Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
File:                     E-wlUTMqDDL7dyXQaVgta1C-Np8.mft (raw, json)
Hash identifier:          QZAzGmwP671ySof+BcyYdSbv4TJmMPLbbBfA8D3VeZc=
Subject key identifier:   DB:C7:2A:19:EB:E3:EC:76:BF:53:D0:DA:BD:C0:33:BF:D8:4F:AE:67
Authority key identifier: 13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F
Certificate issuer:       /CN=13ec2551332a0c32fb7725d069582d6b50be369f
Certificate serial:       019F1942ECB9516BAFF3DFE8D3E4CF72D35E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
Manifest number:          0C68
Signing time:             Tue 30 Jun 2026 16:00:44 +0000
Manifest this update:     Tue 30 Jun 2026 16:00:44 +0000
Manifest next update:     Wed 01 Jul 2026 16:00:44 +0000
Files and hashes:         1: E-wlUTMqDDL7dyXQaVgta1C-Np8.crl (hash: JW5DxGjfbWBmAaaqSx2XWEZg7JA/bhzmXyYJAIpnoKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:42:ec:b9:51:6b:af:f3:df:e8:d3:e4:cf:72:d3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ec2551332a0c32fb7725d069582d6b50be369f
        Validity
            Not Before: Jun 30 16:00:44 2026 GMT
            Not After : Jul  1 16:00:44 2026 GMT
        Subject: CN=dbc72a19ebe3ec76bf53d0dabdc033bfd84fae67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:90:e5:e4:e6:a2:a8:c3:6f:0f:12:80:a0:8a:
                    3b:27:5b:ad:f6:c6:26:e6:3c:0f:3a:0a:1f:8e:bd:
                    ba:64:ad:b5:e3:90:8b:8b:5f:00:11:45:bd:2a:e6:
                    85:23:f9:45:d2:1b:e4:b1:00:fc:1a:6e:41:f3:b5:
                    91:96:95:3c:4d:3f:0c:d3:58:83:1f:2d:12:f0:3b:
                    ec:f3:3e:8d:28:a8:77:5e:41:12:eb:d7:2f:73:d7:
                    6c:90:43:3c:dc:b2:16:cc:a7:be:fb:37:f8:e9:52:
                    ed:ec:f0:c1:89:06:37:5f:8a:32:d9:48:63:87:28:
                    cf:c1:1e:0b:4f:0b:69:f1:38:42:cf:06:ac:2b:11:
                    f4:c8:57:b3:90:b1:d8:9f:70:fa:8f:f7:2e:d6:e5:
                    f0:c0:3c:49:3b:82:6b:6e:6c:3b:80:89:e3:7d:aa:
                    8e:e8:ee:1a:2e:75:60:f2:ea:26:4a:5f:b5:32:57:
                    7f:d7:88:29:70:60:09:0e:55:b7:1f:d4:ee:fe:4c:
                    39:60:a6:11:1f:f4:18:6d:b2:47:2d:cc:76:e3:92:
                    14:b4:48:08:bd:88:0c:10:02:d3:9f:b1:53:08:eb:
                    7a:5b:5e:d0:9d:f3:20:a7:7f:13:ca:23:20:d3:74:
                    2a:63:81:2a:08:b4:ab:32:0d:69:88:cd:eb:87:28:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C7:2A:19:EB:E3:EC:76:BF:53:D0:DA:BD:C0:33:BF:D8:4F:AE:67
            X509v3 Authority Key Identifier:
                keyid:13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:cd:9b:cd:9d:a8:1c:1c:4d:e1:b2:84:65:9f:03:0e:80:19:
         53:4a:9f:fd:7f:18:cb:63:09:08:cd:2e:d2:e1:aa:51:da:60:
         d5:2d:93:54:6e:20:8e:f7:ab:e7:a9:06:29:e9:d6:b1:21:88:
         1c:c9:e1:51:f1:3e:c8:6c:4d:99:74:98:58:d8:c5:49:17:70:
         ae:6a:47:88:f8:3f:d7:8b:ee:90:fd:f2:38:8a:6f:29:18:a2:
         16:09:6f:81:8d:de:74:60:74:a8:de:23:2f:7f:d1:69:c1:b7:
         9c:0e:38:86:09:f1:ce:1e:24:54:15:46:bc:45:aa:46:a7:05:
         43:6f:7e:c8:a8:61:d1:f5:c2:65:68:12:66:19:db:80:5b:e3:
         6e:53:b8:13:61:10:a1:20:f1:b8:0c:c7:4f:8d:b1:19:20:fd:
         7f:00:0e:db:31:5e:61:97:ed:29:31:4d:b8:6d:90:a0:48:00:
         3f:a0:6b:c9:f6:9c:d0:bc:56:0b:91:ef:4e:de:53:3d:92:a7:
         80:10:83:2d:47:7c:82:72:82:42:a5:1e:3f:32:f3:c6:9d:be:
         63:a3:67:f7:9d:e3:d7:0d:cb:b3:0a:23:8c:25:3b:b1:54:fa:
         1f:2a:45:f7:f4:72:aa:bb:75:50:5c:83:9a:68:b1:07:cb:2d:
         4e:61:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:15 2026 by rpki-client