Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
File:                     3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft (raw, json)
Hash identifier:          V2TvBbpyglbOi8ILF1eI+EH5l7NuAp7LaHZUIGdi73c=
Subject key identifier:   BC:60:8C:75:BD:41:B7:80:77:44:2C:2D:05:AF:FA:EF:8A:BA:B9:BB
Authority key identifier: DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08
Certificate issuer:       /CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
Certificate serial:       019F18D6E69D8113DD5027D576FE787D07C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
Manifest number:          10BC
Signing time:             Tue 30 Jun 2026 14:02:44 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:44 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:44 +0000
Files and hashes:         1: 3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl (hash: ZxV7uX4zAC1sAOa81WJc1y4mOsIT7ZTdxschmkCMM1g=)
                          2: FB3UW6DVZXj3o7icgkVTEzxp9Ag.roa (hash: 6pH0Xhz90BXtIh2RhS40jMejU5H68bceW0YDHg58IYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:e6:9d:81:13:dd:50:27:d5:76:fe:78:7d:07:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de52fee9542d63a68e49b2c8ed7838f8a0346b08
        Validity
            Not Before: Jun 30 14:02:44 2026 GMT
            Not After : Jul  1 14:02:44 2026 GMT
        Subject: CN=bc608c75bd41b78077442c2d05affaef8abab9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:8a:8d:f8:da:3d:9f:86:9b:c5:37:b1:16:
                    89:a1:13:31:fa:28:1b:86:98:30:60:d1:6b:78:e3:
                    fd:c3:ac:be:75:79:26:3a:e7:e9:3e:62:4b:c8:f5:
                    b5:e7:ba:bc:e7:6b:fb:49:8a:f2:a0:f2:a7:8d:fc:
                    49:a2:0e:55:62:53:9a:57:a8:35:04:fd:be:d3:e6:
                    0d:2f:69:53:2b:02:f0:3d:16:50:9e:f4:6a:47:9b:
                    ce:6c:c2:a8:90:24:22:f2:d5:d7:80:71:d9:17:cc:
                    29:24:16:34:71:a3:c1:b7:5f:24:f2:6e:db:df:ca:
                    09:0f:0c:13:d2:3f:59:1d:59:37:55:56:37:30:1d:
                    56:e5:7c:06:f7:d3:68:17:8f:0e:14:cd:54:4d:09:
                    71:68:04:bb:40:ad:fb:ab:c9:8c:7b:63:0c:29:f3:
                    6e:fb:e7:dd:00:9b:db:06:f0:f5:43:fd:7b:f1:78:
                    16:5c:75:7e:06:aa:52:fb:57:41:79:85:ee:a9:49:
                    84:00:9b:8a:43:4c:cb:ec:27:df:62:f0:10:e6:00:
                    5c:ac:9f:8c:68:d0:ff:97:d6:3c:62:e3:46:c3:d8:
                    34:8c:5a:5f:4e:b0:f0:f5:a9:54:aa:f0:bb:16:3c:
                    64:44:5d:34:14:23:cf:83:57:53:31:42:0a:5b:07:
                    c4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:60:8C:75:BD:41:B7:80:77:44:2C:2D:05:AF:FA:EF:8A:BA:B9:BB
            X509v3 Authority Key Identifier:
                keyid:DE:52:FE:E9:54:2D:63:A6:8E:49:B2:C8:ED:78:38:F8:A0:34:6B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lL-6VQtY6aOSbLI7Xg4-KA0awg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76e3b3-ab55-4ac9-bb28-a4f333654cc9/1/3lL-6VQtY6aOSbLI7Xg4-KA0awg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:c0:e7:1b:4c:44:3d:f7:bc:37:cb:7d:57:e9:38:c1:68:
         f7:e5:c4:da:4b:78:3d:f4:53:9a:42:ab:4c:05:27:9a:34:5e:
         a8:a0:fd:09:31:ef:47:58:73:91:0e:5e:a0:7b:cd:a2:a8:2f:
         92:24:aa:8f:1b:8e:44:53:da:35:13:7d:8b:4a:2c:ce:39:5a:
         75:41:0e:b1:42:4e:fe:7d:48:f3:65:90:ed:4c:46:c3:12:a6:
         bf:f5:4b:d2:fc:c3:26:fe:0d:85:cd:f1:0e:6e:ff:16:1a:0a:
         57:fb:0a:66:e5:75:e4:4a:15:53:0b:93:d2:3e:5f:43:31:7b:
         63:ae:c0:39:dc:04:54:c3:c4:20:c3:fd:51:9d:21:b1:66:e8:
         0e:b7:07:a8:ab:6d:8b:19:d7:3f:d8:63:4d:6a:f0:81:6e:54:
         bc:c2:22:86:4b:22:be:40:f4:0f:4d:c3:1c:8e:13:60:a5:04:
         3a:13:a2:e5:ce:d2:5d:ca:ad:6f:30:96:1d:d3:73:30:4f:cc:
         3e:cc:eb:b6:2a:71:46:52:d1:26:5c:99:30:01:d1:28:73:9e:
         43:db:24:52:52:fd:2e:82:8c:1f:38:26:c9:9b:84:12:e9:71:
         2b:32:7c:25:21:b4:48:52:f2:a7:73:fa:62:8a:98:5b:0c:8d:
         7f:e3:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:44 2026 by rpki-client