Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          lGwU4D30QjUXW0ASbSya9Hn3G5e5dEXBfawgmIeTkv0=
Subject key identifier:   30:2F:01:F8:7A:28:E1:3F:B6:CC:5E:13:D6:39:3C:DF:90:9A:38:C6
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       019F1830D2C5A9C494CC1435E1C422BA2720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          12F2
Signing time:             Tue 30 Jun 2026 11:01:20 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:20 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:20 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: 6MjJVmNuSuEQPke4ngTgPUdXh1+7XI2tq5U4+AUyoMc=)
                          2: ROD76SwfYB6C6gAmh6ocy7RmvzY.roa (hash: 8kz9BVZL6aAIte+oXvcJlqrJDsa6yWdXpOPNdQQYCKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:d2:c5:a9:c4:94:cc:14:35:e1:c4:22:ba:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: Jun 30 11:01:20 2026 GMT
            Not After : Jul  1 11:01:20 2026 GMT
        Subject: CN=302f01f87a28e13fb6cc5e13d6393cdf909a38c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:cb:ef:b4:ef:03:b7:ef:c1:32:9b:eb:60:
                    46:b8:7c:dc:24:b6:7e:89:a6:f3:cc:50:9a:5f:de:
                    a0:dd:7e:de:e5:93:b6:05:18:79:c5:ab:18:4a:9b:
                    b0:72:1e:35:c2:bb:9f:c5:d7:94:e6:5c:83:c3:e4:
                    6b:15:f5:bb:e5:6b:ee:d6:fa:42:e2:d1:33:a1:0a:
                    78:c6:7b:7c:01:9a:8a:0f:0a:37:70:b1:c5:09:07:
                    ac:79:4c:9f:bb:e8:63:6b:5f:67:96:19:92:2e:69:
                    94:bb:74:28:8b:1b:8c:27:cc:1e:fe:ac:5b:3f:eb:
                    e4:f0:f8:9f:9c:06:f6:21:2d:7b:c0:54:09:46:f0:
                    59:e1:13:42:61:1c:cd:5c:c7:11:2e:38:15:51:a4:
                    57:5d:f0:d9:44:f3:57:89:bb:f0:50:10:87:fa:27:
                    1c:14:5e:c8:65:9e:ff:ec:83:93:d8:8b:4f:2d:bf:
                    58:a8:48:b9:ce:22:2b:49:4f:bc:fc:a2:37:37:41:
                    62:b2:61:d6:54:56:7c:c3:c5:4a:0e:51:51:01:ef:
                    d7:09:75:ae:78:ef:3f:6b:19:6b:67:15:9d:86:ee:
                    14:26:71:f6:6f:8a:30:93:3b:3d:f6:52:f3:f5:ec:
                    f1:29:d8:43:3b:55:fe:eb:48:79:49:9c:40:0e:91:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2F:01:F8:7A:28:E1:3F:B6:CC:5E:13:D6:39:3C:DF:90:9A:38:C6
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:00:f0:16:d5:70:cf:f2:c8:45:f6:a4:51:b3:4e:e6:fa:ae:
         80:d1:e7:0e:d4:67:7f:0e:16:d7:77:d3:d1:36:58:a9:d7:c8:
         e2:7d:a9:73:f4:3e:ea:22:f0:c3:b5:b9:3f:64:d6:7b:5e:26:
         9c:fa:4f:90:c1:97:36:93:5f:f5:55:2f:6c:73:82:c1:b2:ac:
         39:4a:28:14:57:11:4e:70:81:95:d5:22:c1:ae:eb:70:9a:ab:
         d3:ee:d8:89:ad:47:a1:1d:0d:38:3b:cb:ab:0f:04:38:a3:5c:
         f3:b8:fd:fe:a7:0e:d5:e9:f6:2b:33:f4:35:d8:eb:5e:0a:df:
         cb:9d:5b:75:4b:9c:db:ec:63:2a:75:6e:77:64:f0:5e:0e:26:
         1e:5f:65:3f:3d:3d:f5:07:15:b3:db:7b:1a:49:85:6b:d1:32:
         4e:03:93:4d:53:17:f0:f0:19:6f:17:1a:f2:5c:73:ff:eb:c0:
         d6:5b:48:e8:e7:68:85:5b:ee:10:29:4d:c6:1a:49:77:3c:ec:
         3d:62:ef:a6:0f:05:ef:db:50:cc:d8:a4:58:dd:6a:bd:47:59:
         1f:10:00:37:55:ca:29:da:26:7f:03:91:39:b0:22:66:d7:cf:
         d8:44:91:53:c2:a3:fd:31:44:8d:e7:6a:2c:3c:bb:8b:7c:4e:
         34:b9:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:40 2026 by rpki-client