Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
File:                     I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json)
Hash identifier:          I2s4sgRqYA9QDHSvg1rgFWDz9dhr8aWsUjtftQUh2KM=
Subject key identifier:   0F:3B:22:C6:5D:C3:76:27:BE:BD:3B:4A:A5:33:72:81:B2:1A:11:49
Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
Certificate issuer:       /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Certificate serial:       019EB87CC607875F745F9C0F7AD88375B09A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
Manifest number:          09E0
Signing time:             Thu 11 Jun 2026 21:00:45 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:45 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:45 +0000
Files and hashes:         1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: f5FWp56a99ae/8pC8L41YDw5RmG8SWjmVUi3IPWdE9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:c6:07:87:5f:74:5f:9c:0f:7a:d8:83:75:b0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
        Validity
            Not Before: Jun 11 21:00:45 2026 GMT
            Not After : Jun 12 21:00:45 2026 GMT
        Subject: CN=0f3b22c65dc37627bebd3b4aa5337281b21a1149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:78:73:e0:da:ce:22:ed:b9:6b:1b:8f:45:
                    9e:92:2e:29:18:78:a8:3b:93:d7:01:c4:0e:73:5f:
                    ec:9b:c6:88:ea:6f:ee:9d:ea:d8:9a:dc:3c:8e:9a:
                    b3:e7:95:04:e5:ac:22:e4:b8:22:8c:54:a3:e5:3d:
                    25:22:e8:dc:23:a6:53:77:5e:73:ad:13:50:5a:5e:
                    af:d6:f0:68:ef:89:7f:3a:61:2e:43:98:a9:f9:32:
                    f8:79:6e:d3:b3:a0:bc:c0:55:55:5f:ae:e6:72:b9:
                    e2:d0:bb:f2:58:d2:e9:01:10:28:92:ef:6a:90:6f:
                    fc:69:3d:64:9f:c2:f5:0e:ca:10:13:16:de:eb:bb:
                    54:72:ab:22:ba:84:fd:48:45:f3:00:60:cb:f9:f0:
                    ca:fd:5c:19:a0:61:59:36:1f:95:19:61:d9:c2:10:
                    c9:94:9c:90:62:90:a1:7d:20:e8:64:22:64:5a:4d:
                    89:bb:9d:4a:35:0d:40:7b:e2:19:87:ca:95:f8:70:
                    cd:07:ee:de:05:98:73:2c:c3:ed:69:44:30:24:ff:
                    a5:21:91:64:f0:80:39:09:f8:19:b1:8d:8f:34:7d:
                    c4:c1:c6:8d:aa:d7:40:2e:be:da:ee:46:42:27:7c:
                    c9:b0:53:89:48:1b:f6:b4:a7:72:3b:1c:13:ba:7a:
                    9f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:22:C6:5D:C3:76:27:BE:BD:3B:4A:A5:33:72:81:B2:1A:11:49
            X509v3 Authority Key Identifier:
                keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e8:f1:a1:f2:64:59:35:b9:2b:8c:61:98:18:96:2e:e3:ec:
         5a:df:5c:39:b3:48:9b:82:5c:c4:7e:4d:fd:89:84:fe:2f:02:
         f5:9d:30:d6:0e:39:f8:8f:a4:38:4d:28:9f:2d:9a:8a:6c:37:
         a7:6a:a9:68:cd:63:a0:cd:17:60:0a:cb:7b:63:f0:0f:ed:f4:
         86:f8:08:31:c8:8a:fa:dc:1a:76:30:f3:45:d1:1b:9b:b1:18:
         99:9e:8a:3e:27:33:ea:21:a3:2d:49:45:cd:9d:26:d5:c1:b7:
         b8:99:6d:46:2a:f9:2f:7c:62:af:51:6b:49:5e:5f:68:cc:96:
         80:55:a2:c6:8e:43:ad:1d:0e:91:79:16:93:bc:d5:2e:3b:32:
         26:69:2a:37:1a:83:4f:82:91:d2:1d:f4:fb:79:0b:87:47:90:
         b7:84:67:d1:ab:dc:3f:39:1d:f0:dc:9f:77:7a:19:cd:06:45:
         2b:cf:5e:7e:5d:13:48:bb:7a:41:14:93:71:19:9b:40:9e:c4:
         61:99:19:83:56:fd:6e:7a:24:34:4c:33:3c:6d:70:24:69:fa:
         5b:93:f8:a2:24:43:d1:f7:b1:67:88:4e:f0:26:a3:36:80:3d:
         7d:6e:36:7d:36:7c:c0:0a:c4:b2:f1:ce:cd:f5:47:04:be:bc:
         b4:0b:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:02 2026 by rpki-client