Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
File:                     fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json)
Hash identifier:          w2recbNWsilwZSPXTOZfKjX2t6fA/xHeaxQusVrfJwQ=
Subject key identifier:   91:BD:E8:05:81:F6:43:61:FA:12:18:3D:81:EE:1E:0E:EC:3F:05:BD
Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
Certificate issuer:       /CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Certificate serial:       019F189E07C11807B0898EFEE93FE6E5F4C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
Manifest number:          026F
Signing time:             Tue 30 Jun 2026 13:00:37 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:37 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:37 +0000
Files and hashes:         1: 1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa (hash: uRHVp/iNbMxJaaaPObGWSNEIFbTXLqpiK+JCvtnSoQ4=)
                          2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: pL8zWp0Ifa7Tb/7BxnO76dpBLH5fsw3qyGFJrRV9aaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:07:c1:18:07:b0:89:8e:fe:e9:3f:e6:e5:f4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c
        Validity
            Not Before: Jun 30 13:00:37 2026 GMT
            Not After : Jul  1 13:00:37 2026 GMT
        Subject: CN=91bde80581f64361fa12183d81ee1e0eec3f05bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:1b:4a:d7:13:2d:78:41:05:33:10:92:ff:
                    15:d5:56:2b:5f:9f:31:05:7f:b4:ce:06:f7:1a:7a:
                    c1:e6:81:f9:da:82:da:99:3f:88:9e:ad:60:12:cf:
                    f7:45:eb:46:ca:b7:40:ea:ce:0f:1c:48:83:8b:41:
                    63:d5:42:41:d2:21:2c:81:31:85:da:ab:1a:f2:7d:
                    ea:e5:5b:75:2a:8b:b6:7b:9b:44:6b:ef:9b:0a:1f:
                    47:b2:67:88:53:ac:6c:4a:38:05:2c:fd:c0:79:98:
                    ea:b6:3f:6e:7e:15:2b:ad:01:19:d2:6f:1e:ea:ce:
                    14:69:01:db:a2:67:cc:14:60:cd:72:5d:06:65:61:
                    06:ce:1a:43:a6:ce:5e:05:02:5b:34:f6:e1:63:3c:
                    87:c8:af:9a:31:6c:53:02:33:ca:40:ae:60:c5:4c:
                    bc:33:2d:e1:d4:3a:cf:3f:c3:c7:2f:c8:27:fd:36:
                    1f:9d:1d:9e:9a:45:f9:53:5e:87:67:3e:9e:6a:ce:
                    f3:a9:00:f0:e7:5c:ec:fc:55:0b:af:18:f1:82:e7:
                    db:f1:df:9e:e8:78:30:ff:8b:fb:78:2e:c0:20:6e:
                    87:12:46:d4:1a:46:c1:26:a5:ef:17:8d:ee:0b:cc:
                    38:50:03:a4:c6:3b:23:06:47:d0:b1:f0:c3:25:43:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BD:E8:05:81:F6:43:61:FA:12:18:3D:81:EE:1E:0E:EC:3F:05:BD
            X509v3 Authority Key Identifier:
                keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:66:0a:22:0e:7a:3e:25:e7:34:9c:bc:fb:fb:2e:7b:43:60:
         12:ce:0c:78:fd:6f:26:3e:11:04:1f:0d:3f:ef:a6:66:dc:93:
         26:4b:22:de:d0:c9:27:18:95:55:c0:44:d9:a6:99:bd:24:e1:
         c5:55:08:3b:75:64:79:a9:13:58:f7:55:24:5f:f3:91:97:69:
         31:23:70:43:e8:80:fa:77:78:e0:71:48:32:29:6d:e5:58:58:
         1b:16:5b:23:68:f8:9b:be:48:3c:4b:dd:4b:ba:c0:9b:09:8e:
         6f:d4:96:db:d9:97:40:c7:77:c4:2a:0a:c5:19:e8:79:f8:dd:
         1a:05:23:f4:dc:50:cb:19:3f:64:00:b8:f9:2d:a7:5f:f8:c8:
         b5:a4:2c:f4:9f:fe:20:52:ed:6c:46:66:6c:01:8f:6d:00:70:
         bc:45:76:ef:8d:f7:27:4f:b7:d5:06:d8:d6:aa:26:45:68:63:
         27:df:73:7c:51:e3:ea:fb:66:49:40:00:5e:43:72:54:79:e4:
         40:84:f6:f8:0c:29:31:a8:ca:86:aa:39:22:fd:35:85:47:1e:
         b5:19:74:47:de:62:30:3e:02:cf:51:49:44:b2:dd:35:d4:61:
         35:af:ab:b2:6d:6e:56:84:ba:a8:4a:90:72:3b:12:09:bd:3b:
         73:ec:52:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:24 2026 by rpki-client