Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File:                     T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier:          bDg6SlCQMWtCpxyO69jsqMg6+s/Q3HKHONIcclM0XeA=
Subject key identifier:   17:48:DE:26:33:7F:1D:75:9C:E5:4C:73:1D:14:95:57:D9:41:77:D6
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer:       /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial:       019F118A326E6FAB7287EEE506540D644831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number:          0588
Signing time:             Mon 29 Jun 2026 04:01:37 +0000
Manifest this update:     Mon 29 Jun 2026 04:01:37 +0000
Manifest next update:     Tue 30 Jun 2026 04:01:37 +0000
Files and hashes:         1: 3Ooa3U_oo2Glzs0D6LLZVAnU_Dw.asa (hash: 8bwGtRktUinfVaTRA31mmdfaKiD/XYTphLDGJbdxcc4=)
                          2: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: uuQgBCUIL6LfebvIPl5nB2KzhPeXr/r894e8ohLSxB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:8a:32:6e:6f:ab:72:87:ee:e5:06:54:0d:64:48:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
        Validity
            Not Before: Jun 29 04:01:37 2026 GMT
            Not After : Jun 30 04:01:37 2026 GMT
        Subject: CN=1748de26337f1d759ce54c731d149557d94177d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:27:03:7c:da:67:c9:3a:79:cc:c6:74:a5:66:
                    de:22:0f:d6:db:b4:57:6b:50:21:df:d0:bd:90:f9:
                    4d:0e:c7:d6:04:f6:f2:55:c0:22:9f:80:33:67:93:
                    e7:0e:c8:30:0a:d1:e7:36:8c:12:93:c1:10:61:bb:
                    8f:13:b7:54:1f:c0:cd:aa:7f:28:46:12:cf:fa:19:
                    ea:0f:7e:9a:02:03:a7:73:35:8e:97:ca:b0:fa:6d:
                    31:db:92:a8:d6:b1:c1:f0:a1:c0:4a:13:46:6c:b6:
                    71:c2:c6:9b:ab:3f:04:d5:b2:a0:c6:8d:e6:16:20:
                    dd:5d:a5:b3:40:cf:e1:63:fa:94:54:3a:57:36:29:
                    31:fe:e9:7a:61:c5:1d:a1:69:0b:2f:34:d0:f8:3e:
                    1b:72:3a:83:a0:c8:77:19:33:ab:e8:b6:d4:7b:e1:
                    99:97:a2:d4:ed:9f:8a:f2:55:57:c9:57:80:b8:5a:
                    8e:6e:cc:7a:fa:d5:ca:0c:c7:7d:a5:00:b7:54:7e:
                    f9:19:86:97:80:6a:22:67:38:76:0c:fe:c4:70:75:
                    6f:d2:52:8d:88:01:59:94:fc:0e:5e:8f:94:08:ab:
                    f6:36:dd:a0:88:4c:b1:0e:63:16:f3:98:07:0f:db:
                    dc:93:fb:ea:54:c8:ff:83:b4:fe:4b:6e:ba:95:85:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:48:DE:26:33:7F:1D:75:9C:E5:4C:73:1D:14:95:57:D9:41:77:D6
            X509v3 Authority Key Identifier:
                keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:d8:8c:aa:94:bd:9f:af:eb:bc:4b:0f:96:f6:c8:b8:3c:
         48:c9:1a:a2:18:f1:d3:d6:8a:e4:79:7b:68:4c:83:14:2f:f2:
         35:2d:99:79:c3:36:d9:ad:cf:26:0b:0d:29:fd:b2:c9:c6:bb:
         05:c2:15:d1:55:83:4f:42:e7:f4:d7:05:ad:6a:4a:37:5e:52:
         02:bc:89:f6:6e:8b:f8:90:39:a3:36:1a:fd:9d:57:c5:a9:19:
         78:50:d1:08:65:ec:88:9c:f3:58:ea:1d:ac:19:bc:5c:09:8f:
         f8:fc:cf:de:64:ef:d3:5c:d2:f7:62:8d:70:cd:7c:f1:63:70:
         b8:53:60:f3:43:f9:84:02:03:b1:88:c6:5c:22:80:d4:cb:9c:
         e8:b3:9a:02:22:b5:97:97:f8:36:e0:87:15:4a:47:2c:af:41:
         1b:38:03:15:d5:93:c4:4e:fc:98:7b:3f:bf:1d:ca:ab:51:c1:
         d5:56:90:7c:3f:54:e5:6f:c2:4a:15:e3:c8:9a:f8:fa:ca:8e:
         ff:19:38:2c:a4:23:7e:2b:ef:01:38:2a:ce:90:d0:76:15:92:
         be:3a:ef:8f:dc:4c:13:17:1c:71:79:36:8a:df:2a:78:39:34:
         3c:3e:a2:00:70:ce:0d:b2:b6:ff:c8:90:17:12:e9:76:36:b8:
         b1:76:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:41 2026 by rpki-client