Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
File:                     vI6RiHZmXLWDii99KNdHYRM5bvQ.mft (raw, json)
Hash identifier:          9hANuHe3C7wLXb62kOPNPVH7krxS45Ffhfhzx9HUDU4=
Subject key identifier:   7D:73:B6:37:B5:F3:49:8A:0E:17:BF:96:03:89:9E:91:B6:EF:D3:B0
Authority key identifier: BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4
Certificate issuer:       /CN=bc8e918876665cb5838a2f7d28d7476113396ef4
Certificate serial:       019F19B20A17C9E533D293B23CAE2546D442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
Manifest number:          015D
Signing time:             Tue 30 Jun 2026 18:02:05 +0000
Manifest this update:     Tue 30 Jun 2026 18:02:05 +0000
Manifest next update:     Wed 01 Jul 2026 18:02:05 +0000
Files and hashes:         1: WvZUTqnUJrfxPwj7etIyxS5XtG0.roa (hash: tjBBu94qUSlvnCT5HDdgFpmfyKhqmKvNYxBumfbCE8U=)
                          2: vI6RiHZmXLWDii99KNdHYRM5bvQ.crl (hash: nTtEZCppgZ/0sT5IGXMa8AFH9OH4tyICsnOlbXSOhTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b2:0a:17:c9:e5:33:d2:93:b2:3c:ae:25:46:d4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8e918876665cb5838a2f7d28d7476113396ef4
        Validity
            Not Before: Jun 30 18:02:05 2026 GMT
            Not After : Jul  1 18:02:05 2026 GMT
        Subject: CN=7d73b637b5f3498a0e17bf9603899e91b6efd3b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:2f:c5:85:c7:e6:c1:94:2b:16:0f:c4:ae:
                    bf:d2:ad:16:ec:7a:f1:34:57:d9:d9:61:a7:67:d3:
                    15:5d:68:9e:67:95:ac:6c:73:9c:04:82:12:03:8b:
                    f2:83:30:d1:33:ff:07:3c:95:50:8e:ff:bb:6e:5c:
                    7a:38:a9:a4:9c:ad:04:49:7b:70:0e:3a:4d:19:fe:
                    24:56:58:12:f9:a7:9e:b1:54:71:0f:28:d7:a9:7e:
                    c0:97:32:f4:22:64:16:b7:77:44:6e:3c:63:bd:dd:
                    47:7e:3d:b5:90:9a:18:30:1f:45:0d:96:92:d5:70:
                    62:48:c9:d7:71:a3:b8:03:b8:90:9d:a4:dd:88:25:
                    43:21:c7:48:b9:8b:ee:1b:e8:0c:8a:91:a5:50:f6:
                    a6:b9:e6:62:7e:74:71:f9:22:56:41:e8:70:82:2a:
                    13:c4:85:1f:79:28:10:5f:2b:b2:f1:d6:ae:b6:58:
                    4e:13:7a:7f:06:9d:b0:a8:74:be:a8:79:ec:4d:67:
                    86:d7:00:a4:3d:0b:a9:a9:d0:04:cc:8d:15:7f:8c:
                    a6:9b:9a:6a:b9:ac:aa:56:ff:cd:fd:58:7c:75:c7:
                    d1:f0:d2:af:bd:68:f9:a5:15:82:d8:9f:75:54:10:
                    75:a2:d8:cf:f5:7c:7c:b0:c7:9f:cd:49:08:4e:63:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:73:B6:37:B5:F3:49:8A:0E:17:BF:96:03:89:9E:91:B6:EF:D3:B0
            X509v3 Authority Key Identifier:
                keyid:BC:8E:91:88:76:66:5C:B5:83:8A:2F:7D:28:D7:47:61:13:39:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vI6RiHZmXLWDii99KNdHYRM5bvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/cbb2e4-88c3-4cc0-9675-c98a1bde6476/1/vI6RiHZmXLWDii99KNdHYRM5bvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d4:eb:4c:cf:bf:f5:36:c0:7b:1d:33:05:34:42:bd:a1:0e:
         cf:71:43:d3:30:f3:77:8d:92:72:e6:b8:94:19:23:69:05:19:
         4f:5e:e1:b6:83:76:f5:48:c5:38:6e:4d:12:ee:f2:33:83:42:
         3c:f8:65:6d:3a:ab:9f:f0:13:2a:4b:84:dd:67:1a:d6:24:0b:
         00:ec:81:fe:6c:d2:ec:8a:91:8c:51:dd:ee:22:f9:ca:45:32:
         78:92:ab:78:7b:83:e2:c1:04:9f:f5:57:80:e4:0b:32:e2:1a:
         80:7c:be:08:14:fb:9a:e8:58:ee:a9:44:bc:7c:eb:9e:d2:ce:
         0f:2f:1a:2b:44:f4:97:6d:22:92:25:7a:1b:7f:26:d2:99:67:
         39:f9:94:bf:11:2e:e4:85:3d:68:c3:fa:fe:25:00:28:19:3b:
         de:f9:46:3d:96:0d:3f:3a:30:af:7b:31:50:6a:dc:9d:12:86:
         18:83:20:17:a0:0a:4e:cb:72:2c:ec:ec:76:e5:9e:73:da:35:
         74:4c:8a:0a:f3:96:8d:ff:ec:2a:ea:5e:8d:b3:7d:e6:1e:ed:
         d7:e1:f3:d5:d6:e7:2c:52:dc:59:25:c9:b1:96:5e:6e:20:3f:
         f0:00:c9:81:fe:f7:8a:89:ec:46:fa:88:7a:12:00:4e:55:12:
         e2:9c:c0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:18 2026 by rpki-client