Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File:                     iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier:          gGY3iAQ9uFV7qnxHyZIfFzyrz+Iy/6ny9IEmocKa5nk=
Subject key identifier:   47:D7:F9:75:D7:69:DD:38:DF:6C:7A:B1:B8:C7:48:D1:14:08:5F:6B
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer:       /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial:       019EB6C5DEC7A6B18197A24000893A796517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number:          100D
Signing time:             Thu 11 Jun 2026 13:01:21 +0000
Manifest this update:     Thu 11 Jun 2026 13:01:21 +0000
Manifest next update:     Fri 12 Jun 2026 13:01:21 +0000
Files and hashes:         1: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: OyRouBLX9BnYDl6Tog+T/ZfaO4ZlpHmKqEzgR2qhv6A=)
                          2: jzAkYuzy0NM24DLxJG0nO2NEr2U.roa (hash: wNAWGH60q5oOPI5elDbJUeO2WCg0rkQsTkxovsLZh+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:de:c7:a6:b1:81:97:a2:40:00:89:3a:79:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
        Validity
            Not Before: Jun 11 13:01:21 2026 GMT
            Not After : Jun 12 13:01:21 2026 GMT
        Subject: CN=47d7f975d769dd38df6c7ab1b8c748d114085f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ee:83:3d:dd:38:34:b5:6c:3b:bb:03:e2:22:
                    59:91:f7:16:0a:6a:62:9f:17:2e:7f:cb:28:e2:fd:
                    f5:bd:55:7d:ba:10:5b:b7:2e:2f:57:ee:68:9d:22:
                    97:a9:94:7d:aa:cb:5e:e0:6e:cd:2f:58:4e:d9:a7:
                    9c:88:96:01:f3:d9:42:b8:c6:46:3d:dd:43:e9:bc:
                    57:c1:65:0e:82:8b:54:fe:f6:a2:58:e3:e4:23:92:
                    e6:f4:99:fd:db:dc:87:01:95:57:c1:a3:45:6b:1b:
                    de:2b:5d:53:cc:4f:7e:39:1b:db:d3:e8:17:dc:97:
                    7a:0c:de:20:e4:03:33:e7:e4:39:eb:73:7f:d5:0f:
                    5c:52:6c:da:e8:fd:84:69:a6:94:f1:03:08:43:1d:
                    a9:8f:6f:12:4c:d1:0a:33:c1:be:94:c4:45:96:4c:
                    97:ae:18:3c:1f:08:c9:a1:f7:9f:3b:f8:76:36:e4:
                    e4:a4:dc:5e:be:bb:10:88:45:0e:a0:68:c6:fe:58:
                    fb:70:1b:30:b5:42:de:97:c2:7d:aa:4d:43:1c:b8:
                    fe:76:ea:2f:e5:49:2a:1b:ec:c5:18:ca:68:63:59:
                    dd:57:54:69:aa:f4:23:e1:83:6e:ae:84:03:57:08:
                    85:39:69:6d:71:3d:22:f0:c1:07:70:e1:30:e7:2f:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D7:F9:75:D7:69:DD:38:DF:6C:7A:B1:B8:C7:48:D1:14:08:5F:6B
            X509v3 Authority Key Identifier:
                keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:c6:a5:f1:91:1f:64:10:57:1c:6c:af:d9:02:ee:bf:6c:
         ae:f3:f9:e4:8b:96:23:39:60:1b:92:72:13:4a:25:f2:71:4a:
         94:97:0e:f5:bd:2e:83:4e:38:2a:26:dc:96:68:16:87:b3:2f:
         5d:b1:9b:34:60:db:54:bb:ab:47:f2:c6:bd:f4:d4:f0:97:6a:
         72:c7:3f:d6:55:ca:69:34:e8:1a:3a:06:8a:77:9b:be:45:d3:
         b8:07:2b:1b:c7:6c:81:a4:01:f2:e9:7e:f8:1b:d1:8f:f4:ef:
         0a:ad:16:d0:bb:1a:5d:6a:26:33:c4:e0:56:8d:e5:61:88:51:
         74:08:ff:61:68:4e:a8:d6:11:5a:57:48:d8:df:8f:13:58:23:
         f0:f9:b8:2c:03:c5:a7:6c:95:77:4b:73:c1:2e:f4:34:c9:7e:
         85:de:37:67:15:2c:70:aa:6b:dc:b6:f2:5b:65:9c:48:dc:0c:
         36:1a:b9:a1:f5:f8:76:ec:90:cc:68:e5:f9:1c:b2:d8:eb:2c:
         34:ed:78:b1:38:9f:50:5d:17:06:a1:36:0a:4b:e8:aa:56:8e:
         33:9e:80:84:3d:a6:32:87:52:76:04:4d:72:88:a9:66:29:53:
         a7:88:e5:0d:90:95:50:15:1e:02:d6:8e:75:29:c0:35:19:99:
         de:b5:0d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:40:41 2026 by rpki-client