Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File:                     iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier:          s4iPQw7OqGvEFvtAAWjrzKVcCl1Wz/fHFkX+4Svby/Y=
Subject key identifier:   11:5A:32:6D:F1:8E:D4:20:B8:F6:CA:32:14:F2:55:93:6B:E0:9E:35
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer:       /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial:       019EB8B45CB231AE09C7C0BF460F64E862EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number:          100E
Signing time:             Thu 11 Jun 2026 22:01:28 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:28 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:28 +0000
Files and hashes:         1: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: Ky0t34i0i51W9dxOLkqGII1cCeFeNQ1TfnTeuRYGnHM=)
                          2: jzAkYuzy0NM24DLxJG0nO2NEr2U.roa (hash: wNAWGH60q5oOPI5elDbJUeO2WCg0rkQsTkxovsLZh+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:5c:b2:31:ae:09:c7:c0:bf:46:0f:64:e8:62:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
        Validity
            Not Before: Jun 11 22:01:28 2026 GMT
            Not After : Jun 12 22:01:28 2026 GMT
        Subject: CN=115a326df18ed420b8f6ca3214f255936be09e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:73:e8:00:9b:7a:24:da:05:74:e4:81:60:
                    52:22:d0:13:28:0e:19:ff:98:34:cc:3b:ef:15:d5:
                    20:18:ba:08:ad:8b:2f:8d:ee:12:c1:b6:78:78:9f:
                    d6:cb:ed:2d:55:4f:43:52:0f:e7:72:9d:5c:6f:41:
                    02:77:3d:cc:10:f9:54:b5:d7:3b:76:76:36:87:a7:
                    ad:04:69:d3:e4:31:a9:56:66:15:c5:8c:cf:e2:43:
                    b6:11:16:ec:0d:7b:b2:63:6d:8b:f3:8f:b8:78:ee:
                    16:fa:54:0d:b9:6b:b6:7e:be:d2:d8:dc:51:78:aa:
                    00:23:cb:0c:bd:5c:8a:95:c1:ed:f7:c2:e9:78:b1:
                    92:97:53:1e:55:e6:bd:92:10:a7:6d:6a:00:35:c7:
                    9d:7f:4f:e2:44:70:ec:6b:9f:5a:24:84:1b:ee:31:
                    b7:dd:b8:fd:85:17:b1:b4:11:17:84:3f:b2:45:10:
                    3a:ee:66:ba:e2:f7:6c:86:90:b1:15:93:7d:b6:ec:
                    7e:ab:4e:cf:01:d5:22:c3:ee:6c:5d:8e:b8:f4:ad:
                    b6:bb:0d:5d:fc:12:a4:ce:0c:e5:c5:9a:74:68:8d:
                    b5:5f:07:09:61:c8:23:40:93:8a:30:2f:40:66:60:
                    15:4a:d3:6b:7b:58:58:30:48:4f:dd:68:35:e1:b2:
                    98:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5A:32:6D:F1:8E:D4:20:B8:F6:CA:32:14:F2:55:93:6B:E0:9E:35
            X509v3 Authority Key Identifier:
                keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4b:fc:4a:4f:ce:b9:ef:75:9e:fe:c1:cc:f8:a2:ba:6b:19:
         28:60:37:fd:54:ac:32:15:8e:a0:64:aa:fd:0f:c4:d6:80:e1:
         44:d9:e4:67:63:a0:a4:bc:df:b9:28:35:22:76:bf:87:7b:ba:
         30:a2:70:f4:e2:be:10:aa:ea:95:3a:2d:2f:95:de:6e:e2:2f:
         46:4c:c4:3e:4d:e7:fe:9a:d2:56:19:16:4c:b5:a1:7d:88:da:
         29:7d:42:67:72:2a:19:90:30:4f:15:9a:43:b7:a5:e2:98:6a:
         dd:31:bf:08:7d:07:9e:d0:8f:59:f9:c0:41:03:85:9f:e1:af:
         69:c0:ca:eb:36:13:e9:32:2a:2a:86:15:ce:de:62:1b:0b:5f:
         7f:5b:7d:b8:10:29:29:93:f8:32:3e:ec:9a:24:47:f3:20:42:
         54:65:ec:9e:ed:89:ef:de:83:7b:d3:dd:14:82:d7:b2:6a:f8:
         37:2b:69:d0:3a:d4:5b:8c:45:59:4f:5b:fb:0f:12:22:42:70:
         d8:48:9c:3f:ef:3e:60:3e:11:0c:96:4d:6f:b7:58:65:7b:ac:
         81:32:28:7c:ec:09:1e:18:bb:74:92:8d:5a:33:da:68:57:53:
         cf:fa:0d:32:41:1d:e5:0a:9b:5c:ed:58:6b:5e:5c:89:e1:28:
         0d:f6:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:28 2026 by rpki-client