Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File:                     d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier:          VoG3BxhXcK2rmYywas0GDQwTOemGu7mRSxKhHprlOS4=
Subject key identifier:   86:3A:7E:A4:56:DD:2F:99:80:87:C4:A0:60:42:39:CB:CA:84:D0:A0
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer:       /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial:       019EB76AA6DEE571719BDB1CFA69C31F318E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 16:01:20 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:20 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:20 +0000
Files and hashes:         1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: ijkB+3NdjnxA3s9tCuaTo/MWSqmx5vay5vH8KYxOsV8=)
                          2: mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa (hash: 4af//0/sTljaocW55fj5PkOIaVuuWa8S7DrXdP1GzbU=)
                          3: oFwZbtA1lxypnx_w-x5XCq34vRQ.roa (hash: i/Rl9TaZZIbdRkmJK6JnEtSg149s52oPIfIzhWvJ8BQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:a6:de:e5:71:71:9b:db:1c:fa:69:c3:1f:31:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
        Validity
            Not Before: Jun 11 16:01:20 2026 GMT
            Not After : Jun 12 16:01:20 2026 GMT
        Subject: CN=863a7ea456dd2f998087c4a0604239cbca84d0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:e3:cc:d6:a1:61:af:64:34:be:b8:47:fe:
                    18:0b:e9:b4:58:0d:0d:ed:2e:b4:d0:e0:d7:66:fb:
                    8b:1b:40:fd:a4:8d:23:cc:de:c0:64:b1:ca:46:75:
                    1c:5d:3f:3c:6a:a4:5c:32:d3:6d:29:c5:51:ad:86:
                    6e:b4:32:59:9b:e7:92:7e:11:37:19:c6:ac:90:0e:
                    13:6b:a1:bd:4f:b9:c2:1a:d1:14:02:2a:ff:31:75:
                    d7:1b:84:5b:d2:80:a1:f3:7b:94:f7:d1:91:72:61:
                    8e:89:8c:81:2e:5f:4f:12:8d:01:81:d8:28:94:63:
                    99:2c:60:89:2f:25:da:97:12:a5:23:c5:83:f0:ef:
                    74:e8:fd:f3:2f:5f:f0:f3:c2:24:41:3f:70:be:50:
                    2d:bd:d9:aa:cd:2b:9c:20:1b:8a:83:90:97:d0:92:
                    ff:3f:f6:2f:75:2f:38:6e:59:40:3d:0a:7f:c0:fa:
                    7b:22:95:fe:a1:09:6a:07:09:51:c6:aa:b7:50:9a:
                    65:1a:23:1e:a5:f8:20:a1:dc:71:2d:b5:9d:55:a6:
                    5f:77:70:23:37:0e:9c:97:dc:ea:81:99:91:a4:db:
                    c8:8e:ca:b9:25:e8:87:a6:8f:17:1b:8e:dc:76:70:
                    a8:96:88:7e:3a:c8:45:ed:8d:c3:41:36:06:e9:38:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3A:7E:A4:56:DD:2F:99:80:87:C4:A0:60:42:39:CB:CA:84:D0:A0
            X509v3 Authority Key Identifier:
                keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:68:1d:58:f6:2d:ac:b1:43:46:d9:5f:d5:39:a7:9d:6d:00:
         a1:52:1e:53:d1:b9:eb:bb:80:cc:4f:da:aa:bb:b1:b2:83:42:
         6f:69:1d:20:5b:15:28:64:cc:0c:fc:37:49:26:89:5b:a5:a1:
         d4:b1:7a:c0:02:fb:82:68:55:a2:a1:9f:16:c5:7f:09:0d:76:
         f5:47:76:80:11:1e:a0:54:50:2a:f3:7c:dc:e1:17:12:da:30:
         db:e6:a0:04:a8:7d:3f:43:42:66:ff:aa:86:a4:01:44:c1:62:
         53:a1:9e:1b:4a:9c:3c:97:35:df:2a:87:fe:92:b4:9c:8b:ec:
         d1:01:36:42:64:b7:f6:58:66:ea:e6:72:c5:21:92:77:08:6d:
         54:1d:27:fe:86:f3:cd:12:2a:85:9c:f4:e1:73:0f:25:a8:16:
         56:4b:0c:9a:bb:72:3f:05:b0:66:c9:a6:7c:a4:a4:27:8b:0a:
         38:f1:6c:b5:ab:6f:64:9d:05:e0:14:39:db:f0:05:4f:37:6d:
         f3:10:fc:f5:a9:2e:d9:9c:ea:46:8e:8b:99:86:c1:5e:60:16:
         f4:43:2b:ab:ee:57:56:fd:79:af:dc:ff:6e:48:ae:36:73:54:
         c5:8c:08:0e:06:85:ce:d3:1f:60:54:be:6e:95:70:89:89:8f:
         9c:ee:f6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:04:53 2026 by rpki-client