Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
File:                     L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft (raw, json)
Hash identifier:          Yz1Th7+rkrEdYZWT7/2Z4AGoLK/ScZS3wH5sIIk201U=
Subject key identifier:   B7:FB:9E:05:83:CB:3D:C8:2C:79:7A:9D:19:4A:D2:1D:EE:AA:41:2A
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Certificate issuer:       /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial:       019EE932E8A0C8282C096A06DECD815EA713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
Manifest number:          093E
Signing time:             Sun 21 Jun 2026 08:01:28 +0000
Manifest this update:     Sun 21 Jun 2026 08:01:28 +0000
Manifest next update:     Mon 22 Jun 2026 08:01:28 +0000
Files and hashes:         1: L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl (hash: mJn4Wh7mQMTvyed3n1j876XUbjhd4b2UsKRDY/AXSIQ=)
                          2: mmEWbwMVtZjQGxBQLSEBMLV6FOM.roa (hash: mLo+dfNoXAcPZy5zgB6iNGDzY/FzsmVzavePETyu5qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 08:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e9:32:e8:a0:c8:28:2c:09:6a:06:de:cd:81:5e:a7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
        Validity
            Not Before: Jun 21 08:01:28 2026 GMT
            Not After : Jun 22 08:01:28 2026 GMT
        Subject: CN=b7fb9e0583cb3dc82c797a9d194ad21deeaa412a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:8b:a1:3e:b0:99:60:15:cc:5d:52:24:fd:
                    ec:aa:7d:ba:56:d1:d4:e4:54:c3:4a:f2:24:2c:86:
                    4e:72:ac:ba:e8:6a:3a:59:f1:03:28:ee:0c:79:82:
                    dc:0e:3a:5e:48:e7:81:6f:7e:71:1d:90:0e:7d:61:
                    ec:41:d5:05:4c:e3:d6:80:bf:bf:71:62:e9:5b:99:
                    33:78:83:26:30:c7:60:1e:23:a4:8a:d9:d9:7d:17:
                    3e:ed:93:6b:e6:4e:77:d7:26:d9:06:d6:c0:12:fe:
                    31:89:fa:cd:75:91:9a:40:5c:51:94:d0:39:eb:b8:
                    27:ea:60:01:47:7a:87:59:e4:f5:69:b5:96:fb:b9:
                    82:b7:b0:2b:a6:74:a5:65:d9:a7:b3:55:e3:db:ee:
                    e3:61:9f:f4:8d:d6:d4:49:c2:12:2a:08:0e:99:ae:
                    9f:b0:3d:0f:13:0e:9c:d4:eb:19:6e:37:56:13:c0:
                    71:cb:6f:29:02:fa:67:82:e8:40:21:ea:2d:49:a5:
                    f9:6f:6c:62:51:0c:64:ea:ba:32:ac:1f:03:6b:00:
                    1f:44:27:0b:4a:7b:96:91:eb:24:23:fe:50:c1:67:
                    aa:e1:44:39:8c:e8:7e:05:01:b5:08:19:39:40:b5:
                    a6:84:6c:fb:56:8b:01:57:ce:2b:3d:c4:aa:f6:23:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FB:9E:05:83:CB:3D:C8:2C:79:7A:9D:19:4A:D2:1D:EE:AA:41:2A
            X509v3 Authority Key Identifier:
                keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:aa:41:15:74:c7:63:ec:b4:64:c2:55:82:21:e4:c5:7c:83:
         1d:7d:1b:79:97:f5:12:1f:59:c0:27:6b:60:40:bd:1b:7e:f2:
         74:92:19:51:dc:da:f8:7a:b8:eb:21:d1:6b:66:de:2f:68:16:
         f9:a1:53:9c:5e:98:29:a4:12:3a:e8:32:3d:01:66:ab:9a:ad:
         7f:77:f3:12:64:26:87:1f:cb:a8:99:30:ba:0f:a0:f1:c5:8b:
         b9:21:8d:25:6c:bd:09:78:82:8f:3c:a6:2e:74:47:87:36:38:
         9d:38:84:e9:1d:f4:17:ce:11:d1:9e:ca:71:e6:72:a4:f9:b0:
         a4:8e:db:e5:c1:2e:02:7f:c2:e6:3f:ff:a0:e5:d7:0e:d6:10:
         2f:38:3b:a8:47:29:03:14:24:87:e3:a3:bf:0b:3b:6d:51:02:
         99:09:20:be:ee:f9:f8:4f:9b:04:b6:37:43:b1:52:7c:2c:70:
         ec:ad:ef:dc:6c:9c:ca:50:47:f5:e2:e4:4e:8f:ef:5c:2c:62:
         f5:45:96:f1:16:d4:bb:22:07:81:77:ae:97:67:2c:33:13:dd:
         86:55:02:cc:95:1b:f4:bb:0f:dc:fb:92:91:41:9e:99:9c:2a:
         b6:b3:62:27:ff:18:fd:21:3d:68:e6:d8:a2:2c:49:c6:14:e0:
         b1:d4:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 13:56:25 2026 by rpki-client