Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
File:                     EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft (raw, json)
Hash identifier:          TV8f6sysLEZu9yVDK7ycR6P6aw9zAsoS8EUe2G7AFcY=
Subject key identifier:   03:60:A4:DE:64:1C:B8:F0:B9:4C:97:58:2D:F7:ED:DF:D9:9E:25:74
Authority key identifier: 12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A
Certificate issuer:       /CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
Certificate serial:       019EB732F88A9AABA53844C5D1D004FD3E36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
Manifest number:          016E
Signing time:             Thu 11 Jun 2026 15:00:31 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:31 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:31 +0000
Files and hashes:         1: EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl (hash: RxuTjV0Hiprmo8s7HoKZA0p9nYHJF43VT3D2beWTGBE=)
                          2: JoNp07irydQW7d_RoW9vx6fomU8.roa (hash: psWaknIhU6Jb1MY1PyptUlYb35baXFglD+3O4LtX50k=)
                          3: UyXm5ATWPwo3EOUnhBfGXzkllu4.roa (hash: zdPdUZoq7nIIRZBqM6+EqVB0rkz+qapJkbp3+Jl8kA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:32:f8:8a:9a:ab:a5:38:44:c5:d1:d0:04:fd:3e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d9ad5db899e7e7e3cfecf97bc42d38b726279a
        Validity
            Not Before: Jun 11 15:00:31 2026 GMT
            Not After : Jun 12 15:00:31 2026 GMT
        Subject: CN=0360a4de641cb8f0b94c97582df7eddfd99e2574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e3:18:eb:d3:3a:e0:12:61:8e:a0:d9:74:86:
                    95:fb:91:7f:29:e4:ea:49:91:57:21:2a:84:04:09:
                    40:23:60:3e:c9:34:af:2a:b5:dc:6a:2d:19:b7:57:
                    9b:b6:44:72:af:b5:64:28:73:98:7d:8a:74:71:c3:
                    b9:da:be:cb:21:6d:ec:74:ff:e0:0b:45:e7:0f:24:
                    a2:fa:6d:26:5a:a7:e1:b0:e0:35:8e:37:8d:a6:a0:
                    de:5d:bd:5c:1e:46:8f:40:09:6b:0c:e5:55:da:13:
                    b3:32:b8:4f:7b:72:f2:31:f9:16:ab:bc:cd:29:54:
                    15:17:ba:16:ae:8f:31:67:bf:47:dd:57:48:f5:da:
                    e1:5d:2f:b2:70:a5:31:03:3b:27:1f:41:98:ae:91:
                    93:f0:0f:6c:29:d4:87:77:d9:74:30:58:6c:08:56:
                    bd:62:09:64:25:1c:54:03:38:a8:d5:9f:1a:6e:3f:
                    5d:5e:4c:92:0d:26:97:31:54:c3:e1:2d:83:5d:5d:
                    b3:23:fb:1e:6d:63:1d:e0:9a:7f:71:7d:92:6e:53:
                    1a:26:66:79:7c:93:b2:dd:5f:38:e0:c9:3a:4a:c6:
                    18:54:a2:b9:4c:0c:d1:75:21:4c:41:3c:e1:e3:a4:
                    8f:38:09:89:89:d9:63:47:97:a7:28:70:9f:c8:72:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:60:A4:DE:64:1C:B8:F0:B9:4C:97:58:2D:F7:ED:DF:D9:9E:25:74
            X509v3 Authority Key Identifier:
                keyid:12:D9:AD:5D:B8:99:E7:E7:E3:CF:EC:F9:7B:C4:2D:38:B7:26:27:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/abf6ae-f6ad-4341-bde0-e5452f1cf6a2/1/EtmtXbiZ5-fjz-z5e8QtOLcmJ5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d6:29:10:d4:ae:36:f0:37:88:1a:53:c2:fd:41:ab:70:9f:
         d5:86:24:d8:c2:56:54:c0:18:7b:e4:72:12:ae:f3:1d:9b:d0:
         19:61:25:00:5a:89:e3:21:6a:fc:08:23:10:c5:24:57:48:91:
         1f:01:38:39:90:d1:49:b8:eb:41:00:04:6f:40:68:f4:59:11:
         4b:bc:ea:fe:d0:17:fb:8b:00:ef:5b:d8:e4:02:47:c7:aa:9a:
         40:b7:7a:d6:73:5f:55:ed:fe:78:98:bb:d6:8f:60:42:86:ba:
         7a:3b:e7:24:90:3d:2b:54:58:6e:b9:26:d9:cd:2a:97:fa:a2:
         d4:a8:3f:61:74:f7:06:fb:23:ab:7d:9e:92:48:aa:bc:ae:b5:
         e5:70:37:98:8c:1f:2c:3a:95:0d:b2:58:3e:da:1f:78:17:c6:
         18:18:9d:8d:94:88:f2:93:44:37:92:f5:f8:fc:d5:a4:62:74:
         db:1c:5f:4d:55:1c:4d:11:a4:b9:aa:3c:4f:a2:d3:36:f7:11:
         86:52:f1:02:25:79:22:13:21:1a:b3:9d:b5:4b:3c:c8:3c:5e:
         56:41:3e:37:16:ee:05:56:a5:fa:74:2c:f6:60:7b:42:2d:1f:
         2c:b3:b4:20:51:21:ed:84:b3:40:32:a0:4a:c2:1d:cb:ec:bf:
         17:7b:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:35 2026 by rpki-client