Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File:                     1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier:          r+qZBMouem7hbZ6iiOckTXTxKefrd6GambDyiAa2Arc=
Subject key identifier:   3A:E4:32:20:3F:DD:24:3A:41:8F:AE:03:AF:A9:EA:E5:04:0A:3C:1E
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer:       /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial:       019F17553CE0566018558B3E1241739D680D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number:          060D
Signing time:             Tue 30 Jun 2026 07:01:29 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:29 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:29 +0000
Files and hashes:         1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: lpakPSYcN9twmtVFjBxBx8VhQE8IhNfwnRtBtc7kwwU=)
                          2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:55:3c:e0:56:60:18:55:8b:3e:12:41:73:9d:68:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
        Validity
            Not Before: Jun 30 07:01:29 2026 GMT
            Not After : Jul  1 07:01:29 2026 GMT
        Subject: CN=3ae432203fdd243a418fae03afa9eae5040a3c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6e:26:2b:69:0a:b3:03:33:9b:07:d2:0c:af:
                    6a:fb:4d:e2:bf:96:84:82:ab:c2:ea:71:36:00:77:
                    88:db:ea:e1:f0:5b:f7:d3:e7:d9:05:34:54:0c:78:
                    56:b4:0a:05:f3:ec:ad:d0:bd:59:f3:d5:5c:01:ad:
                    3b:f2:fa:33:0f:01:ff:6d:df:ad:f1:a3:f5:ff:4d:
                    3a:10:d8:f8:24:91:50:4c:1a:41:b3:ad:63:e3:50:
                    94:2c:15:74:6b:9f:f2:5f:41:84:59:6d:ed:82:a6:
                    98:32:38:ad:4c:ec:e4:79:7b:50:81:f4:49:61:97:
                    cf:ac:19:59:5b:1b:1e:ed:23:13:f6:d5:fa:b3:df:
                    6d:41:e0:5a:dd:30:4e:7d:10:9c:a3:39:49:5b:0c:
                    3e:eb:bc:a6:16:a1:a4:65:04:0b:3b:11:ba:f1:18:
                    45:6b:96:e7:53:ff:fc:6b:5e:ba:bc:72:15:8b:f4:
                    93:47:eb:1f:71:6f:31:87:2f:0e:85:79:8b:9a:d3:
                    42:d6:20:62:69:a2:79:87:74:7c:d2:97:98:81:87:
                    2a:2c:f2:8f:ce:41:55:8b:95:ed:30:f2:af:bf:3b:
                    f4:9a:d7:e1:8b:60:2a:ef:aa:2c:3b:18:48:e7:c8:
                    57:5e:f9:e1:7a:a7:d7:a9:6e:37:6a:d7:82:9b:1d:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E4:32:20:3F:DD:24:3A:41:8F:AE:03:AF:A9:EA:E5:04:0A:3C:1E
            X509v3 Authority Key Identifier:
                keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ef:5e:bc:e1:95:f7:d4:b5:b1:43:e0:f0:51:bd:c8:75:aa:
         7e:47:2f:9a:57:4d:64:40:f3:bc:5f:13:39:0a:12:f3:96:f7:
         05:57:bc:94:fe:66:ec:f2:40:6d:49:fb:a2:aa:e8:b3:5f:45:
         e5:83:fb:78:88:df:0a:c0:82:dc:87:dd:1c:73:42:a8:31:22:
         55:db:7d:4b:78:50:05:7c:97:b7:da:46:38:56:98:38:80:19:
         7f:6c:0f:ff:b4:81:f7:c3:0c:c0:d8:e9:15:44:d3:1f:e7:24:
         73:3d:d2:fc:bd:d0:64:f9:1a:9e:f9:f5:d1:d8:5b:51:ca:c4:
         a0:01:30:c1:6a:c6:50:a1:9f:87:2c:bc:47:5a:1f:ea:57:37:
         2c:cb:8b:d1:d8:98:ad:32:85:09:0f:b1:e6:c3:4e:8c:da:8b:
         55:09:56:ba:e5:59:6c:22:80:20:4d:98:d7:4a:35:79:a9:81:
         0f:3b:9f:b7:d5:a4:52:51:54:c0:a8:6e:8b:79:ca:a5:a3:e0:
         9c:6e:3d:95:64:8d:41:bc:19:9e:9b:dc:17:5a:13:66:a6:36:
         c8:ff:e5:e3:66:a7:e7:da:eb:c4:ab:5e:1a:bb:b7:d9:0f:78:
         fe:13:b0:05:6f:ce:75:e9:ad:2d:e3:0b:7a:65:36:08:c1:61:
         65:4e:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:46 2026 by rpki-client