Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
File:                     Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft (raw, json)
Hash identifier:          RxyPEq3w7sFrHHNllsRLRWjifdjyyWV/V+1fEIJK1yw=
Subject key identifier:   2C:E3:6F:73:A1:B5:EC:1B:67:59:EA:65:ED:3A:09:45:AF:25:6B:56
Authority key identifier: 49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D
Certificate issuer:       /CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
Certificate serial:       019F1B9FAA857F95D5CCC5646B472A6FBBBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
Manifest number:          156F
Signing time:             Wed 01 Jul 2026 03:01:16 +0000
Manifest this update:     Wed 01 Jul 2026 03:01:16 +0000
Manifest next update:     Thu 02 Jul 2026 03:01:16 +0000
Files and hashes:         1: Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl (hash: 8Kbz2DZJYWNxG9Vy/3EbdsizXwV0PP75qX1p4Xb7rv0=)
                          2: zRBFe9x1meBumlZVBO7a-XrbamY.roa (hash: 9tVoYdgbZgFACYKhxfO+KxLqad27bA9cdGeFVvtqTOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 20:30:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1b:9f:aa:85:7f:95:d5:cc:c5:64:6b:47:2a:6f:bb:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49cd9ec8e53f8fc2a35e91b77014f6a73d8b5b3d
        Validity
            Not Before: Jul  1 03:01:16 2026 GMT
            Not After : Jul  2 03:01:16 2026 GMT
        Subject: CN=2ce36f73a1b5ec1b6759ea65ed3a0945af256b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:2c:24:e6:38:67:42:54:bc:72:3e:02:3f:
                    83:c1:ed:fc:36:24:22:94:25:f4:81:3a:bd:b2:95:
                    b9:c7:06:20:7c:83:64:98:f4:13:9b:53:84:4e:59:
                    d3:ed:e7:77:da:92:df:2a:a1:01:33:35:f2:fc:49:
                    ed:25:9c:ef:53:d9:cf:06:b8:53:c1:ea:a1:a5:24:
                    38:94:07:bf:3f:87:5b:22:6a:de:d3:d4:50:b4:43:
                    e0:3c:a6:28:f1:06:1a:4c:cc:8f:77:1f:ea:2c:a0:
                    d4:35:32:a6:e3:a2:8d:82:c1:d6:8a:2c:b5:3a:3a:
                    8f:e2:14:42:71:f4:29:40:81:52:6e:62:aa:e3:60:
                    b5:56:ca:83:2b:f4:09:20:eb:6e:99:be:74:d2:6a:
                    68:0b:84:13:12:50:94:97:db:d1:c7:15:54:31:9f:
                    92:df:28:45:e9:30:6a:53:fa:7f:75:d4:c0:40:4f:
                    f3:a7:a1:7d:84:10:ef:eb:d1:c2:8a:f9:67:b1:50:
                    31:a7:c5:bd:f9:01:66:33:6f:8b:55:bc:52:7b:ec:
                    82:8b:65:9b:09:ef:5f:b9:d4:af:f6:bd:4e:a4:c4:
                    9b:23:a7:7b:3a:0e:d8:f9:4d:83:26:46:d0:8a:5f:
                    22:e1:4e:2a:51:20:57:fa:ff:fe:29:75:ee:5b:29:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E3:6F:73:A1:B5:EC:1B:67:59:EA:65:ED:3A:09:45:AF:25:6B:56
            X509v3 Authority Key Identifier:
                keyid:49:CD:9E:C8:E5:3F:8F:C2:A3:5E:91:B7:70:14:F6:A7:3D:8B:5B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1b5961-84ab-40be-b0dc-2f6f9f888375/1/Sc2eyOU_j8KjXpG3cBT2pz2LWz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:e3:da:3d:93:ae:fc:1f:0d:81:ad:78:ba:c9:98:04:00:
         d9:c4:88:ba:43:bf:8a:be:a0:15:52:0a:9d:39:36:16:a5:6c:
         ff:5e:27:b5:81:fe:33:3b:67:12:16:ed:6c:4d:3c:c6:41:06:
         94:dd:b4:22:95:e7:fe:b9:bb:88:49:56:56:59:61:1b:63:33:
         7b:3b:02:71:86:0f:15:47:a7:ad:53:77:96:03:ce:81:6e:93:
         2b:b8:93:56:51:3f:79:62:6d:17:f1:25:13:4e:ea:bd:5b:26:
         9c:ff:fe:6d:84:e0:11:4d:d2:a3:ab:e8:d6:1e:d7:ef:63:cf:
         2a:d8:6d:6c:39:e1:a2:bb:c8:5d:d9:9f:c2:cb:a1:e7:8e:6b:
         79:29:7d:d1:9f:68:db:28:4b:47:5b:4d:1c:c4:62:c1:00:0d:
         50:e1:a9:78:50:57:57:1e:4c:55:47:ea:84:b3:c9:b0:5c:d1:
         09:51:78:5e:e2:a8:21:b1:fd:ea:e8:1e:e8:c7:55:56:57:d7:
         53:6d:f7:2f:64:95:00:02:eb:7c:a1:23:c8:45:b1:e8:91:db:
         85:bf:38:81:52:16:6c:f9:79:e2:03:96:b6:e8:0c:89:04:59:
         39:53:f8:fc:d3:51:29:a9:58:84:8c:be:4c:a7:de:7c:a9:8e:
         18:22:cc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:37:38 2026 by rpki-client