Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
File:                     E3W0CTjYfNMycmqqSBqnGubphxc.mft (raw, json)
Hash identifier:          5tWvLxmdFL3lLZVjfPilLTZ4+iv0ef3QfxU0ibd2hls=
Subject key identifier:   A3:8F:8B:42:BD:85:13:D4:FB:A4:6D:C8:50:12:0D:13:F1:E9:49:26
Authority key identifier: 13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17
Certificate issuer:       /CN=1375b40938d87cd332726aaa481aa71ae6e98717
Certificate serial:       019F1867A5A9DACF0791D7D5AB1183F697E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
Manifest number:          1286
Signing time:             Tue 30 Jun 2026 12:01:13 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:13 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:13 +0000
Files and hashes:         1: E3W0CTjYfNMycmqqSBqnGubphxc.crl (hash: TGtXYJOBTOdf11wzAtbrrW/JPCTE5hOXfhSbbrsZiKE=)
                          2: a_ww7qv94cntVvxMyEa8w2y4rQQ.roa (hash: gcAP6sbYaBz9r+BWocW6ovurpJc3pHNDobJ/C/x7Cag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:a5:a9:da:cf:07:91:d7:d5:ab:11:83:f6:97:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1375b40938d87cd332726aaa481aa71ae6e98717
        Validity
            Not Before: Jun 30 12:01:13 2026 GMT
            Not After : Jul  1 12:01:13 2026 GMT
        Subject: CN=a38f8b42bd8513d4fba46dc850120d13f1e94926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:92:35:1b:bf:d9:b6:c3:ea:ea:46:92:3b:27:
                    79:48:bb:f0:87:b1:ba:26:8b:eb:8c:e8:ed:b2:9c:
                    50:05:b1:86:db:63:ea:eb:04:1a:09:40:84:47:a1:
                    af:79:18:70:3d:14:9e:86:21:45:1e:1d:6e:b6:93:
                    f4:56:4f:d2:63:8b:fc:be:7f:ae:24:ee:0a:da:60:
                    13:d1:9a:98:71:70:de:83:45:5a:5b:5e:0a:c0:03:
                    82:0e:46:7a:a4:66:36:b7:0e:26:e5:06:b7:09:e2:
                    72:b2:be:25:ef:5a:35:ea:96:93:31:53:cd:3a:7c:
                    da:a6:64:0c:8e:56:a7:0c:e6:34:77:a5:b3:0f:73:
                    2e:c2:70:b4:72:15:41:75:a8:72:33:aa:3f:f3:5e:
                    d6:93:ef:10:f3:75:fe:a6:31:4c:dd:f2:61:12:08:
                    1a:d5:f7:09:4b:57:f2:d8:a2:2f:64:6b:7a:8c:0a:
                    48:4e:d1:2e:f9:4d:89:53:3a:87:f4:9e:ef:fa:3f:
                    93:70:79:10:01:0c:86:5f:17:9c:37:58:1d:8e:d0:
                    f4:e1:55:df:0f:d8:34:e6:64:a1:20:6f:42:fa:6c:
                    20:7b:3f:2b:43:e9:a5:f4:de:70:6b:cc:5c:cb:bd:
                    c8:38:fe:df:a5:32:57:c0:f9:ff:bf:2e:bb:c6:f8:
                    d4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8F:8B:42:BD:85:13:D4:FB:A4:6D:C8:50:12:0D:13:F1:E9:49:26
            X509v3 Authority Key Identifier:
                keyid:13:75:B4:09:38:D8:7C:D3:32:72:6A:AA:48:1A:A7:1A:E6:E9:87:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3W0CTjYfNMycmqqSBqnGubphxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9ae1a-8e52-48d3-a58d-a250da13d68a/1/E3W0CTjYfNMycmqqSBqnGubphxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:8a:9a:bd:9d:4f:0a:c4:20:25:61:01:6c:ab:56:95:a7:fe:
         17:53:2b:e4:ac:32:99:54:df:33:a3:50:da:56:f3:51:c9:3a:
         48:ec:a2:9b:e1:e6:76:c4:c2:44:e7:eb:5e:4c:a1:87:8c:cc:
         cf:7c:39:1e:85:49:51:49:be:eb:46:0c:aa:73:e9:32:38:64:
         64:e4:a6:63:ae:ba:12:ac:31:32:53:c7:16:64:4d:ec:a1:19:
         ed:6a:37:e9:d1:b7:7e:9f:d5:2d:9a:04:97:d5:10:77:67:b4:
         51:39:ae:00:c2:c1:34:f0:52:08:a2:e9:64:30:25:8f:e8:39:
         ed:12:28:48:73:a5:12:0a:8b:58:b9:86:e0:3b:6f:5b:03:18:
         42:a5:e2:84:c1:34:55:bc:f5:2e:99:01:f6:6b:64:0a:27:eb:
         74:0e:e9:c1:50:37:54:f4:ad:32:af:1f:f1:08:79:3a:71:1e:
         a6:58:7d:28:4f:83:68:4d:4e:2c:f6:3f:41:b8:86:03:3b:f0:
         20:ce:ea:4c:1e:b5:1f:98:f1:fd:18:84:08:bb:d0:df:cc:c7:
         5f:86:03:bb:2e:18:94:94:28:8a:cd:77:b5:52:aa:01:af:02:
         3f:b7:10:83:18:37:d8:33:86:4d:b1:77:4b:e8:17:25:27:7a:
         1a:ff:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:44 2026 by rpki-client