:0a:bd:66:a8:f3:ee:cc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
        Validity
            Not Before: Jun 30 12:01:15 2026 GMT
            Not After : Jul  1 12:01:15 2026 GMT
        Subject: CN=6b4cf303d1e2443bedf071b5f652c496052856a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:eb:61:99:ee:d1:af:6b:a0:63:a9:96:f0:
                    fd:3b:38:96:e0:69:78:15:78:3d:b3:c6:38:e7:fd:
                    cd:33:0c:a4:2c:50:cb:de:f8:6d:7c:2a:6b:bb:6a:
                    1f:cb:9c:2f:08:e3:a8:53:16:ee:c1:c9:59:9a:66:
                    c4:f0:ab:12:57:b4:95:cd:ce:77:c7:df:a8:35:e0:
                    d1:f8:d3:64:6f:c1:24:83:d0:73:c0:3a:db:7c:93:
                    a6:2e:bf:0b:f1:5d:0e:dd:14:e5:dc:3b:63:a6:fe:
                    b6:c7:2a:56:cc:da:46:2e:07:90:42:cd:52:04:6a:
                    5d:4a:f9:07:86:8f:fb:0b:c5:16:63:41:86:fa:f2:
                    be:42:aa:fb:c3:6e:9c:76:1e:58:8c:bb:7f:dc:bc:
                    fa:f7:ce:de:da:7b:0a:b6:38:48:99:f8:d3:59:b6:
                    bc:87:1e:52:17:9e:91:b3:ef:b9:5c:5d:e6:e3:d8:
                    b1:1b:20:49:0e:9a:b3:f0:66:bf:5c:15:e4:26:a6:
                    6b:92:98:08:c4:ff:e6:d2:97:4b:35:d0:d2:b1:34:
                    21:4f:fb:ab:b4:ce:0e:9d:0a:d7:91:dd:27:b4:1c:
                    7a:9c:11:ce:88:b5:46:27:1b:91:2f:e1:eb:d5:55:
                    a9:bc:db:51:79:20:e2:49:f4:c6:a9:21:f3:47:0c:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:F3:03:D1:E2:44:3B:ED:F0:71:B5:F6:52:C4:96:05:28:56:A0
            X509v3 Authority Key Identifier:
                keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:4d:d6:10:2a:27:3b:da:85:a0:44:0d:78:a2:ef:5a:84:
         c6:83:b4:ca:a2:50:c3:a2:a5:13:54:05:3a:a7:5e:21:3f:23:
         79:39:3c:42:53:ba:d5:6f:62:4e:dd:6c:19:d6:88:3e:bc:18:
         58:cf:db:c0:4f:ae:b0:6a:1b:a1:b8:58:3e:f9:fb:c3:b5:37:
         f1:4f:ea:74:a9:45:e1:e1:9b:18:d9:8a:fc:db:c7:7a:f0:00:
         c3:86:9c:a7:b2:31:65:d0:d4:ed:00:48:02:cb:46:43:f7:69:
         32:1b:92:07:5b:e8:b4:4c:ed:81:e9:96:42:11:83:9f:71:12:
         a4:bc:dd:5c:09:4e:f9:8e:b2:94:45:4c:07:e5:2e:32:de:c5:
         4e:3d:18:a7:88:c8:d1:c3:8d:c7:72:02:5e:02:fb:44:19:23:
         a5:4e:e2:87:13:4f:1a:89:44:c1:e8:07:8f:a7:70:ce:7e:d2:
         13:ae:ad:ba:5b:ca:1b:b2:2a:93:10:f1:96:12:a5:e1:6a:ab:
         89:b4:ec:74:58:7c:2b:23:34:20:45:01:fa:8e:ca:bf:42:ba:
         f1:c8:c5:e9:da:74:7a:b3:bf:96:95:cd:66:9d:97:01:f5:ec:
         12:1d:dd:33:de:db:f7:09:cd:ea:70:4f:38:8e:b0:c3:0f:eb:
         18:cd:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:04 2026 by rpki-client