Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
File:                     2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft (raw, json)
Hash identifier:          zorKDxkNxGBwkFVr5kKMuq0yiP2IUwXx29l2quKYbf4=
Subject key identifier:   CF:DA:D8:5D:AB:D2:6D:D8:22:84:FD:D1:05:57:99:87:D9:A1:F2:55
Authority key identifier: D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1
Certificate issuer:       /CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
Certificate serial:       019EB76A300C26F283D60B9C231D0DFBB06C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
Manifest number:          13B3
Signing time:             Thu 11 Jun 2026 16:00:50 +0000
Manifest this update:     Thu 11 Jun 2026 16:00:50 +0000
Manifest next update:     Fri 12 Jun 2026 16:00:50 +0000
Files and hashes:         1: 2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl (hash: SXfJvu8xXLBq3XlfYgjvgZ9MWjvPDcwqGODQL4Bhpao=)
                          2: 7ozQf2Lgf43OlxMxJfVXI46HKEE.roa (hash: 2WRxX71MqlNLXAV8Z7Z41sZwXZzoqEFDU3UWBkUqAn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:30:0c:26:f2:83:d6:0b:9c:23:1d:0d:fb:b0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95e046e7d393c14fcbaee7f1c43980e3da11fb1
        Validity
            Not Before: Jun 11 16:00:50 2026 GMT
            Not After : Jun 12 16:00:50 2026 GMT
        Subject: CN=cfdad85dabd26dd82284fdd105579987d9a1f255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c9:5b:26:54:3a:d8:64:2e:a4:05:7e:d1:36:
                    54:7e:11:ae:c6:b2:98:e8:7e:1e:7c:c6:23:4d:a6:
                    30:1c:21:c5:c2:7e:bc:e6:71:e8:45:f2:1c:50:d1:
                    95:9d:89:c8:2e:35:bd:25:04:7e:d9:1f:a0:4c:0c:
                    e3:c8:dc:dc:da:93:78:3e:83:1e:69:79:e9:7a:ee:
                    b5:1f:cc:4f:68:94:0b:cc:09:1e:f9:ef:83:a6:27:
                    30:90:13:c1:b1:23:e9:1f:9b:ad:6b:f4:53:63:3e:
                    38:7d:85:fd:7e:b1:d3:ba:2f:53:49:99:fa:13:98:
                    ce:55:44:8b:85:3e:5b:cf:af:4e:a1:e6:42:59:56:
                    67:2d:8f:a5:d6:ae:7c:f7:4d:8a:ce:77:cc:a9:ad:
                    cd:d2:1c:ec:60:c3:4c:2e:92:f7:89:6a:56:21:bc:
                    21:1f:0e:46:17:24:99:41:24:2c:13:87:50:c8:5f:
                    50:f0:d9:ed:e0:e0:1d:4e:af:25:4a:fc:cc:0d:a1:
                    3f:98:88:ff:a7:a8:4d:ad:84:5d:00:2b:b2:79:49:
                    de:23:3b:da:6a:ad:11:9d:f0:70:13:68:9c:6a:c7:
                    d4:2d:5b:c2:26:84:16:3e:a8:39:bf:55:76:b6:a8:
                    9e:e3:9f:6b:77:6d:f5:83:19:18:fa:b5:c1:ab:23:
                    1d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DA:D8:5D:AB:D2:6D:D8:22:84:FD:D1:05:57:99:87:D9:A1:F2:55
            X509v3 Authority Key Identifier:
                keyid:D9:5E:04:6E:7D:39:3C:14:FC:BA:EE:7F:1C:43:98:0E:3D:A1:1F:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2V4Ebn05PBT8uu5_HEOYDj2hH7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/71bf6f-1e3c-404a-82d0-788c5b75754b/1/2V4Ebn05PBT8uu5_HEOYDj2hH7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e4:6f:1c:6b:24:b5:87:0f:bc:85:f6:47:84:f0:ca:f6:d2:
         8b:99:51:49:e9:32:6c:13:03:47:17:50:5b:84:da:7a:dc:ba:
         41:90:87:e8:40:18:65:b8:e6:d8:06:e2:d4:cd:3c:02:a3:c3:
         60:3d:ed:b2:9c:f0:61:5e:d0:d9:40:2d:e7:10:76:b9:19:9f:
         97:b7:2e:5d:67:73:f8:c8:7d:5c:63:c6:1a:0a:2f:5a:56:83:
         e9:f7:3c:dd:67:95:21:54:92:64:11:1a:06:53:4b:a7:eb:53:
         19:c1:69:65:3a:c9:13:e1:63:4d:ce:fe:69:35:2c:0e:52:86:
         a8:d2:03:5a:e2:ee:74:7d:46:97:7f:06:03:d1:fa:c4:9c:a9:
         3d:4a:14:ef:15:41:d5:c2:9f:49:ca:13:37:83:d1:b0:66:3c:
         f8:5a:36:da:c7:73:72:b0:34:44:b0:6f:10:87:7c:bd:42:64:
         bd:e0:8e:d5:50:c0:86:c7:7e:5a:cc:3a:19:39:8e:b5:07:74:
         d2:40:3c:4f:c6:f1:c2:fc:e5:cd:e6:72:0c:3a:19:23:a0:39:
         94:88:d6:44:01:7e:46:11:97:5a:79:fc:49:c2:18:ad:e9:bc:
         83:f8:44:7f:80:f0:c3:a7:23:6e:e3:9f:6b:98:46:5f:a1:ae:
         08:46:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:32 2026 by rpki-client