Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File:                     81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier:          FQaNe8ESiTqfKzTT5zfWPxmZGfYvovX0297chntuNyY=
Subject key identifier:   63:BB:94:C5:A4:C2:B7:EE:96:EA:28:21:D1:E2:B4:77:56:F1:2A:70
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer:       /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial:       019EEDB4F5076D8AA91D92ED4951B7F04B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number:          0ECA
Signing time:             Mon 22 Jun 2026 05:01:59 +0000
Manifest this update:     Mon 22 Jun 2026 05:01:59 +0000
Manifest next update:     Tue 23 Jun 2026 05:01:59 +0000
Files and hashes:         1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=)
                          2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: bSNmQiBEoMy3ALQQ1qe7ao2NmyvedzvHrAQ5Z0/KBEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Jun 2026 05:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ed:b4:f5:07:6d:8a:a9:1d:92:ed:49:51:b7:f0:4b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
        Validity
            Not Before: Jun 22 05:01:59 2026 GMT
            Not After : Jun 23 05:01:59 2026 GMT
        Subject: CN=63bb94c5a4c2b7ee96ea2821d1e2b47756f12a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:c3:c8:55:df:e5:74:6e:bb:61:82:9b:c9:
                    1f:93:09:cf:82:6f:02:a8:57:3c:ba:5a:63:3d:7b:
                    66:b1:a5:43:cb:99:84:65:45:84:2d:0e:86:3f:07:
                    ca:d1:ec:4b:09:60:e1:36:68:50:bc:ff:c7:91:68:
                    0b:76:96:5f:d3:e7:6b:04:8f:12:de:64:12:52:15:
                    d8:20:db:c0:db:e1:11:f5:d3:e5:28:41:63:6d:0b:
                    67:d7:3b:bb:8a:72:96:1c:33:3b:42:90:c0:73:84:
                    f3:03:e3:57:27:79:e1:21:3c:4c:f9:17:73:7c:00:
                    50:2a:6d:22:89:61:01:f8:47:a6:37:2a:dc:9a:be:
                    b9:74:64:73:d0:70:06:ad:07:42:6b:ab:3e:bc:e6:
                    fd:3b:ad:aa:8d:7f:d8:47:18:43:70:f4:a2:3f:26:
                    95:f3:6b:64:2e:33:50:75:75:84:40:99:b4:82:8d:
                    20:aa:71:fa:b8:97:4f:70:2e:0f:b6:77:30:c8:57:
                    0f:0d:d5:be:c8:8a:2b:82:17:4b:68:ca:f9:3a:c2:
                    c8:cd:af:fe:90:53:f3:0a:36:be:78:3a:16:92:41:
                    da:ef:15:4d:19:a6:cb:15:9c:4b:e1:b9:b0:c1:78:
                    5b:e5:01:d2:79:f2:4e:f9:aa:d2:c1:31:b5:16:94:
                    d0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BB:94:C5:A4:C2:B7:EE:96:EA:28:21:D1:E2:B4:77:56:F1:2A:70
            X509v3 Authority Key Identifier:
                keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:9b:9b:b7:e2:47:48:b5:d9:36:45:1f:9b:31:92:c0:d6:9e:
         b7:05:83:47:58:22:d1:9c:3a:14:0c:28:24:ee:f1:b2:c3:2a:
         6f:fc:81:29:7a:d9:89:3c:03:42:ae:09:c0:0a:71:17:bf:86:
         aa:41:10:46:21:86:26:3b:63:ba:a0:0a:fb:b2:d6:3f:b9:4f:
         b7:d8:d9:ab:6d:48:73:92:13:0a:7e:39:ee:fc:74:eb:29:08:
         f5:83:a5:95:40:24:ec:61:df:48:09:78:31:87:fb:5f:a4:f8:
         b6:4c:a8:99:63:af:da:37:f0:d7:5c:56:f0:f8:0d:24:e5:7f:
         4a:85:c2:a7:c0:69:0e:21:f0:69:14:0b:37:a5:fd:d1:19:96:
         a5:a0:a0:c5:79:85:a0:0e:35:b0:e9:12:c6:49:a1:70:72:75:
         34:87:eb:6b:06:08:6f:4d:e5:85:98:91:ac:1c:1e:04:07:11:
         9c:56:3f:57:17:63:2c:a9:a1:61:9d:c5:94:54:b4:d4:c4:67:
         44:3c:be:9c:32:26:f1:63:b6:43:65:46:0f:86:51:b9:ee:a6:
         59:dc:7c:7f:3f:68:e2:e1:e8:36:90:6b:52:5e:c9:50:7a:55:
         d7:82:7f:f3:1f:8e:fb:21:58:f6:74:3f:e6:f4:47:5f:4e:1b:
         e6:b5:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 15:23:05 2026 by rpki-client