Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
File:                     MTie9MqM5oHWuD4L5MiGo6dFYCg.mft (raw, json)
Hash identifier:          h9BXfpa4jt3htPtRsXESiHn5Abhc3W5OKuqOFAPhFlk=
Subject key identifier:   E3:2A:11:83:59:88:2B:E7:08:62:6A:C9:FE:06:96:F4:0F:A9:3D:01
Authority key identifier: 31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28
Certificate issuer:       /CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
Certificate serial:       019F129C7AD491E63FFC24DC809A0F7165F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
Manifest number:          02EC
Signing time:             Mon 29 Jun 2026 09:01:12 +0000
Manifest this update:     Mon 29 Jun 2026 09:01:12 +0000
Manifest next update:     Tue 30 Jun 2026 09:01:12 +0000
Files and hashes:         1: MTie9MqM5oHWuD4L5MiGo6dFYCg.crl (hash: jSjKoZV1iob66AnN95EzuKLDaxzyebCYXpiobPvfKuY=)
                          2: dAvQklqaFgS7nuGcHDCAEFSzz7s.roa (hash: B5/JGeN0RNoqJRO7nGvJRd8pXhY+SDcSmh+pqHEkxm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:7a:d4:91:e6:3f:fc:24:dc:80:9a:0f:71:65:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31389ef4ca8ce681d6b83e0be4c886a3a7456028
        Validity
            Not Before: Jun 29 09:01:12 2026 GMT
            Not After : Jun 30 09:01:12 2026 GMT
        Subject: CN=e32a118359882be708626ac9fe0696f40fa93d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:62:30:18:63:d3:b7:1b:a6:35:86:21:4b:e9:
                    7e:2f:1b:23:87:65:12:71:6a:5c:26:55:11:32:6e:
                    2d:d1:88:e7:e3:33:fc:cb:1e:c4:65:59:36:0f:22:
                    62:36:a7:db:75:11:2b:97:23:5e:29:75:e9:53:b5:
                    41:a4:f6:61:2c:d2:fd:f8:22:b5:bd:26:ef:2d:f6:
                    47:2a:1e:cc:8f:98:d4:22:c1:6c:d8:6d:e9:69:66:
                    47:6b:a6:ba:76:fd:bb:ac:7c:6b:7e:d2:b2:33:67:
                    90:f2:4f:6e:76:5c:88:e6:98:f4:27:fb:fc:ef:8d:
                    21:98:22:ae:66:9e:f2:51:e3:70:ff:cd:50:80:fe:
                    af:76:09:5f:65:19:48:db:2f:7d:30:0f:6d:24:7b:
                    a8:8f:63:b6:97:e7:ca:05:05:6b:5d:1b:ae:4f:97:
                    21:d8:6e:6b:de:ce:f2:21:b5:7e:72:e3:58:55:f2:
                    e4:c4:00:9c:fd:e7:b5:d9:97:e7:5d:ab:ab:e5:1c:
                    d8:76:b5:06:b4:93:c1:e9:ce:e6:34:7f:5f:2e:a9:
                    d7:0c:52:6f:27:b9:bf:f8:57:46:58:a5:45:08:b1:
                    be:58:32:ca:40:2a:46:a6:19:b3:14:ca:14:51:59:
                    36:b5:a2:2f:5f:0e:f1:2a:2b:4c:16:96:f1:6e:3e:
                    f5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2A:11:83:59:88:2B:E7:08:62:6A:C9:FE:06:96:F4:0F:A9:3D:01
            X509v3 Authority Key Identifier:
                keyid:31:38:9E:F4:CA:8C:E6:81:D6:B8:3E:0B:E4:C8:86:A3:A7:45:60:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTie9MqM5oHWuD4L5MiGo6dFYCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/29a3d8-fb46-40c5-8f36-371b16e51790/1/MTie9MqM5oHWuD4L5MiGo6dFYCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:58:b2:df:55:ae:1b:15:a3:75:6c:7b:f1:5b:bc:43:5d:60:
         b9:f0:f4:9c:58:bf:06:11:14:68:4e:be:be:1d:31:b6:25:fb:
         68:f8:24:13:59:60:68:a4:ff:af:13:18:e5:ed:79:ee:01:e4:
         2a:e9:44:e7:0d:1c:70:6a:f2:51:49:8b:c2:dd:98:d4:e4:19:
         4e:b5:20:02:e6:56:f4:11:15:e1:69:5b:e5:fd:46:a4:11:3d:
         00:14:b9:8c:8d:98:6c:99:7b:33:37:cb:83:db:68:d9:af:93:
         7f:f4:63:db:97:70:51:da:74:ee:a0:c3:9f:77:b0:bb:a9:65:
         04:b5:15:7b:a5:fa:ff:3a:dc:ae:b8:6d:f7:19:cc:0b:92:88:
         9e:48:9e:cd:c5:c3:33:55:1f:01:5b:40:7f:e0:de:dd:fa:6b:
         5b:71:9d:b4:56:5e:af:5d:d5:36:db:5f:f3:1c:1e:da:c4:82:
         79:d6:88:a1:44:71:a7:3e:13:94:7b:51:25:32:d8:a6:86:c2:
         a6:2d:c9:0b:6b:56:72:a7:67:a5:42:79:d5:30:c7:7a:30:fe:
         03:34:52:c7:28:73:51:1b:de:ec:33:6a:10:8f:e7:9f:d2:69:
         f1:46:4a:29:22:07:41:df:d5:b8:c9:1f:35:e2:d3:ab:3b:73:
         0c:66:76:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:35:13 2026 by rpki-client