Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File:                     2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier:          +SZGEaFrIuN9IM+Vcx9S6FYqBxBaKpmgEADX1L6JCXo=
Subject key identifier:   C6:7F:3D:F4:7F:61:79:A0:9E:7E:3E:DE:66:18:EB:29:7E:6F:97:7D
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer:       /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial:       019EDE0A4902A2D4A39F9D546593EAE780F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number:          1015
Signing time:             Fri 19 Jun 2026 04:01:16 +0000
Manifest this update:     Fri 19 Jun 2026 04:01:16 +0000
Manifest next update:     Sat 20 Jun 2026 04:01:16 +0000
Files and hashes:         1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: 5cjrYxpE8WaxHfUGhs1lamcohLul5th9ZfIzL2KOOxQ=)
                          2: lfk8mpf-5xapMajz92ZL6z0nPMA.roa (hash: JB5YGARWt9JTsH5kYi0wJ9fz5K5BaCEyt+jmAjdRDCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:de:0a:49:02:a2:d4:a3:9f:9d:54:65:93:ea:e7:80:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
        Validity
            Not Before: Jun 19 04:01:16 2026 GMT
            Not After : Jun 20 04:01:16 2026 GMT
        Subject: CN=c67f3df47f6179a09e7e3ede6618eb297e6f977d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:68:5f:f9:86:5c:1f:98:eb:72:ce:ae:da:
                    86:e9:4f:22:0a:70:95:93:ed:e6:38:e8:5c:d1:8c:
                    e7:d7:55:9c:38:9a:c1:24:76:2e:01:af:62:18:a7:
                    4b:47:72:05:b0:aa:2f:dc:55:2f:0a:c3:e3:30:f6:
                    e8:44:ac:ed:b4:79:a9:8f:48:de:f2:c2:9e:f9:d4:
                    1d:d6:5d:18:1c:97:b9:f8:c3:0d:84:72:aa:e4:26:
                    e0:38:f6:7f:8b:30:36:49:39:80:19:f1:bf:d5:f9:
                    4d:42:22:64:e9:15:a8:b3:e5:35:db:b0:5d:9d:33:
                    21:fa:d5:c7:9a:b3:ce:b5:b7:72:ea:a0:ea:50:a7:
                    62:81:d1:39:89:51:52:8c:15:7d:60:2b:41:b8:b8:
                    60:ba:ef:54:4f:bc:6d:09:7a:44:66:f7:7c:9d:83:
                    99:c8:40:1f:ca:5f:bc:46:62:36:c9:1c:a1:5e:e1:
                    5d:32:ab:47:d2:66:8b:02:74:59:4c:21:8b:86:ee:
                    8a:04:59:9c:75:82:26:14:9b:c3:90:39:4c:12:4d:
                    4a:57:e4:04:15:fc:97:c0:81:ba:0a:3f:b0:7b:c8:
                    39:cd:6d:53:64:6e:95:1f:fb:96:78:27:d5:0e:34:
                    96:21:66:38:ff:9f:a2:13:8f:59:83:bd:b1:42:95:
                    90:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:3D:F4:7F:61:79:A0:9E:7E:3E:DE:66:18:EB:29:7E:6F:97:7D
            X509v3 Authority Key Identifier:
                keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4d:b5:5b:25:1c:90:f0:ea:45:76:a0:f7:57:00:e8:ac:72:
         85:42:fd:8f:88:f4:ec:71:8f:75:36:03:0f:93:af:34:f9:52:
         ff:d7:7d:b5:0e:31:d9:ce:58:fa:87:fe:35:2f:51:15:d0:ec:
         91:7f:16:8c:e7:dd:d4:96:42:96:82:3a:8c:25:76:c9:48:7f:
         e7:26:fa:06:0f:88:f9:6b:b0:76:e5:81:66:e4:53:5f:59:17:
         12:7d:d7:62:fc:35:d2:ed:ca:27:61:86:08:0f:38:39:30:16:
         be:a9:34:2d:ac:5d:55:7f:9f:fb:68:65:0b:6b:c4:c1:b0:62:
         68:eb:6c:c8:10:a6:7b:fd:6a:22:59:60:e8:a5:ce:2d:a5:6a:
         d6:9b:e0:a2:d6:3b:6e:c9:a4:5d:74:e7:db:5d:e9:a6:49:63:
         a7:32:43:6c:0a:9e:66:d3:34:6d:3b:2b:62:a3:21:5f:76:63:
         ed:5d:f9:35:e0:a7:07:2d:3f:fd:b6:66:9b:0b:34:20:f1:89:
         19:b6:64:90:61:09:96:0a:33:40:aa:ef:aa:1c:7d:e1:4a:99:
         54:2c:b5:b1:48:50:bb:4f:e6:8d:a4:0a:f0:1e:4e:6f:cf:47:
         1b:d1:f4:6d:a8:75:d0:8f:f5:94:ec:d1:4b:59:26:83:9c:1d:
         9b:18:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:18:20 2026 by rpki-client