Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File:                     eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier:          aZE4GD9fGjcwg+7Ax4fSEA2T1jry4nQA7G9+++0xFNE=
Subject key identifier:   3B:D0:D9:CC:41:09:AF:79:62:93:06:F6:74:82:7C:A7:E7:1A:E0:3B
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer:       /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial:       019F04E15820A695BE6C85BD39C4D211E593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number:          147C
Signing time:             Fri 26 Jun 2026 17:01:44 +0000
Manifest this update:     Fri 26 Jun 2026 17:01:44 +0000
Manifest next update:     Sat 27 Jun 2026 17:01:44 +0000
Files and hashes:         1: UPPv-d05KLxtS4t0vBV_WgGiCRc.roa (hash: gDvcPLVEDvmXuVVyEbVZE7xY3E+m8q0jOR+2dZVBJu0=)
                          2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: 1F5miE8wyB+VL/Qv1IB4bq0b0xPJg/sh0x3cJ9ntZUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Jun 2026 15:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:04:e1:58:20:a6:95:be:6c:85:bd:39:c4:d2:11:e5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
        Validity
            Not Before: Jun 26 17:01:44 2026 GMT
            Not After : Jun 27 17:01:44 2026 GMT
        Subject: CN=3bd0d9cc4109af79629306f674827ca7e71ae03b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:6f:b1:1f:d5:0d:b7:46:4e:e1:c3:b1:1e:
                    54:54:76:38:8d:08:e9:0b:38:57:46:87:f6:c6:30:
                    09:cc:d4:00:de:41:64:dd:b8:4c:ba:a8:a2:a5:92:
                    56:01:32:8d:46:98:e7:dc:87:e3:11:02:20:0b:ef:
                    cb:83:44:ec:e3:8c:e4:aa:dc:af:fd:c0:16:5e:78:
                    e1:ce:a9:93:9e:bb:fd:ec:48:de:72:b1:11:d0:05:
                    fc:8d:b1:88:30:a2:0e:2a:a7:5a:8b:76:59:d1:a4:
                    4b:9b:d7:04:a8:1c:da:04:e4:09:7a:f9:1f:95:b5:
                    ea:22:b1:35:30:12:6d:89:f9:7c:e5:f9:12:c2:19:
                    f6:49:10:bb:2f:11:dc:c3:38:1b:73:8f:68:0e:9e:
                    79:63:6b:03:8b:c5:9b:ed:fe:3a:04:0e:fd:08:c8:
                    24:b9:62:44:2f:d6:e3:d8:2e:28:dd:8c:37:40:b5:
                    ea:dc:f2:78:6b:ac:f6:7b:93:93:d8:10:0c:ea:54:
                    74:50:a8:d6:7e:dd:27:21:79:6f:ae:d0:14:39:63:
                    5d:f6:7a:ba:ea:e4:73:83:39:1a:03:38:86:3c:a3:
                    4f:92:88:44:5c:72:de:3f:80:4e:dc:d4:c9:92:49:
                    22:7f:82:5f:bd:3f:7c:4b:18:ad:63:54:aa:6f:c8:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:D9:CC:41:09:AF:79:62:93:06:F6:74:82:7C:A7:E7:1A:E0:3B
            X509v3 Authority Key Identifier:
                keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:6e:db:0c:30:ea:1b:65:3f:e9:09:ef:de:96:96:e6:83:be:
         fd:85:a9:e9:22:ae:3b:4e:6a:f7:cb:f5:29:fc:3f:68:4d:52:
         9e:d3:ae:fa:cb:34:e3:1e:55:dc:27:a5:6b:95:8d:17:b7:1f:
         ef:8a:96:2e:c9:f6:3a:c4:9e:26:6f:c3:83:7c:e6:5c:cb:41:
         86:b8:bc:88:a7:0e:0b:3b:60:e0:32:81:b6:20:f9:4b:d4:b4:
         bc:38:63:9e:b6:30:40:0a:5f:b5:80:3c:88:40:c6:3b:27:23:
         27:c5:08:2b:21:1a:b9:73:b5:2c:f1:16:02:43:05:dc:cb:fb:
         9d:e8:bd:e3:9a:14:61:d9:8f:83:17:d6:82:98:a7:2f:34:45:
         00:16:85:69:d3:06:58:e1:ae:da:12:63:9a:48:26:38:52:5c:
         77:fe:aa:c2:40:73:c9:fe:9b:0e:4d:f7:28:3c:8e:76:68:9f:
         09:7b:1e:d4:d9:db:84:bf:2c:c4:ea:5d:25:e2:f2:7c:d4:93:
         4d:df:b7:25:13:03:43:6e:82:a2:de:91:84:79:53:f3:ba:1e:
         07:fb:80:97:66:9c:44:89:03:77:46:09:06:17:1b:34:50:72:
         23:3d:32:74:10:09:82:c0:95:d6:ab:18:4c:ac:da:6d:3e:b2:
         06:07:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 00:07:51 2026 by rpki-client