Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
File:                     Auol41aTKHXAlqAxdVmAQVX2yZ0.mft (raw, json)
Hash identifier:          V84d+l0Zy/MUBmf4klVP/6q+bl+lv6BpwBwQt0r2TUQ=
Subject key identifier:   7F:3B:BC:A3:F1:33:63:E5:66:86:38:25:B6:0B:92:1F:45:C8:1B:67
Authority key identifier: 02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D
Certificate issuer:       /CN=02ea25e356932875c096a0317559804155f6c99d
Certificate serial:       019F17F9E69A19495C9B89118D32AD17D796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 10:01:21 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:21 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:21 +0000
Files and hashes:         1: Auol41aTKHXAlqAxdVmAQVX2yZ0.crl (hash: q/QFymYaKBZM26k/hVVr+ZuLeVYFK0aD+QsMWKYQJq4=)
                          2: DAfU0D6FgxQd5_vEH2Qpid-IR7g.roa (hash: fxIk5AsChzngQysfi5it8JFJ1Q8x41MNpVTTV3uuLiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:e6:9a:19:49:5c:9b:89:11:8d:32:ad:17:d7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ea25e356932875c096a0317559804155f6c99d
        Validity
            Not Before: Jun 30 10:01:21 2026 GMT
            Not After : Jul  1 10:01:21 2026 GMT
        Subject: CN=7f3bbca3f13363e566863825b60b921f45c81b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:1b:14:c9:a7:00:87:01:53:74:5c:bf:33:73:
                    d0:20:b3:5b:dc:98:cd:70:03:9c:7d:ef:08:b9:ab:
                    a6:e7:51:3b:e4:3a:51:96:02:a4:21:21:01:cb:2e:
                    c8:f9:f9:21:b2:c5:d7:e0:78:89:90:17:de:57:cf:
                    96:60:20:4b:6d:52:d7:61:d8:1f:0c:85:e9:97:9d:
                    68:21:e9:ce:73:1e:82:30:07:8b:54:51:11:1d:41:
                    78:7a:55:7b:fd:6b:24:db:2a:d7:b3:42:0b:d0:c7:
                    8a:2e:76:6b:e5:ef:e0:dd:58:61:ec:36:28:73:f8:
                    cc:45:ff:9e:c1:95:6e:57:85:01:04:66:40:19:28:
                    7c:76:24:4d:90:31:00:0c:99:69:7d:66:f9:2e:dc:
                    cb:8d:7f:b5:3b:81:77:59:93:7a:75:82:74:9e:72:
                    89:f1:09:de:3e:f1:0a:49:28:18:91:ce:77:36:31:
                    57:2e:10:2a:af:ac:78:55:e5:4e:2a:90:39:63:1b:
                    53:31:72:5b:8b:7b:d1:2a:f4:b1:6a:36:bb:47:47:
                    6f:85:67:3c:48:ed:29:1e:c5:38:9b:a7:de:fb:5a:
                    fd:ec:28:73:1c:15:36:c4:0b:cd:4b:72:b8:85:65:
                    07:21:33:e8:f1:d1:bc:1a:2a:7d:27:2f:a9:d1:35:
                    4f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3B:BC:A3:F1:33:63:E5:66:86:38:25:B6:0B:92:1F:45:C8:1B:67
            X509v3 Authority Key Identifier:
                keyid:02:EA:25:E3:56:93:28:75:C0:96:A0:31:75:59:80:41:55:F6:C9:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Auol41aTKHXAlqAxdVmAQVX2yZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9b6be2-da44-42fc-81e1-d814fdca5bed/1/Auol41aTKHXAlqAxdVmAQVX2yZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2d:c6:a5:12:d1:26:9b:5e:ab:56:37:36:a6:0b:cf:3e:9c:
         98:4e:1b:e9:77:ab:e0:89:ac:4c:91:62:54:71:08:ea:53:30:
         1b:50:ca:56:38:8f:fa:76:43:a4:d4:ad:0a:c0:80:26:d2:2f:
         12:cd:79:bd:1f:64:74:4f:b0:2a:3e:0b:92:5f:f6:88:23:01:
         8c:07:9a:86:a4:07:8e:fa:1c:d4:cc:8f:f6:7c:ec:b5:b7:85:
         39:de:4c:5b:2c:09:99:07:64:51:7c:3c:b4:21:1b:dc:fb:c0:
         73:1f:b9:e4:05:35:a9:a9:83:3d:fe:e7:7d:8a:c5:cf:68:05:
         b6:72:f0:5d:d0:08:85:2d:35:69:74:71:ae:d0:e0:3e:75:09:
         b5:bc:d2:f8:f1:b4:1b:2a:1a:b4:9a:9f:35:78:a2:78:3c:f4:
         f1:9b:21:c9:5e:a0:30:ea:fc:c5:40:59:ee:5f:9c:65:52:a7:
         76:05:b5:5f:46:16:12:d6:fc:5f:b5:ed:87:25:0a:b3:1a:76:
         7a:b2:bc:39:65:69:e5:a5:0b:63:ac:3b:a3:ed:c3:d0:b0:27:
         f1:4a:94:e5:88:1e:06:18:b3:9d:24:df:20:2d:cf:10:3a:f6:
         10:83:cf:c0:8d:27:61:2c:66:3e:32:3e:41:df:05:73:3f:05:
         d8:45:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:04 2026 by rpki-client