Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File:                     AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier:          qkpiODTbNuZVJvmpJRxDWEypOQ8Oyk1j7Cvh1TUuc7g=
Subject key identifier:   21:3E:C4:29:3A:50:30:CC:73:67:E1:AD:5D:8A:F4:9B:C9:40:84:C3
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       019F18309AD94942AAEE6F3F3119CF76C191
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number:          0BD7
Signing time:             Tue 30 Jun 2026 11:01:06 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:06 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:06 +0000
Files and hashes:         1: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: ftESoM4FFGM38W92gPQ75wFSWu6H3CkX9vLcChQatpw=)
                          2: wyy3rlzUUMeQq8PIhXfkhcAt_40.roa (hash: gHG1HjkTZWK4eYCE7NI/fkalfX+p2e1lN/BRfBXmaKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:9a:d9:49:42:aa:ee:6f:3f:31:19:cf:76:c1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: Jun 30 11:01:06 2026 GMT
            Not After : Jul  1 11:01:06 2026 GMT
        Subject: CN=213ec4293a5030cc7367e1ad5d8af49bc94084c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:06:8e:61:f0:b2:84:24:3a:e7:d4:76:3a:
                    bf:44:8b:2a:98:ad:46:b5:f1:d0:2d:a4:c4:14:91:
                    1e:ae:f8:50:71:f8:a7:35:da:42:25:07:e5:2e:4e:
                    21:89:2a:d3:70:52:ff:09:d0:6a:64:34:96:88:d7:
                    12:91:74:9b:50:3d:09:c4:7f:55:1c:0e:5a:fd:c4:
                    0a:d8:56:6f:6a:75:fc:20:42:38:01:09:e6:74:07:
                    3a:68:94:7e:7b:2d:c4:57:d6:17:26:61:82:92:a7:
                    29:b6:73:e0:6c:03:d6:f6:06:70:14:1e:d4:d1:98:
                    2e:28:90:25:9e:13:a9:9c:b1:7d:ee:0b:17:99:cf:
                    6f:fc:6a:c5:83:69:cd:e5:d8:b7:bd:13:16:47:43:
                    dd:e0:8b:0e:e8:a3:81:3e:02:d4:1f:24:a8:9f:b8:
                    d7:a0:ab:3e:6f:c2:33:bb:c9:13:85:67:e4:88:b1:
                    b8:d3:d8:b1:1f:44:7e:1a:b4:c3:f8:e8:90:a8:bd:
                    4d:41:01:c3:c8:82:80:df:0d:57:1d:45:fc:d0:64:
                    82:6c:18:3e:a0:bb:49:b6:ed:5d:63:c6:21:bf:7c:
                    f7:35:d0:7e:41:36:db:6f:45:7d:90:3d:8b:1c:0c:
                    81:83:b3:ba:b1:1c:a9:1a:81:95:e5:01:79:2d:c8:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3E:C4:29:3A:50:30:CC:73:67:E1:AD:5D:8A:F4:9B:C9:40:84:C3
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e7:4d:6b:4d:8e:06:54:bb:fd:2e:b0:8e:50:0e:3e:bd:68:
         fd:84:d6:e2:4c:5c:30:8b:66:a0:93:1a:aa:01:c4:c9:74:98:
         7f:b0:24:4b:18:ac:ab:a8:fe:2e:be:f9:2c:51:b4:8b:3c:ec:
         64:89:a6:e1:45:91:9b:db:d3:4d:6b:57:74:8f:02:66:75:3d:
         6c:0d:dd:05:f3:3f:fc:60:5b:40:2d:91:ec:77:39:0d:54:03:
         8d:55:97:df:ac:5c:4d:15:e5:51:a0:f6:fc:3d:47:e9:36:19:
         88:0f:41:90:5f:67:50:cf:a9:a8:a8:bb:e3:24:56:82:36:db:
         bd:a0:59:57:56:e8:a3:8e:a5:67:f9:df:34:96:fe:ad:35:58:
         3c:a6:bc:55:df:4f:b9:bd:7d:b8:69:b0:9a:c4:6e:2e:74:39:
         4b:89:f4:a7:6c:fd:04:d3:ce:0b:fd:6d:8d:5c:e2:a3:6c:fe:
         39:97:63:ab:34:0d:4d:79:93:c1:79:92:66:37:e3:9c:f0:30:
         4c:f4:93:f6:ab:b2:47:d6:b0:59:b1:a8:15:a7:30:cf:c7:31:
         fc:b6:e0:9b:42:20:dd:99:a8:d4:c3:ed:80:f9:35:d3:ca:f4:
         c9:e8:01:81:1b:60:f4:09:51:ff:4a:c4:d8:6b:cb:a8:8e:1c:
         91:c8:bd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:17 2026 by rpki-client