Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File:                     8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier:          85wX8zGVLilbzN2djNjqcPyG9gITc1pghOmti8HUGYM=
Subject key identifier:   51:79:39:76:DD:FC:B9:1E:B6:8E:51:41:CB:B4:BA:F3:D6:31:AC:83
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       019F18D65A8CAF190080F95A26D9B10E489B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number:          0DD4
Signing time:             Tue 30 Jun 2026 14:02:08 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:08 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:08 +0000
Files and hashes:         1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: AhX+ce0Fhqk7ucHX1cy7rg6IOkmSKE8r1+/5DJhai/o=)
                          2: z6n92NIP1tvVgc0euBLMnBtSoZk.roa (hash: Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:5a:8c:af:19:00:80:f9:5a:26:d9:b1:0e:48:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: Jun 30 14:02:08 2026 GMT
            Not After : Jul  1 14:02:08 2026 GMT
        Subject: CN=51793976ddfcb91eb68e5141cbb4baf3d631ac83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:e1:1a:f1:86:37:f8:d0:54:86:48:d8:c7:
                    c9:92:3f:d4:a6:2f:8c:b7:21:73:8b:33:64:8c:39:
                    02:dc:54:27:1a:68:fb:29:34:1f:08:6f:fe:13:5b:
                    de:6b:c5:3f:07:a3:95:8e:95:88:ca:70:0a:d5:20:
                    f5:e3:09:af:c2:7a:3e:27:33:07:81:a9:15:b5:4f:
                    93:74:b5:69:4a:ac:68:6c:3e:0b:4a:ea:ca:d0:e7:
                    8e:98:59:14:8b:f6:ad:64:e6:df:6e:cd:e1:3e:b1:
                    12:0f:87:20:c7:7b:0c:31:7e:d5:2c:3c:13:72:29:
                    22:2e:a5:b3:64:e0:b2:97:c4:24:7e:41:b2:64:8e:
                    22:88:f3:38:69:3f:8e:ca:3f:da:1c:03:8f:91:cf:
                    08:e6:f5:30:84:75:cb:71:f5:12:c6:41:58:10:b1:
                    7f:17:f6:85:ac:c6:91:6e:cd:fe:d2:08:0c:e2:d6:
                    40:86:db:58:e6:ae:2a:b0:8a:eb:4f:71:d2:81:ac:
                    48:b9:eb:15:38:71:7b:92:57:de:4b:f0:3a:1f:a5:
                    77:6e:79:ee:12:53:d5:c3:8b:8f:6f:60:d6:80:00:
                    8a:c1:08:95:4b:a1:74:94:b9:42:fa:3b:fc:ac:a9:
                    b7:ff:36:0e:79:ce:87:d6:08:77:34:0f:ff:31:43:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:79:39:76:DD:FC:B9:1E:B6:8E:51:41:CB:B4:BA:F3:D6:31:AC:83
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0c:97:1e:b3:2b:1e:aa:35:15:a7:12:6b:98:ad:b4:c5:b3:
         7d:6b:7a:ef:e1:2f:bf:ba:93:a7:fe:a4:39:f6:23:40:ab:9e:
         01:34:36:01:95:bc:e2:44:01:26:de:9a:16:fa:22:58:82:0b:
         d0:b0:09:cb:4f:0d:00:77:86:01:46:1a:b7:e4:d9:44:4e:44:
         54:68:96:ff:ff:c1:01:40:f2:37:3d:9c:f0:79:a8:1f:6a:c2:
         f3:09:b6:9a:a5:3b:57:09:f5:47:2c:ef:d8:27:cc:93:c2:5d:
         0e:96:73:e5:ac:80:2e:5a:1b:d9:f6:29:71:11:dc:fe:2c:8b:
         74:1a:c5:99:2b:bd:d1:47:f1:84:d0:2d:e5:e7:cc:a6:1d:72:
         b7:57:f5:b6:02:a4:d2:71:39:fb:d2:05:5d:c7:b5:37:cb:a0:
         8b:be:b3:23:cd:c3:70:b4:6f:4b:d8:3b:b2:d8:bd:d5:b4:1f:
         21:0d:c5:ae:00:1a:4d:ec:ea:90:1a:bf:df:5b:86:2c:91:95:
         bf:00:8e:5b:42:14:20:fb:a0:73:88:8f:a7:15:ab:be:3e:fe:
         64:c4:1b:8b:64:c0:64:fc:e1:d9:9d:63:23:07:2f:56:27:67:
         29:7c:70:6e:b2:c5:98:79:c8:33:9f:70:dd:0d:c2:4e:26:1e:
         21:01:97:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:55 2026 by rpki-client