Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          rkdSIhsIVdyx1I24DCSAczdT4sCvMvD5DMuBtmfhkds=
Subject key identifier:   CE:D7:14:A7:D1:03:CB:33:F8:D8:D2:D9:A7:9E:6E:81:50:01:3A:93
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       019F1A1EA84AE732C30510AB4BAA6792D57D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          1990
Signing time:             Tue 30 Jun 2026 20:00:44 +0000
Manifest this update:     Tue 30 Jun 2026 20:00:44 +0000
Manifest next update:     Wed 01 Jul 2026 20:00:44 +0000
Files and hashes:         1: 9R0cNh7tpRGDeQddrrwgSyExnk4.roa (hash: PqbwlQKDPSasGMUXgw1wOQWlaHSoiKJ6p6YuOnnchI8=)
                          2: Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa (hash: UYO/NtK9AfbvXNvm3O/IQCzfg04aFD89bh7YW2P92Vk=)
                          3: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: buXK9PhvdvrSL0hNJxBNPdYwnT9FIR9PXmoNT9Kr0Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1e:a8:4a:e7:32:c3:05:10:ab:4b:aa:67:92:d5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: Jun 30 20:00:44 2026 GMT
            Not After : Jul  1 20:00:44 2026 GMT
        Subject: CN=ced714a7d103cb33f8d8d2d9a79e6e8150013a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:2a:2a:5d:42:d5:16:a3:1a:f5:ed:4a:53:
                    98:b3:9a:ac:b0:53:05:93:3f:34:87:65:af:b4:4a:
                    0a:7c:3a:6c:51:36:b7:1e:55:49:41:a4:9a:d7:03:
                    f6:7f:80:5b:b2:a8:ab:97:01:d0:4e:85:73:1d:f8:
                    f3:8e:3a:7f:63:0c:92:6b:9f:37:36:4f:e2:25:19:
                    20:69:0c:d1:08:38:d5:eb:43:7d:cf:de:b7:96:03:
                    6a:2c:39:76:be:a7:a7:83:12:d0:e2:d2:61:ea:c7:
                    16:5d:2b:34:a8:c4:bb:47:e9:4a:41:28:a2:0f:99:
                    80:e8:cb:ef:60:5d:ec:cc:5f:a4:f1:83:c0:ca:ae:
                    b3:dc:7b:2a:df:57:4d:7e:2f:69:d1:7b:d9:59:c3:
                    c4:5a:dd:e0:10:b4:89:54:c7:3f:19:f1:6f:55:0b:
                    e6:58:27:6e:c4:3c:94:9d:de:e9:e2:af:af:62:dc:
                    81:22:71:0a:43:10:9f:c4:99:14:f0:15:46:d2:8a:
                    b7:7c:46:c4:76:eb:21:76:3d:ec:24:6d:0e:70:55:
                    3a:89:ef:a2:90:08:f8:3a:9e:21:4b:50:f9:b6:73:
                    74:62:19:99:82:bc:e5:0d:75:fd:85:76:e3:1d:44:
                    b2:8f:22:43:ab:23:97:49:d7:86:50:14:8b:2f:a0:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:14:A7:D1:03:CB:33:F8:D8:D2:D9:A7:9E:6E:81:50:01:3A:93
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:3e:41:e7:ed:4c:e1:34:f8:83:4d:b9:e2:51:83:6e:70:
         11:a8:80:76:e9:07:37:5a:0c:c6:f1:8e:c7:99:fe:00:b0:97:
         aa:87:e5:90:82:46:21:57:79:68:05:8a:87:5f:89:10:34:b4:
         62:46:91:82:d4:0e:05:df:ca:bf:8d:d7:7b:25:80:7f:43:02:
         81:3c:c7:70:32:3f:0c:ee:7b:db:89:f9:af:7a:17:ef:0c:43:
         71:43:1f:12:4a:71:92:d8:47:be:8d:4c:f8:93:0a:11:7b:76:
         18:49:8f:75:1b:20:77:5a:cf:cb:f8:56:1e:79:fc:72:f7:61:
         a9:86:23:bd:85:dd:05:f0:66:68:c4:11:8d:ed:1d:ee:b1:10:
         8e:58:31:76:a0:67:b9:92:d6:15:90:7b:29:b4:85:27:30:07:
         d8:08:0e:7d:a1:9e:11:e9:77:e9:49:bf:a8:f9:5f:11:5c:f0:
         cc:b5:1c:0c:56:6f:14:42:aa:ba:2b:e9:0d:f3:be:90:0b:41:
         9f:06:ee:2b:cb:47:26:42:42:ac:65:50:f7:77:e6:c4:e0:2f:
         3a:d9:3f:85:a6:09:82:59:1a:31:e6:ec:ba:3f:00:72:18:2b:
         9e:08:c1:20:df:94:6c:e6:77:70:38:00:70:ad:0f:94:aa:4e:
         0d:1e:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:59 2026 by rpki-client