Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File:                     SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier:          fpAY+ReijO1uWeBTnXHdaLzE7Q1nvj4xizEfRDoZxys=
Subject key identifier:   B3:C7:E9:92:DE:B6:81:EA:59:64:1C:1B:27:81:64:D8:40:89:D2:DD
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer:       /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial:       019EB68E9DD99645AC09C02E7C36187A0F6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number:          0D59
Signing time:             Thu 11 Jun 2026 12:01:00 +0000
Manifest this update:     Thu 11 Jun 2026 12:01:00 +0000
Manifest next update:     Fri 12 Jun 2026 12:01:00 +0000
Files and hashes:         1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: A5b/Tv5qOci3kROw/2HfjY2Lqnpqo1ApGUpud2TTl2c=)
                          2: kypMcuIm-WpR0ZjTrQvN18lgASs.roa (hash: rpyCcsQ2xUEDWY8mMlJ3ItAHPdOq2MVR8TSSQ09U5AQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:8e:9d:d9:96:45:ac:09:c0:2e:7c:36:18:7a:0f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
        Validity
            Not Before: Jun 11 12:01:00 2026 GMT
            Not After : Jun 12 12:01:00 2026 GMT
        Subject: CN=b3c7e992deb681ea59641c1b278164d84089d2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:73:59:45:94:40:dc:bf:4d:24:62:b5:c8:
                    48:fb:20:f2:cb:d6:f4:74:49:d9:03:67:7d:6e:ca:
                    1b:e3:f4:24:51:09:8d:5c:35:0d:10:69:16:c4:1a:
                    2f:f3:a6:8b:10:fa:4e:8f:f7:c8:82:a4:d4:8c:b0:
                    35:d6:2f:59:2e:a0:26:e1:2f:f8:d4:73:5b:01:1e:
                    8a:b6:0c:45:c5:07:10:d8:f2:23:25:ea:e1:ba:24:
                    19:9d:c5:78:d6:ec:87:2f:9f:58:4a:71:57:34:89:
                    a0:3c:00:c5:89:5c:db:aa:5e:06:60:78:3d:d0:0f:
                    f6:3f:6f:61:28:33:5b:89:22:c6:d9:ec:3e:f3:9f:
                    e8:ed:dd:bb:e3:e9:ac:fc:41:ad:1d:ca:db:be:2c:
                    98:f8:51:13:a9:86:8f:70:c2:d9:b7:1e:82:d9:43:
                    f4:a3:37:b9:46:06:f9:46:ff:7f:24:00:13:57:a7:
                    61:48:29:bb:96:6d:eb:d4:05:eb:41:d9:cd:c3:5d:
                    f6:5d:8e:91:67:54:ee:be:d7:f3:8e:8c:c0:1d:be:
                    00:a3:09:45:fe:61:bf:b4:94:84:e3:fc:57:96:99:
                    a9:a4:15:91:7b:11:25:e0:65:40:21:57:5d:1f:a6:
                    0b:c1:4f:97:b0:e4:4d:f3:8e:41:a1:e5:9b:ff:17:
                    ce:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C7:E9:92:DE:B6:81:EA:59:64:1C:1B:27:81:64:D8:40:89:D2:DD
            X509v3 Authority Key Identifier:
                keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:c4:a1:ec:85:53:0c:5c:20:e1:01:60:b7:01:89:2c:ae:
         92:81:27:b0:63:9b:ab:fd:01:95:40:2d:15:d4:57:fc:c8:de:
         df:e0:56:7a:38:38:33:fe:bc:a4:12:15:8b:04:6f:c2:8d:01:
         b5:92:41:67:e1:bf:d6:9e:cd:22:6a:48:e9:19:9e:7f:8c:78:
         a4:31:a9:4f:e5:5b:0a:84:e3:88:59:43:77:4f:42:5b:e4:57:
         ad:c2:a1:0e:ab:fb:6e:4c:4a:3d:e0:91:10:5a:21:03:c8:ea:
         64:8a:67:3e:b5:2f:7e:ba:81:c1:8f:64:08:8f:46:46:8d:65:
         be:44:b5:54:fa:ab:f8:b4:d6:0b:98:22:bd:30:4c:a5:04:e5:
         57:0d:87:e9:70:04:9c:eb:08:09:9c:79:68:cd:c6:a0:c4:28:
         de:af:2a:f6:ec:c3:1a:5c:ed:f3:2a:67:8b:83:e5:ec:91:ab:
         ec:6a:e3:68:a0:73:86:10:6f:24:7e:9a:6c:05:96:31:16:df:
         13:ba:9a:4f:27:a3:ec:dd:e1:49:21:a2:4e:6b:63:47:7e:b8:
         a4:79:06:6d:e6:8b:0c:b3:f1:6d:a8:2d:0e:b6:dd:c7:c8:ad:
         e8:ff:57:f7:b1:12:44:fd:67:44:06:35:46:15:66:bb:76:67:
         a0:63:c5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:19:54 2026 by rpki-client