Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File:                     dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier:          xEONgvwbNnR3JOVlvujmJ7x8tv3P+st9zTXwUIG2OMM=
Subject key identifier:   31:BE:39:0D:06:56:1E:12:0D:A4:2B:CA:F9:03:03:C9:43:8A:42:49
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer:       /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial:       019EB7336CE62EEA516BC9FB153330F3599A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number:          07C2
Signing time:             Thu 11 Jun 2026 15:01:01 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:01 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:01 +0000
Files and hashes:         1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
                          2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: EOhvf6hfTFo1OfSfh+l+qjggsKAIhYKyEoRiNkDxRYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:6c:e6:2e:ea:51:6b:c9:fb:15:33:30:f3:59:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
        Validity
            Not Before: Jun 11 15:01:01 2026 GMT
            Not After : Jun 12 15:01:01 2026 GMT
        Subject: CN=31be390d06561e120da42bcaf90303c9438a4249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:50:d6:fe:cd:6a:4c:15:b2:91:bc:bf:87:2c:
                    ef:af:8c:53:d3:d1:d3:ce:59:db:81:44:de:e6:b1:
                    1f:8c:c6:ff:ee:59:28:df:3d:b6:93:7f:65:73:43:
                    0d:65:ce:c8:fb:5e:39:a5:49:02:11:01:0a:07:bd:
                    0f:fb:d5:ae:69:bc:36:df:83:6e:26:90:b2:fa:20:
                    f3:fc:55:0a:a9:96:a2:b3:1b:a7:e9:a6:d6:cc:da:
                    d2:1b:26:54:37:d5:8f:d4:97:a5:66:2d:90:bd:1d:
                    b4:05:a7:d2:e1:3e:4c:49:d2:34:10:af:e5:eb:e2:
                    d8:13:84:62:01:32:ca:6f:7a:9e:94:96:54:75:95:
                    da:71:0e:a5:6d:0b:a6:d9:17:73:59:a9:28:5f:82:
                    c9:73:33:5c:b1:17:60:66:a9:40:e6:5a:ef:6c:55:
                    cd:93:6f:66:30:62:55:c5:bd:1e:af:1b:4e:89:f8:
                    ea:2d:43:ef:06:93:b1:be:85:c0:5d:d5:80:e6:3e:
                    13:01:56:6a:e9:4e:6c:42:21:a9:04:ce:ff:f6:0b:
                    02:04:0d:08:db:21:d1:69:eb:06:69:1c:33:e8:47:
                    89:e0:84:d4:1b:4c:1d:08:eb:99:5a:ac:43:d8:1e:
                    6b:40:b9:ac:2d:7d:1c:9b:0f:34:43:ca:45:72:70:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BE:39:0D:06:56:1E:12:0D:A4:2B:CA:F9:03:03:C9:43:8A:42:49
            X509v3 Authority Key Identifier:
                keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:bd:2f:2f:be:78:da:da:1c:6a:29:e8:0a:5c:e6:84:62:e7:
         01:44:58:f0:4f:42:a3:a0:38:b6:91:20:86:b1:cc:75:b2:a8:
         65:4c:3f:b0:30:5e:ee:56:60:c1:61:34:82:c2:be:22:ca:50:
         f3:47:4e:59:0d:6b:e7:40:a8:de:94:fb:b6:72:b6:1c:f2:f0:
         d3:cb:9e:a0:cf:bd:91:c8:32:c4:51:17:61:fb:fd:85:64:f1:
         02:00:df:60:c2:a6:52:3c:49:94:9f:a7:aa:51:4c:4a:57:72:
         24:23:93:54:8d:c9:4c:88:f2:c8:20:cc:90:45:02:0f:01:b9:
         85:89:ac:81:27:a2:f3:b9:9a:cd:02:07:3e:7e:d2:44:fb:97:
         8d:e3:2e:68:6b:57:f7:13:e8:ff:63:3f:8c:99:fd:14:6e:30:
         28:5e:0a:61:95:2e:9b:58:f0:82:b6:fa:2d:ba:75:9b:ee:75:
         39:4c:a4:99:93:10:49:24:23:00:14:1c:85:2d:66:4a:f9:7c:
         6a:e5:57:03:bb:7e:00:e9:c9:1f:02:27:fc:28:99:b9:55:57:
         df:f8:92:c2:c3:93:ee:50:0b:2b:e9:4a:55:43:d9:44:25:71:
         6a:dc:10:9a:8c:d8:06:1e:14:7a:a8:cd:e9:d2:2a:90:99:d4:
         e5:b5:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:55 2026 by rpki-client