Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
File:                     7t4TuXp8d4rYAT-v-isbtkh2LPw.mft (raw, json)
Hash identifier:          SZdwH4+kZ2nWJGjXQ91mWZhAcq4ztsGc5gi8hRwHKyU=
Subject key identifier:   0F:38:D8:38:8F:F0:6B:96:84:71:87:E1:76:67:0A:1C:6D:FD:7A:CD
Authority key identifier: EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC
Certificate issuer:       /CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
Certificate serial:       019F1152B4C3313346B49DCC1F54FEF81EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
Manifest number:          01D6
Signing time:             Mon 29 Jun 2026 03:01:00 +0000
Manifest this update:     Mon 29 Jun 2026 03:01:00 +0000
Manifest next update:     Tue 30 Jun 2026 03:01:00 +0000
Files and hashes:         1: 7t4TuXp8d4rYAT-v-isbtkh2LPw.crl (hash: a5R9cm8iuY8dPWyiLLUtT43FoV9DFSikqI5KtVkMjbQ=)
                          2: V-c9Jwigm0FXZPcPKp3gnGgZ4bw.asa (hash: gwxZgOsJlIUK1uNl8+Cu1SE+A0G8IvUXMkvyoE0dBjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:52:b4:c3:31:33:46:b4:9d:cc:1f:54:fe:f8:1e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eede13b97a7c778ad8013faffa2b1bb648762cfc
        Validity
            Not Before: Jun 29 03:01:00 2026 GMT
            Not After : Jun 30 03:01:00 2026 GMT
        Subject: CN=0f38d8388ff06b96847187e176670a1c6dfd7acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:2a:d4:18:06:ff:1a:75:70:86:03:b7:e9:
                    8f:bd:2d:ab:d4:ab:0b:b9:a0:6c:b3:78:db:00:77:
                    dd:26:35:58:25:72:f6:49:f6:c9:a8:fd:7c:1f:a3:
                    cd:f4:c4:43:e7:ff:ae:50:84:a7:ef:b7:1e:fa:c6:
                    0d:66:d0:8c:16:aa:0f:1e:67:11:65:f2:a0:74:ca:
                    fc:b0:a4:87:1d:c6:e2:4c:b6:01:89:1e:79:bb:1c:
                    dc:0a:c3:70:e0:7a:a0:84:89:a7:06:5f:59:f0:c9:
                    49:aa:84:6e:0a:7c:4f:ac:9e:0b:49:dc:be:c6:c4:
                    9a:33:d3:83:82:d9:e6:3f:98:ba:cc:d8:f8:75:92:
                    17:2e:bc:a9:11:f0:41:c9:7f:74:f1:7f:d6:2f:7e:
                    28:ab:e2:fc:f8:38:53:2e:c1:e3:86:f7:08:35:d5:
                    87:a8:dc:0b:ae:04:4b:d0:ff:99:dc:19:b9:3e:84:
                    29:c5:34:82:62:c4:a1:76:fa:d5:f8:5b:4a:6a:f3:
                    70:80:9b:76:c3:a6:29:27:1c:fe:2a:f1:a6:15:37:
                    2e:b3:36:67:27:70:10:6e:ea:8c:63:ec:ae:a2:79:
                    a2:0d:36:9d:45:f2:e5:97:e8:a5:b4:3c:a0:8f:32:
                    38:d2:56:bc:26:d2:ad:44:ac:b1:6b:9f:51:a5:58:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:38:D8:38:8F:F0:6B:96:84:71:87:E1:76:67:0A:1C:6D:FD:7A:CD
            X509v3 Authority Key Identifier:
                keyid:EE:DE:13:B9:7A:7C:77:8A:D8:01:3F:AF:FA:2B:1B:B6:48:76:2C:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t4TuXp8d4rYAT-v-isbtkh2LPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/092c1c-22fb-48ab-be9c-a520de759a50/1/7t4TuXp8d4rYAT-v-isbtkh2LPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:11:9a:7b:34:35:ba:8d:4a:a7:24:c6:bf:b1:70:2a:91:
         a0:db:af:71:60:89:34:b4:34:ec:f9:8c:a5:9c:9b:a4:8d:7c:
         d3:67:f3:27:93:66:01:3e:92:21:24:a6:8f:c8:c2:5e:ec:3d:
         15:70:6a:db:db:0b:d9:7c:ae:e5:3e:1a:a2:e6:47:a9:56:35:
         af:23:d6:34:64:fe:6b:fb:94:75:5d:ab:c1:4c:07:95:23:86:
         ee:a4:80:31:a7:9c:2b:9b:6f:51:99:eb:33:91:91:ad:35:8b:
         e2:ff:9f:c4:75:bf:5e:68:be:27:4c:71:1a:19:a8:ed:bf:fc:
         82:d1:0d:46:8d:6c:e3:20:e8:89:59:32:26:df:b2:64:d3:56:
         2b:6c:52:b4:e4:d1:bd:9c:62:21:35:33:ba:6f:90:47:6c:d7:
         1d:99:c0:7a:15:e2:fc:e4:c6:ab:96:d4:2c:93:bc:b9:de:e0:
         69:c8:aa:bd:66:66:d6:90:b5:fa:45:cc:a5:ac:87:79:13:66:
         13:01:ef:67:bf:97:33:72:64:0c:0a:87:35:d0:3e:4c:7d:95:
         9e:21:65:02:46:38:6e:ee:6d:2b:97:c7:99:33:10:58:fc:59:
         f2:32:02:43:9f:2d:88:85:46:e2:ef:bf:38:51:22:63:33:c9:
         22:c8:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:09 2026 by rpki-client