Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
File:                     _izVtrb_hGG7l5eGHJuBZ2oHU6o.mft (raw, json)
Hash identifier:          1ytfiVmUSGzoFiuiUE7oKi3qmUc+4zf7pnO6NVxAvJU=
Subject key identifier:   5D:F4:A3:25:B9:46:6E:6E:61:4C:53:DB:42:65:1A:45:10:92:05:4A
Authority key identifier: FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
Certificate issuer:       /CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Certificate serial:       019EBAD898EC81A2ED1BF8698EE0712B2BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
Manifest number:          0913
Signing time:             Fri 12 Jun 2026 08:00:17 +0000
Manifest this update:     Fri 12 Jun 2026 08:00:17 +0000
Manifest next update:     Sat 13 Jun 2026 08:00:17 +0000
Files and hashes:         1: _izVtrb_hGG7l5eGHJuBZ2oHU6o.crl (hash: PcYYSfR4hUmjdOHzl6Sgi0WJRJsAQK3colnGjQJqse0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:d8:98:ec:81:a2:ed:1b:f8:69:8e:e0:71:2b:2b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
        Validity
            Not Before: Jun 12 08:00:17 2026 GMT
            Not After : Jun 13 08:00:17 2026 GMT
        Subject: CN=5df4a325b9466e6e614c53db42651a451092054a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:6f:69:60:0a:4d:54:b3:c8:24:88:8e:8b:
                    04:0e:48:01:b6:2c:b7:a6:d0:de:c2:5f:25:09:f4:
                    8a:bb:5e:00:fc:a9:f2:a2:cc:a6:df:1e:b6:90:70:
                    28:57:a7:d2:18:fc:78:c5:a1:4f:a9:36:7d:8a:92:
                    db:0f:fa:23:4a:b8:ee:1f:fc:55:1b:78:64:ac:57:
                    93:f7:08:67:93:fe:16:4d:99:ec:c9:fe:8d:7b:23:
                    cd:d3:e1:4d:2c:7d:84:93:c0:4f:91:3f:ba:20:16:
                    e4:aa:30:5c:1a:07:a4:d4:73:33:06:57:eb:cf:13:
                    6a:a2:69:ac:3c:cf:34:7b:03:db:d4:1a:98:0d:12:
                    99:2e:b3:95:59:6c:4d:1b:34:4a:21:53:1f:57:dd:
                    34:60:6a:c0:08:ab:ba:ce:7a:5e:78:59:ec:fd:00:
                    f6:45:81:25:72:90:7a:fa:16:30:62:e9:f0:b4:ed:
                    ca:1c:8c:1b:c8:cd:be:23:3d:cf:46:24:a1:63:c2:
                    eb:b0:d5:9e:86:27:c8:e1:ee:dc:f4:8b:08:2a:c4:
                    50:95:36:be:eb:12:e9:13:6a:c6:99:da:7b:50:5e:
                    fb:e1:cc:73:e0:1f:82:3a:b8:cc:81:df:5d:00:48:
                    94:2b:18:af:d2:53:f9:fe:40:c2:a2:68:c1:2a:c1:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F4:A3:25:B9:46:6E:6E:61:4C:53:DB:42:65:1A:45:10:92:05:4A
            X509v3 Authority Key Identifier:
                keyid:FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:51:2f:72:2b:ec:97:3e:53:70:90:a8:b8:d4:4d:9a:70:
         4c:7d:d7:ad:e3:8d:ac:30:08:ce:4f:42:ae:c8:83:35:f8:0b:
         13:3c:39:0d:17:93:b5:4e:e7:e0:7a:e8:91:65:33:7d:9c:cc:
         e2:47:ed:90:c1:27:dc:39:85:a4:ea:55:29:01:a6:b6:a0:a1:
         d2:44:2b:9f:46:17:fc:da:ac:30:7a:30:e4:23:dd:a7:1c:64:
         33:0b:30:08:7b:f7:e0:8e:54:92:47:9e:fc:ed:ec:8c:f1:8c:
         e6:a6:83:6c:07:55:03:4f:f1:78:20:42:22:78:c6:3a:b8:50:
         df:7d:6c:89:c3:74:38:43:e3:82:a0:15:5d:11:1a:1c:c9:6a:
         19:b5:17:d9:05:4e:aa:2d:54:67:71:f1:e9:50:b1:86:99:ee:
         c7:94:82:3a:96:22:d1:3f:ff:2e:4e:98:78:1c:d0:74:d6:78:
         b2:70:74:5b:cb:4d:c8:9f:7a:90:16:1a:78:4d:08:71:c9:4e:
         a8:9f:7f:fb:28:6e:5d:82:cc:88:14:9a:1f:b3:53:06:54:19:
         18:4d:33:64:4b:c2:85:3b:d4:c9:b7:34:61:3c:27:12:15:6d:
         40:03:bf:6d:76:aa:ff:e8:ba:83:4d:00:f6:cd:0f:86:71:88:
         56:fe:b7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:08:10 2026 by rpki-client