Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File:                     1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier:          Fy8kYF5h22Ocr6FLRXN6hx7V1xJE+teIHSzLN5AQoHw=
Subject key identifier:   C7:03:2A:BB:CD:12:52:8F:61:57:DB:C5:97:80:C9:8D:9C:25:ED:41
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer:       /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial:       019F18D6D2BB440DB801880D1129BCB62D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 14:02:39 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:39 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:39 +0000
Files and hashes:         1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: hVQzoLJ1vRnY5A3t9Por6o37GvmqZb3Ie5nl6WAE12M=)
                          2: Vci5kME3AljCGz_yFCPscOsBEvk.roa (hash: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:d2:bb:44:0d:b8:01:88:0d:11:29:bc:b6:2d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
        Validity
            Not Before: Jun 30 14:02:39 2026 GMT
            Not After : Jul  1 14:02:39 2026 GMT
        Subject: CN=c7032abbcd12528f6157dbc59780c98d9c25ed41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:53:ba:92:3b:08:16:c5:87:8f:b0:29:22:
                    cb:9e:1a:9a:98:12:12:ad:ee:d1:8b:aa:77:bd:d4:
                    22:70:89:6f:0d:6c:5f:70:bf:d9:c1:6e:b2:9e:66:
                    a3:69:c9:6d:9b:16:9e:d6:58:01:67:95:d8:ba:61:
                    1d:f7:96:84:33:45:00:bb:cd:60:26:63:ff:8c:40:
                    31:52:db:75:77:eb:f6:e7:74:03:a1:05:7d:95:a3:
                    12:a3:41:0e:03:af:f0:92:1d:86:8d:ce:3b:b0:0d:
                    00:73:39:f7:b4:6a:67:6d:a3:46:b1:a6:db:53:95:
                    8b:d3:b1:0f:0a:e5:fb:eb:b5:1a:56:0e:f7:22:dd:
                    c9:e1:a1:a3:a3:04:bc:ae:d5:86:9e:2f:99:fa:ed:
                    e6:4f:d4:49:72:2d:62:29:33:06:25:0a:29:cc:71:
                    c3:05:8e:71:0e:0f:88:8c:01:a9:ab:30:e3:5c:2c:
                    2e:3f:3d:39:3b:47:5d:97:8b:e6:6b:72:e7:4d:ba:
                    5c:d6:54:64:33:de:22:f9:cc:12:4e:cd:00:18:27:
                    d5:b8:7a:ff:3a:74:cf:a0:a9:3d:ae:80:e6:4e:4c:
                    ae:6b:78:a4:ec:82:d0:f3:bd:2b:89:26:91:33:cd:
                    b1:7f:71:af:58:2a:d6:df:14:2d:e9:55:23:f4:00:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:03:2A:BB:CD:12:52:8F:61:57:DB:C5:97:80:C9:8D:9C:25:ED:41
            X509v3 Authority Key Identifier:
                keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:18:5d:32:89:46:5f:26:6b:f8:1b:5d:95:3b:07:75:a1:
         f4:cd:cf:26:6c:da:aa:67:6d:6e:5e:42:2b:f6:2c:2a:a8:15:
         de:4b:8e:b1:16:66:2b:4b:f0:d5:38:6e:03:42:73:4e:b6:c6:
         2e:df:8e:17:66:e6:8b:81:17:a1:ec:9a:f4:ea:cc:b6:47:9e:
         13:0e:ca:92:3a:07:a4:90:11:78:ed:09:69:3b:fa:50:a2:44:
         20:bd:43:73:be:85:81:15:ba:8d:8f:f7:57:28:54:9d:82:0a:
         e4:54:55:ad:27:71:c3:d4:9c:26:73:a3:7b:92:4e:6c:78:54:
         cb:bd:2b:31:5b:6b:9a:0a:fb:22:4e:2b:dc:44:e2:b2:70:d9:
         cc:b5:70:2b:97:74:09:53:4b:88:ea:03:c0:c4:6b:d3:4f:cf:
         bc:c2:4c:67:e9:93:5d:5a:9a:16:ef:3e:53:72:09:83:74:f0:
         f7:ca:f0:b9:d8:ca:5d:5c:38:1b:08:6c:5e:01:dc:02:75:f4:
         b7:fe:5a:d1:2e:78:ad:9a:ec:75:a2:b3:e4:f5:73:10:7b:d9:
         b2:95:ac:2a:c9:5a:5c:51:20:22:b6:f6:4f:27:73:e9:07:e3:
         45:93:15:a9:94:22:a5:74:ef:4a:bc:91:9c:42:60:5c:75:ee:
         ba:f8:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:19 2026 by rpki-client