Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          4VNrXn5w/12NVFdBrtMDEeC7gn7+SYPJA2NScVQcmrY=
Subject key identifier:   76:0A:B5:2A:58:83:F4:1F:5B:C1:2D:25:2B:37:50:85:98:F1:BD:60
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       019EB98F004081DB46229FCB20D3220D0FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          040B
Signing time:             Fri 12 Jun 2026 02:00:17 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:17 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:17 +0000
Files and hashes:         1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: pO1BcmAQRpTp0T6Z87AhgNyiFVlzK248rBqv08NjNT8=)
                          2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:00:40:81:db:46:22:9f:cb:20:d3:22:0d:0f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: Jun 12 02:00:17 2026 GMT
            Not After : Jun 13 02:00:17 2026 GMT
        Subject: CN=760ab52a5883f41f5bc12d252b37508598f1bd60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:a7:54:9e:24:13:74:ce:93:a4:c9:6e:6c:
                    a2:a3:75:78:75:16:fb:bd:83:df:f3:f3:43:3d:c1:
                    06:36:66:49:e0:32:a4:2a:c1:9b:d6:e0:e9:a1:7f:
                    f1:3e:ec:43:31:c9:26:0b:ab:40:dc:e8:5f:58:b2:
                    70:c3:ae:1b:5f:63:0c:85:db:b6:8e:f1:49:4c:ac:
                    51:7b:2a:c2:fd:83:63:27:93:c7:47:17:6f:d7:85:
                    8e:e3:0f:18:6f:be:3e:36:3f:22:b7:02:f6:08:cf:
                    c0:b4:05:26:b5:35:ae:08:06:49:51:50:51:f3:31:
                    95:87:9a:c2:3f:34:8b:27:a0:ce:d5:7c:a1:e1:46:
                    9c:4a:fd:fd:88:e0:24:c5:82:e6:80:78:21:04:f1:
                    f0:43:b2:98:85:92:ba:76:1d:5a:8a:25:48:78:2c:
                    42:2a:a7:5b:7b:56:2e:45:da:c0:eb:8d:47:6e:31:
                    88:48:b7:57:1e:aa:6f:19:c3:dd:0c:6b:61:9d:61:
                    17:a6:95:b0:3a:d7:85:74:c4:64:c5:69:a7:23:37:
                    55:23:c3:d6:74:2b:a6:3c:b3:4d:16:18:70:5d:d7:
                    56:32:3a:12:27:2c:93:ac:53:c2:46:7a:ff:5a:0a:
                    52:30:cd:17:dc:a6:19:58:dd:11:9f:98:1b:e0:a8:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0A:B5:2A:58:83:F4:1F:5B:C1:2D:25:2B:37:50:85:98:F1:BD:60
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:15:1a:65:28:9b:37:1b:e4:66:8c:c4:81:27:2b:87:5c:33:
         88:f6:8b:76:2b:eb:69:be:99:7c:67:b6:87:83:2d:99:12:b5:
         aa:4e:c2:26:4a:38:94:5a:a5:c8:80:e2:21:b1:76:76:df:db:
         20:1e:2d:4a:e0:da:5e:30:15:06:d5:6f:4d:68:c0:3a:7a:00:
         23:6a:c8:35:ff:31:b2:fe:9a:77:79:a3:6b:5e:7c:86:a0:01:
         b3:96:92:72:1b:b9:5f:b0:e8:3d:ca:73:a9:68:3f:9f:15:c4:
         68:de:87:4e:83:a0:c8:7d:c9:15:15:05:fb:6f:60:46:31:ac:
         88:31:97:68:b3:2b:54:5c:be:5c:fb:6e:87:03:3e:90:d4:7c:
         0d:09:b7:84:10:fa:2f:71:13:7c:48:77:ef:d5:49:d0:64:1e:
         6e:f6:99:b8:40:ee:c5:b0:3d:83:13:47:60:58:6c:bd:33:a0:
         cd:3e:0a:cf:bb:5e:fa:be:4e:e4:5a:0a:1a:4d:24:78:cc:ee:
         e2:3b:64:e3:1c:fb:b9:01:e1:b4:36:6e:3e:ec:b0:4c:fd:6d:
         57:a5:da:ba:30:09:44:0c:c8:54:0e:e9:91:bd:56:b3:af:46:
         7c:14:fd:0e:71:1a:42:e3:72:a5:1a:54:54:2a:99:77:e9:e2:
         67:c7:3a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:03:36 2026 by rpki-client