Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File:                     3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier:          PonosCbLYy9eJFqbung9Kv+OznpsZlROPLbZuAbdbgE=
Subject key identifier:   F8:65:A1:B7:0B:3A:E7:07:60:2F:35:69:14:9C:8E:6A:61:60:2D:4B
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer:       /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial:       019EBAA2D929E8BD050D1103BE19122649A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number:          1956
Signing time:             Fri 12 Jun 2026 07:01:34 +0000
Manifest this update:     Fri 12 Jun 2026 07:01:34 +0000
Manifest next update:     Sat 13 Jun 2026 07:01:34 +0000
Files and hashes:         1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: 2ud4BZE7L2HTz7RwHTUT3eEEVhnQW9+22OIjLwf0mCU=)
                          2: nGLpAbzPIa0fYIAvBp2NmfsMLMY.roa (hash: kwgj2EY4C+VKLivxvxueFyLeX+WYaalA75ogbGHFJJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:d9:29:e8:bd:05:0d:11:03:be:19:12:26:49:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
        Validity
            Not Before: Jun 12 07:01:34 2026 GMT
            Not After : Jun 13 07:01:34 2026 GMT
        Subject: CN=f865a1b70b3ae707602f3569149c8e6a61602d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:53:9d:22:85:f1:bf:95:b4:be:f4:96:ea:
                    3e:a8:a1:19:f4:80:96:9f:bf:7b:88:25:70:78:f0:
                    02:a3:1c:89:ce:48:a5:e2:8c:ca:0e:41:30:29:bb:
                    7b:ad:19:ae:42:ab:21:1e:3c:ba:59:06:2f:0f:54:
                    4f:0d:49:73:7b:73:77:89:50:71:d0:1b:d8:64:d6:
                    19:c4:ae:9c:2c:70:42:50:ed:a7:e8:74:08:9a:40:
                    00:47:3a:20:11:2c:3c:bc:cf:d3:91:9b:9f:b7:05:
                    74:22:7c:34:f0:4e:69:32:04:70:21:88:39:02:5a:
                    e2:d9:79:78:09:b1:60:28:3d:ea:92:d3:2b:28:7d:
                    31:9a:80:44:e8:d2:97:7a:e5:bf:58:ad:24:8c:e1:
                    72:32:56:20:fe:e4:ff:e7:40:54:67:4e:3d:76:78:
                    fa:f1:6a:7e:8d:93:e3:87:fb:5b:fe:9b:27:4c:45:
                    0f:56:77:f7:1a:4a:6e:93:63:f8:49:31:30:92:5c:
                    3e:67:28:c5:b6:7d:11:3f:0e:d8:16:61:9c:45:d1:
                    e0:cf:b7:ba:3c:d4:9f:ab:b5:a8:15:be:74:03:d1:
                    0e:3d:b2:63:7a:28:75:0a:96:6a:07:b4:d8:13:8f:
                    fc:f5:a4:4b:11:2b:32:f9:08:4d:1f:dd:37:d1:c9:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:65:A1:B7:0B:3A:E7:07:60:2F:35:69:14:9C:8E:6A:61:60:2D:4B
            X509v3 Authority Key Identifier:
                keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ff:1e:34:9b:85:1a:83:45:2e:46:55:78:c9:03:d2:7a:65:
         fb:d2:5e:75:15:29:f1:35:ec:95:32:21:a5:2b:2e:9e:7b:2e:
         93:26:fd:17:18:fe:c8:02:5d:ca:74:5a:14:f3:c6:7b:02:b4:
         97:2f:50:cd:fa:b6:29:d0:19:47:49:06:6f:fa:10:ca:ae:90:
         2b:ab:fa:73:c1:46:aa:97:0c:6d:8c:14:2d:36:d4:ac:2d:31:
         be:11:47:4c:26:14:28:50:ba:5c:b3:f4:60:47:08:35:c7:72:
         fd:c1:3a:9c:4d:e1:dc:0e:a5:f3:b6:c3:9c:64:2d:fc:bb:28:
         59:14:18:b2:f6:49:24:4e:77:1f:e9:cd:7a:35:5e:cc:02:b7:
         8f:74:07:80:75:22:47:b5:33:42:6b:6a:f1:43:d0:b3:d2:fe:
         c4:27:9a:27:99:26:a4:fd:71:eb:d0:9f:c8:b0:cc:1c:be:62:
         07:97:a9:d7:e1:eb:bf:7e:37:ba:37:4e:83:6b:25:12:9f:5c:
         11:89:fe:54:33:bb:0a:f5:c3:3e:ba:c5:e4:a3:b6:58:d3:30:
         8c:67:c2:b4:56:f4:8c:22:a1:da:9c:1a:23:f1:55:59:aa:bc:
         50:9a:a3:83:24:99:10:69:fe:f0:02:29:60:c9:e9:6d:24:d0:
         e1:72:5b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:51:32 2026 by rpki-client