Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File:                     1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier:          0C/mOxmJhi7wjDPhUGCuriuXMWSv5N4evBjHrF31DGw=
Subject key identifier:   56:7B:73:E2:05:3E:3C:D8:AE:36:B6:A3:0B:DA:70:28:59:91:14:66
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer:       /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial:       019F287FB18AA55675AE70CB06D6147D53F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number:          0361
Signing time:             Fri 03 Jul 2026 15:01:24 +0000
Manifest this update:     Fri 03 Jul 2026 15:01:24 +0000
Manifest next update:     Sat 04 Jul 2026 15:01:24 +0000
Files and hashes:         1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: Sl8qA1LdND2lY8LBiQ1Ivc8DU0Nxlp/rDojGA6SfnzM=)
                          2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:7f:b1:8a:a5:56:75:ae:70:cb:06:d6:14:7d:53:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
        Validity
            Not Before: Jul  3 15:01:24 2026 GMT
            Not After : Jul  4 15:01:24 2026 GMT
        Subject: CN=567b73e2053e3cd8ae36b6a30bda702859911466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:6e:b2:3b:af:5c:24:f5:14:e6:8f:71:3a:
                    c4:13:0a:2e:ca:0a:52:ca:59:b7:9a:b8:6e:c1:41:
                    40:71:00:72:ee:f5:4c:f5:5f:6d:8c:08:e9:28:33:
                    36:8d:2a:ba:39:81:95:ea:38:17:b3:4a:ea:e8:41:
                    c5:eb:9a:cb:b4:de:db:3c:1a:6a:c9:e0:b7:30:4c:
                    3c:7d:2e:4a:4c:4c:07:88:58:e0:37:18:85:2f:17:
                    e6:42:8d:96:25:2c:af:73:32:64:57:80:a2:ab:26:
                    24:84:c1:a7:67:23:71:0c:26:46:28:16:4b:48:40:
                    83:fb:c6:1d:d3:5c:d7:2c:a9:c3:c3:e0:1d:47:1a:
                    ed:d1:f6:a2:bb:a8:a7:62:f9:79:6e:8b:42:42:68:
                    75:a2:1a:02:75:40:eb:1b:6c:cd:9b:9a:ec:8a:c8:
                    bd:cf:94:fd:a6:0a:6e:83:5a:cd:3f:e1:ca:37:4c:
                    c4:f0:33:52:9a:c4:52:4b:f6:02:31:4e:d1:fb:8d:
                    d1:97:7f:18:0b:2a:4b:54:57:9e:f0:8c:c2:02:84:
                    b1:ca:f6:b3:71:41:74:aa:13:98:39:c1:ff:c4:25:
                    e3:ea:75:54:b1:ae:4a:22:e1:25:4a:5d:fd:d9:6f:
                    34:9a:51:41:8f:bc:1c:6f:d7:7e:70:24:4c:c5:5b:
                    94:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:73:E2:05:3E:3C:D8:AE:36:B6:A3:0B:DA:70:28:59:91:14:66
            X509v3 Authority Key Identifier:
                keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:92:61:00:e7:fe:8b:df:de:a5:1e:83:81:c0:7d:a9:de:02:
         71:e0:31:a7:dc:1f:9b:36:a4:5a:88:39:f0:b8:d4:ef:19:2e:
         58:ad:62:9d:00:29:6d:be:d7:bd:52:eb:3a:0b:40:42:fc:a7:
         5b:0f:59:33:22:c0:4e:93:50:dd:d6:c6:f0:56:63:23:1f:d9:
         63:32:59:ef:15:fb:d9:51:c0:59:e2:99:1b:ac:b1:e8:81:3f:
         8b:76:e8:16:fd:3d:d8:69:86:b8:a2:4d:f4:0d:9d:9e:2b:75:
         23:c8:0b:38:e8:4e:27:cc:ba:9a:ca:07:c5:a5:19:29:23:45:
         d5:88:56:19:87:c0:59:d9:ec:de:21:cc:55:79:c4:b3:de:34:
         f2:73:7a:41:c5:00:4e:24:05:e1:e5:e2:57:3f:b4:75:1c:fb:
         c3:70:b9:71:f8:8c:ed:32:94:6c:1d:48:09:a4:c7:ee:31:46:
         3b:2b:06:d7:b1:12:2f:25:35:2d:c4:61:de:59:9b:fe:0f:4a:
         bb:51:7d:c2:57:83:37:06:4c:24:43:69:58:92:52:00:a4:3c:
         3c:90:09:68:e6:b1:19:d8:dd:0c:2d:f0:9f:23:da:05:58:ae:
         43:1c:a7:d8:3f:6f:9e:17:27:ab:59:e7:21:15:0b:2e:7e:1a:
         9d:45:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:44:28 2026 by rpki-client