Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
File:                     mryiPS4rrR-1eI3bX1pvx6tiyiA.mft (raw, json)
Hash identifier:          PIt/SItwIdMfPuKIUnGNqAmwfSwFCQzDynpea2BCRxc=
Subject key identifier:   48:C7:E2:10:83:97:E8:1D:9E:02:FA:47:52:66:60:D5:73:69:1D:06
Authority key identifier: 9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20
Certificate issuer:       /CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
Certificate serial:       019EE21EAB3235C29D40E1439D6CEE8A34EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
Manifest number:          033C
Signing time:             Fri 19 Jun 2026 23:02:01 +0000
Manifest this update:     Fri 19 Jun 2026 23:02:01 +0000
Manifest next update:     Sat 20 Jun 2026 23:02:01 +0000
Files and hashes:         1: cAKVqYBd9IcAL6r2ZvxM_Qj1ndI.roa (hash: XqFaKsdiSRNsnwScS0QPlL53huZcp/xfhEBOIjWXbkk=)
                          2: mryiPS4rrR-1eI3bX1pvx6tiyiA.crl (hash: PpTiEjccohp/F0K2JEBzXbgMD1/Oe2l3thOoXcNX5/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 19:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:1e:ab:32:35:c2:9d:40:e1:43:9d:6c:ee:8a:34:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9abca23d2e2bad1fb5788ddb5f5a6fc7ab62ca20
        Validity
            Not Before: Jun 19 23:02:01 2026 GMT
            Not After : Jun 20 23:02:01 2026 GMT
        Subject: CN=48c7e2108397e81d9e02fa47526660d573691d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:30:56:1c:58:83:98:19:00:18:63:9b:7a:
                    bd:a7:75:86:41:b6:4f:df:2c:3d:9e:46:19:3a:bc:
                    fe:6b:34:ea:58:6d:e7:d2:7f:b3:c2:f7:bf:59:69:
                    08:6b:43:23:59:73:75:6f:d3:ce:dc:69:78:48:07:
                    39:b3:a6:2b:37:16:8d:f6:7f:44:66:23:e1:bb:da:
                    63:81:32:7f:00:5c:6b:b7:e7:5f:ee:e5:c0:72:b6:
                    b3:12:bf:95:ee:68:bc:b7:c1:d4:96:71:55:df:fb:
                    ef:64:37:70:7d:86:34:c7:50:28:23:e9:74:80:4a:
                    c5:4c:ca:76:de:96:d3:b5:5a:73:25:16:d5:9d:c1:
                    ab:21:2b:82:0c:30:7a:22:ce:78:9a:b3:ed:e6:69:
                    c6:e6:39:86:67:07:14:78:00:8f:c0:a8:b2:d8:e0:
                    6c:d2:de:00:58:1d:ae:68:0c:06:b3:b8:56:28:ad:
                    49:cc:ff:50:37:db:65:4f:8a:56:2e:7a:08:b4:8c:
                    8f:05:5b:0b:a6:0c:38:19:0d:da:8e:65:4e:4d:dd:
                    43:17:2b:fa:9d:30:9e:9e:ac:fd:d8:38:e4:da:70:
                    e3:47:bc:16:42:83:34:38:23:c5:76:63:b0:18:54:
                    d5:19:fe:27:9a:83:9b:28:27:50:2d:c4:f2:ac:06:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C7:E2:10:83:97:E8:1D:9E:02:FA:47:52:66:60:D5:73:69:1D:06
            X509v3 Authority Key Identifier:
                keyid:9A:BC:A2:3D:2E:2B:AD:1F:B5:78:8D:DB:5F:5A:6F:C7:AB:62:CA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mryiPS4rrR-1eI3bX1pvx6tiyiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4009f-8275-4716-9971-ba39e7c2f6a1/1/mryiPS4rrR-1eI3bX1pvx6tiyiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:59:94:7a:9f:a1:42:a5:8f:a1:1f:36:63:18:0f:af:da:0a:
         bc:07:bb:14:a1:55:23:a7:b9:89:26:99:99:d4:87:66:8b:ae:
         96:f2:d1:3a:3e:c9:11:1c:10:98:32:d0:63:b1:34:c8:4d:f0:
         85:10:ca:22:f4:2e:0f:08:e9:59:3b:a7:1b:87:31:26:d7:b9:
         cf:b7:d0:03:d4:73:de:54:7d:c8:d1:5b:79:e4:ff:df:fa:f1:
         14:f9:16:50:5f:19:6b:16:ef:7f:a7:fc:49:92:6c:06:9d:d2:
         c5:b9:fe:37:3b:a0:3d:78:00:36:7e:63:96:33:c3:4b:14:07:
         37:db:6a:9c:7c:8e:bf:d8:d0:0a:48:fd:0b:0a:0a:70:6e:76:
         2d:8d:2f:0c:c4:73:ef:20:9c:9c:87:de:f4:c6:30:5b:91:dc:
         6c:81:73:ed:85:34:c8:cf:6f:d8:15:00:6f:e4:b6:cb:15:b9:
         70:73:6d:35:00:57:3d:4c:b4:52:c2:4d:49:ec:41:eb:cb:3a:
         8f:45:ce:74:86:17:51:a7:f8:57:e8:78:2f:ac:00:07:c7:47:
         f1:cf:ac:e0:e5:9d:ab:bc:96:6a:8f:5c:69:6c:44:33:32:c6:
         7a:08:0e:b3:32:e8:95:7a:96:12:90:17:33:1a:bd:4c:75:9f:
         86:fa:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 05:25:29 2026 by rpki-client