Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          1Qpv2I12xqiOySGswfU08nL+HatB9wrAM6mvreVIKFo=
Subject key identifier:   2C:58:8E:AE:50:58:03:D8:DB:2D:3E:66:32:73:22:7B:D5:BC:A9:78
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       019EFBA81D96E36E6EAAF41D91EE94AB412A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          1987
Signing time:             Wed 24 Jun 2026 22:02:39 +0000
Manifest this update:     Wed 24 Jun 2026 22:02:39 +0000
Manifest next update:     Thu 25 Jun 2026 22:02:39 +0000
Files and hashes:         1: 2c0jqBuEH1mHawmDju5SJrb9XO4.roa (hash: 4iGaC+nsr7eIRDAsx1YlRBvu72t0bZzh6T9oxMZT12o=)
                          2: 49mG2LIAGgPUY2ZzmJGz3IeznXI.roa (hash: 7aWoWG5rNXduvslZ3E4HwcG2X6Htck+37nEJTi56c7o=)
                          3: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: Uv67mS3O29PMVM7h+1GhhsJiyz+KIL03FryDcgWY7sA=)
                          4: Fb3QRguUDty9iQr1ULGmN54gLiI.roa (hash: kgzbakyVLR8dQ8e9EI+6xpmdVsMJI+WFbZcHU/IXAUc=)
                          5: SfEPdB4zSzundHQL8u1ry-xE4Vc.asa (hash: YBQfRgXIESZ5hCHeLjGYkAamoqJ89Tdiiao0w4ZWcjY=)
                          6: dECFcKuPIDtaKYfkBtHP9FzNkPY.roa (hash: nfxA7gIFHYR0X3UKRvPVNyH71Z4WvtDgdmK9W79oICs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 22:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:a8:1d:96:e3:6e:6e:aa:f4:1d:91:ee:94:ab:41:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Jun 24 22:02:39 2026 GMT
            Not After : Jun 25 22:02:39 2026 GMT
        Subject: CN=2c588eae505803d8db2d3e663273227bd5bca978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:75:5f:d6:f4:c8:f7:56:ca:26:cc:28:43:18:
                    1c:46:13:32:88:80:a7:67:d2:55:87:60:70:fb:76:
                    bd:27:0b:98:ed:fd:b0:aa:01:df:c5:63:23:e0:1f:
                    e9:dd:bd:10:f5:b1:20:31:43:27:ff:59:05:1d:88:
                    46:60:11:60:d4:f5:a2:8d:68:d4:42:8e:c5:c7:f7:
                    04:63:f8:86:10:e9:0e:bf:be:05:33:13:0a:15:e1:
                    b7:fb:d2:af:7e:79:1f:97:dc:7b:f5:21:5c:1b:12:
                    7e:6e:95:51:15:23:a1:c5:4d:85:00:42:b4:5c:c2:
                    71:e9:40:f3:3d:e8:16:75:fd:d7:10:15:0a:e7:1e:
                    45:e7:db:19:7e:4f:bc:1f:4e:c9:2b:eb:bd:bc:b7:
                    d2:d7:e6:3e:fe:21:d9:a9:da:a3:01:b5:74:72:f2:
                    14:74:b9:10:9a:b4:72:88:cd:7d:6b:d0:bd:8a:f6:
                    8e:3a:25:e7:c9:63:96:29:b7:ed:82:38:e8:df:80:
                    02:92:3b:19:eb:01:8f:55:a4:2f:61:fa:fe:21:c7:
                    d8:e6:bb:da:c9:f4:8a:d4:6e:18:0b:05:dd:a9:42:
                    61:53:13:4f:ca:c0:67:89:72:6c:53:7a:9c:31:a9:
                    53:1e:9f:4d:a2:9b:18:7b:d9:7e:93:2e:1f:c4:01:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:58:8E:AE:50:58:03:D8:DB:2D:3E:66:32:73:22:7B:D5:BC:A9:78
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:59:a4:2e:12:4f:6c:3d:63:b3:d9:74:d0:75:6c:94:7b:41:
         1a:73:d3:82:42:ec:67:06:ea:5b:e3:5c:7c:ba:65:3d:3f:d2:
         a1:4c:80:b5:68:79:62:e6:8d:05:35:5c:40:5c:02:65:9b:0d:
         d7:2d:30:c7:45:b7:c3:1b:1f:08:68:15:ee:ac:7c:d6:e9:15:
         d1:bd:5e:2b:92:2e:bc:64:6e:6d:01:71:91:78:b6:60:a2:6c:
         20:2c:11:94:14:0a:24:f3:29:fa:71:53:ad:3a:1c:59:b5:e7:
         8c:57:1d:2b:fd:de:2a:d3:ec:a7:16:44:4c:a1:d8:b4:94:d2:
         42:c8:76:98:ca:da:ed:63:57:6d:82:45:f9:3d:0c:d7:43:14:
         af:c2:72:25:cf:b6:e6:b7:3e:b3:9b:47:d6:97:5a:21:98:85:
         0f:32:d6:39:56:6b:db:59:67:79:5a:80:6c:73:43:97:75:ff:
         66:0b:b9:c7:d9:dd:66:22:1c:19:db:e0:d4:1a:9c:7d:a0:ed:
         58:66:95:a3:df:70:9c:55:73:9c:2f:71:b9:7a:34:8e:27:b2:
         41:1c:4d:ea:f0:20:08:8c:56:ad:81:69:eb:89:d0:26:45:1d:
         da:17:f2:66:72:aa:3b:54:02:eb:c9:cb:f4:bd:1f:24:65:96:
         17:92:78:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:32:02 2026 by rpki-client