Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
File:                     49UVmILnemf3l_j4uZa2LE66vCA.mft (raw, json)
Hash identifier:          j4EvkeaYr9N8uazWr3FqPS/lWI7k9tEHcYvXq2o2f9A=
Subject key identifier:   83:2E:5F:A4:25:16:C2:DD:4E:86:B6:B0:A1:BF:B5:B9:EE:A1:C2:1C
Authority key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20
Certificate issuer:       /CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
Certificate serial:       019F186793276A93E69FB2EE424037034D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
Manifest number:          0E0E
Signing time:             Tue 30 Jun 2026 12:01:08 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:08 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:08 +0000
Files and hashes:         1: 49UVmILnemf3l_j4uZa2LE66vCA.crl (hash: Qo0XS9iEyGscoQTMo3c51euXCC/R6dHbYN6bGPbz24A=)
                          2: hD5yM-bTRcXqw7hsAje6CKQSULU.roa (hash: BoKM+q4JQCN0QltCSwaO5romaCSLzyBz/YnHCsh+0Uw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:93:27:6a:93:e6:9f:b2:ee:42:40:37:03:4d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20
        Validity
            Not Before: Jun 30 12:01:08 2026 GMT
            Not After : Jul  1 12:01:08 2026 GMT
        Subject: CN=832e5fa42516c2dd4e86b6b0a1bfb5b9eea1c21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:b3:4f:41:9c:24:d7:e7:ee:21:e6:a7:a7:
                    35:d1:cd:fb:a3:c7:73:6b:22:74:2b:e6:5a:24:34:
                    93:14:99:64:b6:c0:00:9b:56:d4:b1:bb:af:84:18:
                    c7:be:0d:b3:29:8b:97:26:4a:88:c4:be:c8:d4:96:
                    70:f1:f5:2a:76:3c:07:e7:89:99:c0:f6:e5:ae:d2:
                    96:8e:0a:a6:e9:54:87:bd:a8:df:be:43:be:54:7f:
                    84:75:c1:f3:af:ac:a7:3f:f7:d5:f2:97:6d:a0:07:
                    b0:6f:f2:b4:fb:3a:2c:7a:46:9e:26:ca:76:d0:54:
                    89:d4:e4:2c:60:00:c9:83:b7:54:e3:2f:1d:46:85:
                    b5:c3:e9:91:33:bf:ab:c4:24:66:70:51:5a:8a:8e:
                    7b:be:da:93:76:d9:2d:70:1b:b0:3b:6e:0a:6d:61:
                    97:79:78:a1:52:4e:5f:b6:23:07:03:35:bc:c0:0a:
                    6c:0a:c0:c6:14:5e:86:3e:88:05:e0:f4:93:e3:9b:
                    0b:69:75:b0:08:06:23:c4:f3:2e:69:3c:2e:ec:c4:
                    75:39:d6:73:f6:d8:f9:eb:09:6a:33:8d:75:b3:2e:
                    22:f6:80:45:d5:08:29:61:79:f3:05:56:c8:be:0f:
                    d4:4d:b0:2b:0e:77:d0:04:c7:83:41:d0:0b:f5:14:
                    b6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2E:5F:A4:25:16:C2:DD:4E:86:B6:B0:A1:BF:B5:B9:EE:A1:C2:1C
            X509v3 Authority Key Identifier:
                keyid:E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:75:2f:91:e1:47:8b:be:97:d1:54:d6:a9:c6:2d:01:ba:81:
         48:47:8e:d5:25:3c:46:b5:00:e5:21:c6:ef:99:66:99:3a:85:
         1b:96:69:7c:23:99:6f:21:d4:c5:ab:d7:5e:ac:f5:96:18:37:
         aa:94:93:a9:71:5a:ef:27:51:04:0c:54:0a:a1:85:1c:2b:c5:
         45:0c:92:6d:ef:8f:e5:60:36:7c:eb:18:3f:09:38:4d:09:81:
         c9:d7:31:74:05:51:fe:b9:3a:dd:e2:7a:38:c0:43:0e:9a:01:
         2f:cd:3d:98:b6:d4:9c:fd:eb:2a:0f:b4:00:ac:77:87:f1:ab:
         99:f2:3d:ee:fe:20:8b:81:e0:3e:12:8f:2f:3d:75:94:90:12:
         db:81:aa:2f:24:12:1f:00:ea:2b:ae:77:d0:92:72:00:da:a9:
         41:44:ba:19:11:47:44:ae:b3:99:c6:96:3b:b9:58:be:39:5a:
         04:2f:d0:fb:fb:84:3f:b6:b6:5d:2f:16:73:f6:a4:c2:7a:42:
         26:be:f1:62:c5:44:51:5e:4e:3f:c1:10:af:fd:9e:6d:58:43:
         99:09:26:3c:61:21:78:7a:7f:ec:52:a1:79:43:9b:ba:84:2f:
         39:e8:a4:a5:57:f1:67:99:89:cb:ff:e6:4c:04:95:21:cf:53:
         fb:df:c8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:16:52 2026 by rpki-client