Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
File:                     R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft (raw, json)
Hash identifier:          YHKrY84dd9oNAJuNA9zEjwUzDeemFc0xSqqTlF/+EJ0=
Subject key identifier:   07:0D:0A:A4:BD:D9:9F:9E:5E:D6:8B:99:D2:E6:F9:16:38:03:43:5C
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Certificate issuer:       /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial:       019EEB215C36FAD995676392FEB7F0DAB148
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
Manifest number:          1414
Signing time:             Sun 21 Jun 2026 17:01:32 +0000
Manifest this update:     Sun 21 Jun 2026 17:01:32 +0000
Manifest next update:     Mon 22 Jun 2026 17:01:32 +0000
Files and hashes:         1: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl (hash: BUeDgMvOU44vkOVxjzKCorXtBmJQp4Ukn9KtOz9BWyM=)
                          2: RWhg5dykMAyiD73Q4T3IDgPuoVY.roa (hash: btU2vDOWfazE6wfyTegJ86hgsn+iO0cAhM7Jywody24=)
                          3: RsFe9krKRUtkC3L7-MC9WR0bVdM.roa (hash: lbqH6pbmwmSHgVXzsms7NFLtSzq9IEJtOR+CsCDKF1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:eb:21:5c:36:fa:d9:95:67:63:92:fe:b7:f0:da:b1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
        Validity
            Not Before: Jun 21 17:01:32 2026 GMT
            Not After : Jun 22 17:01:32 2026 GMT
        Subject: CN=070d0aa4bdd99f9e5ed68b99d2e6f9163803435c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:49:a7:23:74:b3:ca:46:db:b8:44:da:85:d3:
                    30:8e:68:db:81:1e:34:b3:9a:6f:78:01:a5:cc:6f:
                    ea:3a:1e:2f:0d:cf:9d:8b:44:61:52:a1:92:39:ef:
                    8d:3e:c3:a2:a2:87:f8:65:fe:f5:51:3c:2e:c9:55:
                    3c:31:36:be:7c:3a:2f:0a:fe:6e:94:d1:38:f3:e8:
                    27:52:0c:dc:d3:63:e8:f3:49:50:1a:d1:8e:0c:16:
                    9b:4b:b4:e7:b7:00:19:71:76:b7:e1:00:b3:db:bc:
                    19:a0:0b:b0:df:13:bc:af:d6:2b:a7:b5:6d:90:7b:
                    2b:d7:e7:9d:b2:51:8d:9a:57:a3:91:42:3e:0b:09:
                    e0:b5:eb:f9:69:f7:4f:f4:c5:82:f0:29:cc:57:df:
                    b7:a1:f1:ef:95:7a:f8:fc:3c:4b:1c:dc:26:32:ad:
                    a5:6b:7b:b9:d8:4d:17:a2:4e:f1:75:81:d7:79:15:
                    cc:56:b9:a3:99:ff:53:55:93:92:ef:c0:3a:2a:e9:
                    54:f9:fb:57:38:62:0f:9e:53:1a:d3:ca:95:be:14:
                    8e:35:4b:63:a8:12:25:89:e8:5b:bd:d7:dc:23:a4:
                    63:5b:40:21:b1:95:b2:03:e1:d1:2d:10:fb:49:45:
                    aa:3f:0b:c8:4b:05:15:fb:7e:67:a1:8b:a3:76:bd:
                    f6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0D:0A:A4:BD:D9:9F:9E:5E:D6:8B:99:D2:E6:F9:16:38:03:43:5C
            X509v3 Authority Key Identifier:
                keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ca:e7:70:b0:1c:16:5f:7a:c0:26:2d:91:b2:a8:a1:84:9e:
         f9:aa:70:05:9d:ab:64:1f:f9:3e:dd:8d:e8:49:67:e5:84:38:
         0d:77:0b:f9:f9:61:2d:6f:4c:07:27:ff:7b:08:9d:95:c8:b0:
         69:6f:21:93:c0:d7:03:a4:81:dd:83:ff:cb:94:8c:2d:f1:e8:
         cd:32:62:c5:30:a8:81:d3:f6:55:1b:87:47:65:56:de:39:a8:
         74:8f:61:6e:a6:dd:f1:0b:b0:82:90:07:c3:e4:19:10:52:fb:
         d1:46:94:1e:4c:f3:84:2e:d7:22:be:e6:40:ce:b0:02:3c:bd:
         ae:44:fc:3c:61:9e:d0:99:c8:5d:a6:7f:c2:8b:00:f2:39:7e:
         3e:2c:fc:a7:98:f6:22:6e:d4:61:25:11:29:22:84:72:01:67:
         83:7b:67:20:71:e1:10:66:79:33:15:a1:9e:a3:8d:53:98:b8:
         fc:aa:9d:2b:2c:e2:da:d7:e4:87:99:47:94:94:52:e6:19:88:
         44:45:d5:f8:61:13:1d:53:ee:0f:d9:00:39:8f:36:91:f6:ea:
         34:ca:3f:d0:b1:ef:23:18:34:0c:65:ad:9b:e1:07:c8:81:ff:
         bb:1c:4f:de:eb:3a:53:ca:f4:5b:44:c6:68:80:98:28:a4:bb:
         63:08:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 19:46:19 2026 by rpki-client