Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
File:                     RivLG1KNqZRL2VRLx7OIzuGgE5A.mft (raw, json)
Hash identifier:          sNKOslQgGkuOtgoBsAe+Rvyb8/BFEQDKiPSfnDN48aE=
Subject key identifier:   5E:6B:B1:13:1A:A8:D6:04:E1:CA:13:5E:B3:DB:43:63:64:3A:B9:7A
Authority key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90
Certificate issuer:       /CN=462bcb1b528da9944bd9544bc7b388cee1a01390
Certificate serial:       019EB8B458A2380E7384B34DB79D5C2819C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
Manifest number:          0216
Signing time:             Thu 11 Jun 2026 22:01:27 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:27 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:27 +0000
Files and hashes:         1: RivLG1KNqZRL2VRLx7OIzuGgE5A.crl (hash: JksPDkY5iJ4OAKduFONwodV3O+kw/KitvwLZ8dVDjWg=)
                          2: UgzCF8ypTqD3-oEvIopeK7eKv4Y.roa (hash: DlTUI/1IFNUCoEUiGr69G6Nmq4+NJdFbzY4oNjUHVuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:58:a2:38:0e:73:84:b3:4d:b7:9d:5c:28:19:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462bcb1b528da9944bd9544bc7b388cee1a01390
        Validity
            Not Before: Jun 11 22:01:27 2026 GMT
            Not After : Jun 12 22:01:27 2026 GMT
        Subject: CN=5e6bb1131aa8d604e1ca135eb3db4363643ab97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:14:11:66:8c:0a:c7:ca:93:b9:75:ec:16:50:
                    80:b3:83:c1:d5:88:83:28:85:e7:2c:3d:b1:21:7d:
                    a0:59:2c:8e:f6:5b:8a:be:79:d3:87:85:3a:c5:67:
                    05:70:fb:d1:27:af:10:64:d2:09:6c:13:98:03:17:
                    36:31:3b:b4:61:86:a3:39:0d:37:38:1d:95:eb:a3:
                    ff:e2:3d:88:97:eb:78:48:46:b7:7d:70:30:a9:4b:
                    ed:d9:cd:cd:83:89:ac:f3:26:11:fc:63:9d:8f:9f:
                    4b:b1:29:48:2f:ca:05:96:5d:4d:61:54:86:0d:90:
                    eb:12:69:83:7e:4a:c4:b7:9f:e9:89:39:4e:da:78:
                    a0:82:1b:a2:7e:eb:dd:de:44:15:26:b4:32:9c:b9:
                    18:03:ab:aa:b9:94:97:60:5e:fc:01:b7:43:2a:bf:
                    a1:f1:58:e3:40:ba:43:e9:1a:e8:fe:aa:b1:c3:d4:
                    c1:f9:f8:21:85:aa:4d:39:89:3d:10:e1:1e:91:68:
                    28:9e:30:7b:d4:10:1a:bb:7e:2b:53:59:8f:3d:93:
                    72:76:8f:ff:fd:aa:04:f5:7c:5c:1d:51:62:b6:58:
                    73:f8:73:a4:89:65:df:d5:08:d2:ca:84:90:84:f5:
                    ad:b2:73:5b:ba:cc:bb:39:c0:7c:5e:8a:6d:ad:bc:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6B:B1:13:1A:A8:D6:04:E1:CA:13:5E:B3:DB:43:63:64:3A:B9:7A
            X509v3 Authority Key Identifier:
                keyid:46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:27:bc:17:fd:85:21:f2:9b:fa:50:0d:65:6f:8e:90:bb:
         cf:60:51:bf:c2:4e:77:8e:01:21:b1:c8:06:f1:28:4d:97:c7:
         7a:76:5a:19:20:eb:a7:02:ba:9b:58:a7:fd:6d:ac:e1:a3:b1:
         c4:35:c6:94:43:8d:1d:f5:cb:bd:fc:95:7f:97:c3:ea:a5:44:
         ce:54:a9:23:a2:e1:a3:b0:69:73:b2:97:85:5a:f1:33:e5:40:
         c5:e5:75:0d:36:a7:f5:d5:d3:ef:88:7a:5c:43:10:f2:e9:85:
         40:4f:46:fb:b6:f4:fe:c1:95:18:d5:d6:a5:7a:32:b3:b8:bb:
         9c:0a:0e:a0:1a:53:72:68:b7:62:cf:55:2b:91:44:7b:aa:cf:
         47:b3:ec:a5:51:5e:1d:0a:7f:96:75:56:ea:94:bf:a6:9a:31:
         de:1f:26:b6:9c:34:79:77:ce:80:30:7b:46:54:f6:c8:69:15:
         f3:fb:cd:99:90:c3:58:15:d7:6a:36:32:7c:68:43:a0:11:bd:
         3e:c1:85:be:36:50:b5:58:7e:21:89:3c:81:82:1f:4c:fc:41:
         bd:2b:59:2d:38:80:f2:1a:8c:97:e9:56:0b:e2:56:b1:e7:cd:
         de:18:4f:6a:f8:7b:9b:d7:7c:2d:e0:a7:2e:0d:64:9e:2c:6a:
         d4:e2:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:13:44 2026 by rpki-client