Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
File:                     34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json)
Hash identifier:          kWcJcX5OywnhBX7jvlDHGh6GbRF8VgkvOL3/lqajPo4=
Subject key identifier:   AA:14:D7:0A:2F:BC:22:A9:BE:EB:EE:16:B4:6C:51:9F:59:2F:65:2E
Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69
Certificate issuer:       /CN=df895a3ee2211b6ee2df7202f09a426680d66269
Certificate serial:       019EB9C5F1A0A8BF437D01EFCF0FB3FA9762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
Manifest number:          0848
Signing time:             Fri 12 Jun 2026 03:00:17 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:17 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:17 +0000
Files and hashes:         1: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: EKaJIwFtGfKjvGEHDc2P62uceIjLUZUMBlugZk9nTA0=)
                          2: 9D5WwjKLKWgOIgPanR8axjhLcU4.roa (hash: ZLdDEz7U/sFImJ7TRS2LLSrQd9lNXvIbMcJRDgvz3sA=)
                          3: QpiOjtqqn3KLmCsEJyklJCGXtrE.roa (hash: FMtgXOF3ndtdUEWRQlHxouObzXHzScpjOr9+4JvRDuQ=)
                          4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=)
                          5: bSrLj4dk7vC2yPiiS4puv6QDMCg.roa (hash: b2kWSMTdmZr8cROp9MUUr9c5xUNnNn9tLEdsg0Fja3c=)
                          6: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=)
                          7: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=)
                          8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=)
                          9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=)
                          10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c5:f1:a0:a8:bf:43:7d:01:ef:cf:0f:b3:fa:97:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269
        Validity
            Not Before: Jun 12 03:00:17 2026 GMT
            Not After : Jun 13 03:00:17 2026 GMT
        Subject: CN=aa14d70a2fbc22a9beebee16b46c519f592f652e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d9:23:e8:cd:a8:e7:17:10:f4:e6:30:0a:e4:
                    a9:f7:64:83:84:2a:70:94:68:04:bd:9a:d8:86:fa:
                    a8:a1:c7:52:40:78:0b:c3:53:55:6f:18:82:12:23:
                    4f:20:d0:7c:0f:42:51:cf:53:dd:ef:4f:d5:ef:b0:
                    4a:80:e0:29:7d:8e:20:c3:6b:74:74:54:dd:b0:6e:
                    7f:3f:87:d3:b4:9f:66:c3:3a:9a:78:87:e4:8a:2a:
                    ea:cb:76:dc:1c:f2:c8:43:ef:a9:c5:fb:bf:49:62:
                    f2:b3:39:b7:dd:be:ce:77:5e:23:21:80:db:e7:13:
                    7a:b1:a9:ff:bc:bd:1d:bf:40:2f:88:16:b2:cc:c3:
                    6f:8d:d0:28:34:33:9d:e2:44:a1:01:3b:34:f2:3a:
                    34:57:55:e7:41:61:b3:67:8f:da:93:eb:eb:49:ca:
                    ae:5b:2b:c4:89:99:b5:4a:d0:ff:62:eb:7b:c0:84:
                    19:11:aa:11:4e:4e:ce:4d:d5:4a:95:6f:4e:44:b6:
                    b2:3a:74:92:89:53:9e:f5:04:09:0e:1b:b0:e3:c4:
                    1e:ba:11:ae:90:36:12:8d:3e:38:9c:4e:c3:71:8f:
                    8f:c6:4b:79:a4:0b:32:2e:bc:d5:a0:0a:ed:88:d8:
                    f4:ea:24:5b:d0:d1:de:a3:57:46:65:67:d7:0d:d7:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:14:D7:0A:2F:BC:22:A9:BE:EB:EE:16:B4:6C:51:9F:59:2F:65:2E
            X509v3 Authority Key Identifier:
                keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:96:9b:b7:07:6f:9e:b6:a0:68:72:89:20:f8:4c:a0:b2:6d:
         76:fd:27:9b:9c:87:0a:ed:cf:b9:95:23:26:c8:9f:4c:27:1f:
         bb:55:7e:d4:e5:c2:92:69:fe:61:30:13:d2:2c:36:c5:7d:2c:
         f4:76:6f:2d:a7:5c:ab:cd:26:af:f3:d5:05:07:4e:e4:b7:68:
         32:38:b9:20:3a:56:a0:45:40:18:ca:69:dc:30:6f:91:ae:f8:
         d7:a5:02:73:00:2f:b7:2b:d1:ad:6d:ad:37:89:e8:28:59:b1:
         6c:b1:aa:d0:a5:ae:2f:e6:9a:ee:4f:58:37:b0:27:39:9a:26:
         37:8e:aa:32:97:fd:1a:53:b7:33:4c:02:e2:1d:fe:2d:91:a3:
         07:d5:31:82:18:9b:55:93:f4:10:49:6b:de:a9:36:7b:01:3a:
         d4:07:7d:f6:e8:49:52:39:2a:48:62:ef:d3:64:fd:a7:c1:71:
         7f:8f:c7:97:c7:18:26:0f:db:65:87:7f:bd:16:b0:ad:ab:58:
         6a:95:dc:eb:0b:31:f7:c0:78:e3:b1:e1:d8:f6:46:ff:8d:f7:
         00:63:be:fe:d4:b4:e7:59:a0:ff:fc:61:45:bc:4f:cf:34:e4:
         34:fc:1a:1a:6b:d2:5d:53:96:e4:42:3e:8f:81:04:ed:a4:c1:
         38:3e:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:20:16 2026 by rpki-client