Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File:                     mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier:          q2WG54sow6KSND2RWoLuJ7jy53WZe9wkrSk+1Ohw6Ks=
Subject key identifier:   C2:BB:72:34:31:BD:A5:53:59:83:6B:A1:5E:3D:01:99:D5:37:39:7B
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer:       /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial:       019F11C0A038D145D0D676267A4E5D502B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number:          0366
Signing time:             Mon 29 Jun 2026 05:01:04 +0000
Manifest this update:     Mon 29 Jun 2026 05:01:04 +0000
Manifest next update:     Tue 30 Jun 2026 05:01:04 +0000
Files and hashes:         1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: QBKkLOsZ9426lh4CIMOpZCz/0yjr/l3/mQrh0DNukUQ=)
                          2: nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (hash: jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:a0:38:d1:45:d0:d6:76:26:7a:4e:5d:50:2b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
        Validity
            Not Before: Jun 29 05:01:04 2026 GMT
            Not After : Jun 30 05:01:04 2026 GMT
        Subject: CN=c2bb723431bda55359836ba15e3d0199d537397b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c3:94:13:00:94:3c:ea:2a:ff:00:31:77:10:
                    79:ac:4f:db:a7:3a:ad:da:c0:27:50:5f:af:4b:78:
                    af:62:44:52:09:c6:c8:55:d5:9f:98:5f:2e:d3:3b:
                    57:93:5c:e9:fe:8f:dd:ce:71:c0:82:05:6d:f3:70:
                    a1:1c:3c:92:9c:24:61:b6:6f:d8:b4:7f:a9:45:ff:
                    07:b5:7a:96:ff:7f:3e:2d:20:8e:12:42:32:ab:ac:
                    9a:34:5a:ba:95:9f:a7:9d:c0:b1:99:ad:fc:68:c9:
                    c7:ac:a3:03:e3:06:ca:16:41:5e:dc:ab:50:cf:a3:
                    a1:d5:b2:5b:4a:c8:83:8a:e4:bd:b0:f4:59:c4:2d:
                    c9:0d:b3:7e:f0:ec:ff:54:5a:fe:91:69:02:f3:af:
                    a1:6e:c6:a3:80:b2:ae:b8:fe:d1:d0:6c:1b:eb:da:
                    a8:e7:ac:e8:41:52:67:ca:e2:f4:71:80:6f:f6:2b:
                    0e:b1:ef:9e:e5:3c:c6:b6:fb:b1:7b:f3:33:d6:47:
                    ac:e7:c6:58:e0:68:22:1d:fc:da:6e:05:e8:cc:77:
                    21:3f:04:d4:5b:ae:91:a4:b2:bc:31:e9:5b:1c:e8:
                    52:dc:19:f6:d2:05:55:aa:4e:64:63:98:51:1c:ec:
                    7b:11:7a:3c:df:72:13:30:3d:ef:62:1c:cc:86:c1:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BB:72:34:31:BD:A5:53:59:83:6B:A1:5E:3D:01:99:D5:37:39:7B
            X509v3 Authority Key Identifier:
                keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d6:07:5f:3d:8a:38:6d:07:6f:a6:d1:ef:43:59:b0:db:0f:
         5f:db:d7:2d:54:df:a1:72:55:06:28:76:1e:7a:02:00:ec:86:
         46:2e:35:7f:13:9e:be:57:63:97:55:ec:3c:b7:e9:81:6e:67:
         2d:37:01:09:72:69:72:f1:fd:bb:4b:fe:8f:06:3a:28:3f:e6:
         fc:5e:3f:43:88:e9:b2:e5:fb:b7:25:76:00:9a:34:58:cc:c4:
         d3:f4:31:e0:48:c5:0e:29:72:55:8f:58:86:ad:a9:b0:a3:a2:
         e0:6e:6f:29:bd:09:3b:e0:94:ea:2e:d3:66:5d:38:11:3d:1f:
         78:cf:ea:a0:8d:36:31:9e:e3:c0:5f:8f:c9:5d:03:c6:32:2d:
         6a:65:07:ed:51:15:83:a8:45:94:6c:9e:36:b7:18:88:b5:f2:
         d2:82:06:1f:aa:eb:19:e0:f4:c4:a8:28:f5:2b:f0:77:3d:1a:
         6a:42:36:35:5f:34:68:a9:32:d3:4b:cd:2e:ee:d6:1a:be:77:
         06:f7:bd:03:7d:53:20:98:2a:ab:9a:c0:59:e3:0c:2e:ba:64:
         f6:14:02:00:a2:34:5d:a4:c0:fb:90:41:be:29:22:55:2e:96:
         97:8f:e8:98:2d:59:85:52:70:de:4b:50:e5:63:7a:08:92:ea:
         59:0f:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:02 2026 by rpki-client