Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File:                     1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier:          4fooY4D/C5xErDvZaA4Qst1KDN8xZCV6OrF7Nvu4n1Y=
Subject key identifier:   E5:A3:9B:14:5A:A7:2D:AE:B1:3B:BB:22:74:0C:51:31:E6:08:D5:DB
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer:       /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial:       019F10ADFE7321933A2435FE6D7E1F63A586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number:          1989
Signing time:             Mon 29 Jun 2026 00:01:05 +0000
Manifest this update:     Mon 29 Jun 2026 00:01:05 +0000
Manifest next update:     Tue 30 Jun 2026 00:01:05 +0000
Files and hashes:         1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: 8t83kK9TB1/MlwgkY6LFMzwOiXMsn4yQSb173TODXTU=)
                          2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
                          3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 22:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:ad:fe:73:21:93:3a:24:35:fe:6d:7e:1f:63:a5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
        Validity
            Not Before: Jun 29 00:01:05 2026 GMT
            Not After : Jun 30 00:01:05 2026 GMT
        Subject: CN=e5a39b145aa72daeb13bbb22740c5131e608d5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:ec:2b:4e:b6:88:ec:da:a8:2d:47:a7:64:
                    e3:5a:a4:2b:24:27:a3:08:58:77:ed:3b:42:bc:60:
                    d6:a1:29:6f:2c:6b:3a:85:52:98:8f:88:bd:4f:38:
                    aa:7c:fc:40:c6:1d:8d:2a:d3:36:74:2f:c0:ec:66:
                    34:bd:60:5f:f3:41:0a:39:ed:fb:9c:1e:ed:0b:21:
                    0e:16:d3:dd:a6:e5:6c:de:63:ba:5b:ad:73:13:2b:
                    4d:b2:78:29:b6:b0:eb:42:6c:d3:92:44:12:a7:79:
                    19:cb:60:cd:35:96:a0:b7:98:d2:be:ed:b6:83:60:
                    cc:68:11:3c:21:6e:41:be:06:06:98:18:3a:a0:a5:
                    19:69:13:06:6f:58:0f:90:c7:88:a4:fd:ee:fb:cd:
                    e9:b7:de:6f:a1:db:e3:7b:ac:aa:30:6b:b9:83:21:
                    ee:47:db:53:cb:0a:ab:68:b1:2d:58:e1:ea:f0:65:
                    c0:d8:32:c5:68:8d:bd:cf:fc:cd:f6:a2:5f:8a:4c:
                    bd:13:6a:5d:4b:7b:85:72:b1:5f:cc:09:fb:56:c5:
                    e2:d5:3a:a3:74:69:6f:d1:6d:17:b4:df:29:7f:73:
                    8a:8a:e3:c1:82:48:82:68:d8:ef:d0:0a:5d:b4:85:
                    8c:76:72:54:f6:5d:18:fd:28:e8:b8:16:3b:cb:88:
                    53:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A3:9B:14:5A:A7:2D:AE:B1:3B:BB:22:74:0C:51:31:E6:08:D5:DB
            X509v3 Authority Key Identifier:
                keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:6c:5c:93:95:0b:7f:3b:51:7c:a8:8e:6c:53:25:16:f9:
         f7:5e:ae:7c:4a:6b:b3:39:54:47:e6:73:eb:70:ec:5b:de:55:
         2b:e8:c4:27:31:eb:57:fb:c6:18:69:a7:6f:2f:09:5c:bb:41:
         64:00:d2:f2:ad:f7:d6:91:7e:85:5a:c9:97:75:8a:14:08:ef:
         9a:9f:00:d5:71:5c:1e:70:ce:9a:54:f4:c6:f4:9a:b3:51:ae:
         a3:dd:d6:f4:29:e3:85:7e:70:93:8f:d9:62:66:5f:2a:9f:a0:
         7a:92:f8:ef:3e:9f:0f:11:20:89:ad:36:e2:34:c5:ca:60:dc:
         36:0b:f8:3f:60:b0:0e:b7:4d:d1:e7:a6:03:58:2a:58:4a:34:
         16:32:aa:ea:90:eb:62:1d:9f:2c:77:d6:9a:58:1d:14:52:bf:
         67:30:0e:b0:bf:01:dc:f4:fe:7e:2c:68:44:e5:9e:27:ce:aa:
         3c:65:f8:49:ec:f7:b1:00:9d:3d:e3:c7:c2:6f:00:ef:7e:e1:
         94:45:76:6a:a2:37:ff:ca:90:83:21:a4:f7:e1:ca:6b:2f:ee:
         4e:77:35:61:87:75:14:b6:8b:b1:6a:4a:34:7a:2e:46:38:0c:
         f4:51:8f:dd:ec:30:cb:e2:7d:b8:dc:87:03:5d:15:81:d0:48:
         e7:17:ea:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 04:01:19 2026 by rpki-client