Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File:                     1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier:          yvFlzWPC6RO3N2vEtQ1hmmN9bjFnib+M6FYRHBjF3MQ=
Subject key identifier:   E8:DF:C7:BE:69:B2:01:03:82:5C:29:07:BB:0F:9D:54:E5:DD:75:2A
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer:       /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial:       019F189EC0977BA20C751CDD03A04EA66733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number:          13FD
Signing time:             Tue 30 Jun 2026 13:01:24 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:24 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:24 +0000
Files and hashes:         1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: 0SoAE7TUYh5N52zJczi9nzNpuAGXf649kNncqKs6jQU=)
                          2: DuQCI0LzJ_jv1-vJ6IDr9-AqYNg.roa (hash: v/EHF8za/yF5QkLDnsNNBRhuf4fJfY8/YwjXrsygUS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:c0:97:7b:a2:0c:75:1c:dd:03:a0:4e:a6:67:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
        Validity
            Not Before: Jun 30 13:01:24 2026 GMT
            Not After : Jul  1 13:01:24 2026 GMT
        Subject: CN=e8dfc7be69b20103825c2907bb0f9d54e5dd752a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:d5:84:76:dd:f9:96:b7:5a:25:76:6c:96:
                    f6:31:b7:94:48:31:b3:41:73:6a:65:4d:25:0b:4e:
                    e4:1e:dc:d0:ae:f2:c0:c6:d0:fb:8b:ab:f6:7d:9c:
                    68:16:1b:3f:6c:e0:14:87:fa:04:58:7b:7e:b5:b6:
                    8d:03:59:bc:83:af:25:33:cd:5e:79:27:3f:a4:e0:
                    93:04:79:db:2d:64:e0:9e:f3:46:df:63:d3:f6:b7:
                    7b:85:63:f1:86:e9:97:a5:62:17:0a:15:ca:47:dd:
                    33:47:2c:b8:ba:35:7a:e4:56:49:18:f7:d8:95:dc:
                    41:74:93:7c:12:08:68:2a:7a:cc:2e:6a:78:61:99:
                    69:d2:0d:54:f2:cb:80:f6:9c:3d:08:3e:2a:d7:ce:
                    34:17:58:13:67:1e:dd:cc:2b:1e:ba:e1:0f:32:d4:
                    e6:1a:18:f7:2b:41:f0:a8:5b:45:c0:98:05:a1:ad:
                    07:15:64:1c:11:5c:b3:7b:51:d7:f2:3c:4e:b7:93:
                    b1:2b:4f:3e:46:5e:66:df:19:90:e7:6b:4b:9c:1b:
                    a2:d1:ed:ab:97:18:5e:e4:7e:f2:3c:f6:7a:dc:f1:
                    a8:b4:01:19:b3:e8:ee:36:cc:91:bd:3b:31:da:69:
                    93:35:12:72:ee:dc:17:6f:0f:7d:3d:68:de:56:a5:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DF:C7:BE:69:B2:01:03:82:5C:29:07:BB:0F:9D:54:E5:DD:75:2A
            X509v3 Authority Key Identifier:
                keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:2a:80:04:d6:de:2a:82:b0:eb:b5:74:07:f8:d8:fb:99:
         10:dc:0a:5e:26:9e:3e:69:cf:65:26:80:63:71:3b:1a:1e:c4:
         7a:f5:e0:f2:08:41:98:ac:4b:e2:81:fb:ed:4d:f0:2b:4e:d8:
         af:1b:1a:95:fa:f8:95:c1:4d:23:0b:da:8e:97:a3:f5:80:11:
         10:73:7a:3f:90:9d:a7:30:b3:78:7c:da:8d:9e:fc:f2:91:ac:
         74:8c:11:e6:96:98:cc:27:a8:56:85:0d:d1:aa:ac:c1:ce:82:
         db:1a:57:76:9f:70:a9:b4:a5:d5:f5:90:f6:b6:7b:fa:e3:54:
         80:a3:ce:7c:1d:36:a7:b6:9c:9f:50:cf:a6:eb:e7:63:5b:d9:
         77:b6:21:06:ca:e8:38:fd:d6:46:7c:ae:ec:4f:d7:37:53:68:
         cb:77:23:16:b8:65:8d:41:7e:ea:0b:9b:c6:fd:09:c4:6f:21:
         57:36:77:2c:bb:28:85:ce:f5:b0:71:6c:9d:5e:df:fc:09:ed:
         a6:ef:c8:87:6a:c0:6a:c5:9e:fe:a7:eb:9a:5c:2c:e0:67:11:
         11:85:6d:5c:42:25:06:19:61:87:8c:a3:88:49:ab:8c:93:38:
         74:20:55:b1:4a:98:51:19:f4:b5:2b:5e:f7:ad:da:40:a4:ce:
         2c:56:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:20:03 2026 by rpki-client