Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
File:                     dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json)
Hash identifier:          CFcvor9uuoDI+ZcAbgTHYaTXqiTKqy+ybTymZpWkfqw=
Subject key identifier:   71:20:96:5E:20:E6:3C:1F:EE:DC:9E:10:16:E2:5A:2A:D1:53:82:06
Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C
Certificate issuer:       /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
Certificate serial:       019F0C63B9E8313C11141D022E9E776DD389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
Manifest number:          022D
Signing time:             Sun 28 Jun 2026 04:01:29 +0000
Manifest this update:     Sun 28 Jun 2026 04:01:29 +0000
Manifest next update:     Mon 29 Jun 2026 04:01:29 +0000
Files and hashes:         1: IUXK5owGJRJBQqIOmgn7bKscCRQ.roa (hash: 3cmce/T6z+IA9rzyeoaTbVrr0D6UCYaIjKkeAxLWn1c=)
                          2: SiTbwMGtFl7yz90TOcACIfl_jbM.roa (hash: bZN6RaXx0CwbNISBjFsu0G8tFXjESLVVXcSOexStvD8=)
                          3: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: xB/5H6zUwMcyMorpTtt5aC7KBkZ4h5pClrXufQ1xAjI=)
                          4: ymLzZ-VhmhqNEGONzE9KW-m04rM.roa (hash: RinsNGJ2DGv43ndnKRTv8Ja4sLQDd8GhBHpIm7eFfCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0c:63:b9:e8:31:3c:11:14:1d:02:2e:9e:77:6d:d3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c
        Validity
            Not Before: Jun 28 04:01:29 2026 GMT
            Not After : Jun 29 04:01:29 2026 GMT
        Subject: CN=7120965e20e63c1feedc9e1016e25a2ad1538206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:e1:c1:6b:9b:ff:da:ce:75:21:f8:34:17:
                    b8:85:0a:51:e6:de:32:77:d6:3d:cb:74:7b:e6:8a:
                    67:80:42:9e:3d:01:95:d7:84:4d:49:b1:2c:85:e7:
                    2c:4c:b0:aa:e9:f9:6f:77:44:05:d1:0f:23:f7:0a:
                    f3:2c:75:c7:57:7e:0a:44:dc:0e:99:41:74:1e:c9:
                    fe:d0:0a:2a:d9:01:8f:e9:59:63:67:ab:a5:c9:a3:
                    45:5c:fc:b9:70:78:22:8e:15:ba:43:ae:a5:8f:48:
                    40:6f:e1:ea:00:3c:2c:c9:0c:be:0a:e0:3d:53:be:
                    7b:c3:80:7b:25:85:59:59:51:f4:1e:0b:40:fc:1c:
                    e2:4e:72:3b:6d:a3:a9:1e:de:28:1b:2d:e2:f5:ea:
                    14:83:8c:91:55:9d:3d:68:f9:86:f9:9d:c1:c8:ad:
                    d2:6b:dd:27:e7:2e:14:52:41:5d:36:07:22:08:41:
                    73:2c:9a:05:01:64:4a:54:04:3e:f8:7e:4f:c8:ea:
                    53:ba:c2:d9:87:88:db:0a:1e:fc:6c:94:82:b8:5f:
                    8a:d3:ec:3e:60:04:6f:09:f3:60:4e:76:b9:6e:53:
                    d8:ea:2c:eb:40:8e:5f:f5:c7:f6:8b:8b:4c:a3:df:
                    86:ba:6f:41:d6:d5:09:bd:ab:2a:ce:95:79:15:28:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:20:96:5E:20:E6:3C:1F:EE:DC:9E:10:16:E2:5A:2A:D1:53:82:06
            X509v3 Authority Key Identifier:
                keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:1c:27:76:84:26:e1:47:bc:64:d1:10:0a:eb:f2:d1:de:74:
         c3:b6:7b:f4:ef:e8:1c:6b:5a:32:4c:a3:74:4d:fd:2f:69:82:
         8a:2b:b3:49:12:21:1b:ff:92:7a:4b:68:57:72:20:c9:f6:40:
         b4:20:02:1f:54:78:74:e7:48:da:26:b9:84:a4:3e:57:fc:74:
         ae:eb:1d:c5:48:21:8e:62:80:96:2a:96:e4:53:7d:a8:ac:ca:
         d1:62:ee:92:f5:46:f8:61:1d:de:e3:51:ec:10:1b:ec:63:3b:
         d8:26:a5:9f:25:21:e9:f6:ae:83:02:88:db:98:c3:7e:bd:11:
         9c:ee:81:89:4b:4d:08:2b:b8:81:c8:39:94:9b:70:97:5a:a6:
         99:6b:a3:62:c5:dc:2f:c6:aa:5c:33:ba:0e:00:09:68:ad:11:
         28:41:c8:c4:a8:15:19:6a:cb:21:8e:7c:d5:22:2a:74:42:c9:
         fd:37:c4:55:74:4a:1a:fe:d3:6e:1f:2f:48:fc:f9:c4:b4:f0:
         ae:97:a5:e8:51:ba:d7:88:54:53:bd:2d:db:b2:6a:d9:bf:58:
         52:bc:5e:81:d5:b6:d7:2b:30:b9:a1:fe:7a:4f:74:2b:97:9d:
         d4:b8:31:0a:69:40:2d:cb:08:60:aa:3b:06:5b:7c:cb:44:aa:
         42:9d:fb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 07:27:50 2026 by rpki-client