Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File:                     02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier:          SJcMkyNRb7DanCdB9vHImbZzJaZ6T+7NUfx4eD+YFB4=
Subject key identifier:   31:B1:D5:38:40:F9:DF:15:BB:67:F0:1C:B0:65:AB:96:FB:4A:FF:C7
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       019F18302A2594BF8A7230ED1A4331B5057C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number:          0D48
Signing time:             Tue 30 Jun 2026 11:00:37 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:37 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:37 +0000
Files and hashes:         1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: /CxK8xFaZ1pkS2xGYJ8XgHeGEUNXdKRfE623ZJLeCcc=)
                          2: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (hash: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ=)
                          3: OUo2-_z7ZwJP4yvmGUs1ZUP-ALU.roa (hash: kUKNwP9z4WpXOZS3n+mI9u2cgdXowzL+jJ2s8nNJ/ng=)
                          4: _mDWBpNalZX-rGj5Winjf39L6Zw.roa (hash: pVvGevMN46/pQnsg9nZSouyWirGGwM8SkSaHOD7+jpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:2a:25:94:bf:8a:72:30:ed:1a:43:31:b5:05:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: Jun 30 11:00:37 2026 GMT
            Not After : Jul  1 11:00:37 2026 GMT
        Subject: CN=31b1d53840f9df15bb67f01cb065ab96fb4affc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fe:cc:77:42:dc:1a:97:cf:29:8b:7a:2b:5e:
                    5c:fb:9b:e8:55:96:11:f2:26:88:12:37:9f:67:c7:
                    a2:58:74:1b:98:b6:6d:9c:70:c3:62:a4:12:93:45:
                    99:26:7b:bc:41:bf:03:99:7a:ea:c0:93:b6:87:dd:
                    40:75:11:35:34:35:4f:26:69:7c:d7:59:ad:8a:89:
                    1e:2a:06:75:f6:f7:59:b5:09:2c:98:54:35:a3:4c:
                    84:03:d1:ad:0c:d2:e2:2b:6b:e2:ac:59:17:bd:d4:
                    e5:73:2b:bb:8a:cb:52:a9:bd:0e:85:a5:79:84:25:
                    a5:1b:31:d4:77:17:c3:ee:4a:ba:ec:a2:c4:92:bf:
                    52:df:92:0d:74:8d:da:9e:93:4b:0b:66:bd:d2:b0:
                    11:a0:11:f9:5a:58:30:b2:ad:99:3d:63:d3:98:b8:
                    cf:da:bf:3b:62:e9:77:49:d1:f6:fd:d8:04:7f:74:
                    7d:da:1a:b0:f7:c1:a4:33:ef:c2:ee:c9:98:95:22:
                    0f:23:24:cf:be:f7:e0:8f:68:0a:ae:00:62:1c:d1:
                    fa:6e:90:c9:5b:12:a9:49:a8:07:6c:e2:5e:3f:b7:
                    98:ce:c8:de:cd:8f:58:fa:85:3a:e0:bc:06:b2:56:
                    2e:fa:31:1f:e7:1c:0f:e7:67:99:22:91:a4:df:dd:
                    09:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B1:D5:38:40:F9:DF:15:BB:67:F0:1C:B0:65:AB:96:FB:4A:FF:C7
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:08:be:cc:2d:85:49:55:72:25:40:8b:30:af:33:ef:ee:ca:
         cc:e2:62:ac:bc:79:8f:03:89:6a:11:93:82:98:04:7f:3a:c6:
         2b:23:6a:b7:97:f4:94:f2:6a:bd:10:5e:7d:c8:50:4d:be:35:
         0b:fd:15:b5:7d:38:9c:67:cd:4b:97:90:7e:2e:61:d0:4a:5c:
         83:2e:eb:63:53:31:2b:04:aa:bb:39:ae:37:87:aa:ee:61:45:
         c0:48:76:5c:c5:7b:aa:cd:83:ff:0d:4b:0d:67:26:c1:45:73:
         9c:5a:95:eb:f3:58:1f:0d:a7:51:c9:87:63:24:67:b9:64:05:
         a5:56:93:3c:91:bd:c9:0d:dd:db:83:6f:5e:54:9d:b7:97:15:
         1a:c6:36:3d:28:85:54:28:0b:f7:34:6e:46:75:23:de:df:06:
         da:69:7e:65:c9:bc:20:6b:b9:85:e3:30:20:b1:fa:dc:c1:ec:
         44:7f:6a:2d:ce:9f:44:9b:8a:53:65:a5:b9:1b:76:81:a0:1f:
         19:24:45:dd:fc:cc:89:ff:1f:d3:ce:a5:de:95:6d:cb:77:7c:
         fb:e1:84:9f:35:ae:fe:7d:86:c9:9a:d4:1b:11:4a:50:80:55:
         61:5e:7d:36:a2:5c:e1:b5:cc:5b:57:e8:b3:2f:35:72:5d:b8:
         ff:a8:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:40 2026 by rpki-client