Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
File:                     d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft (raw, json)
Hash identifier:          gmMRpR6D8/WqZNH1CEbr3vMrRpL1QHi9C+PH0cclnNQ=
Subject key identifier:   E4:A7:65:29:EB:8C:5B:6A:EB:4B:90:62:9D:15:5F:34:23:3C:57:65
Authority key identifier: 77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
Certificate issuer:       /CN=77724112f0285d830c87ee3256d51968f15bb90b
Certificate serial:       019EB7D7E9525082B629E5995A6D645CB46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
Manifest number:          0113
Signing time:             Thu 11 Jun 2026 18:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:40 +0000
Files and hashes:         1: 6p1ednwrZQ_JDbcmNlbUx0LPSFQ.roa (hash: hIJJSdmlqRlS5NfeTFhoCLt5Vs93+x5E1RzMdfdB3oA=)
                          2: d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl (hash: hc9bAtFRYqo+p1V2ulJuJW/68VT1IKA4nI8llu/CMV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:e9:52:50:82:b6:29:e5:99:5a:6d:64:5c:b4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77724112f0285d830c87ee3256d51968f15bb90b
        Validity
            Not Before: Jun 11 18:00:40 2026 GMT
            Not After : Jun 12 18:00:40 2026 GMT
        Subject: CN=e4a76529eb8c5b6aeb4b90629d155f34233c5765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8a:f1:69:c0:e8:c6:30:d8:e1:ac:1a:2d:1a:
                    c8:52:47:6d:75:26:7a:92:e8:76:7a:f6:32:de:f4:
                    0c:07:2b:74:da:7a:86:43:f0:17:9e:91:a5:5c:c7:
                    35:89:68:fa:05:82:a7:94:37:59:59:25:83:8f:d9:
                    4a:0b:7c:97:b8:67:ba:cc:8b:fb:ec:e4:a3:7d:6f:
                    a2:ce:c8:eb:fc:bf:b4:22:e9:45:53:b5:43:5a:e7:
                    e2:e1:80:6c:d6:9a:91:1b:98:51:91:fa:e9:f8:bd:
                    80:7b:63:3f:c8:3c:da:03:08:44:e0:6b:8d:6a:66:
                    b5:6c:38:09:c7:1b:35:81:02:f4:b2:68:3a:92:40:
                    f2:3d:bc:2b:14:7a:38:ae:e7:a1:7e:80:e2:a4:9d:
                    1a:bd:1e:a7:37:35:19:a6:82:d6:7d:22:24:61:29:
                    e2:4a:ab:06:ae:c1:29:f5:11:71:c5:41:f5:8d:fb:
                    93:cb:b3:e4:4a:4f:a9:6d:28:94:98:51:f2:49:92:
                    39:b0:57:39:bb:18:3e:f6:a8:de:c7:7b:b0:8f:36:
                    31:ac:8e:75:c2:77:f7:a8:41:2d:fa:68:0c:b7:72:
                    43:62:f8:c0:ea:32:cd:c3:04:a0:74:75:1e:b4:9f:
                    b7:89:44:e1:07:bc:bd:f1:9c:e9:b8:0a:5f:88:6a:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A7:65:29:EB:8C:5B:6A:EB:4B:90:62:9D:15:5F:34:23:3C:57:65
            X509v3 Authority Key Identifier:
                keyid:77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:8f:75:45:ce:b9:a5:98:c3:76:f4:5a:f9:e1:36:45:a9:
         8f:df:3b:b5:70:74:62:89:4d:4d:41:2a:38:19:28:03:82:49:
         ff:2b:05:04:bb:7e:69:4a:86:40:10:c9:ec:63:ca:0d:34:33:
         56:54:ce:22:ee:a7:0a:6a:0b:1f:18:83:ad:4e:a3:36:42:35:
         9a:0c:64:6a:da:77:fc:be:30:81:b6:8b:97:5b:cc:56:2e:b9:
         ee:08:4d:d0:f7:77:14:53:c0:24:dc:ee:13:3a:af:82:cf:b5:
         14:f1:bd:cd:4f:1c:f9:af:cc:fb:7f:b6:1b:56:c8:b5:a6:65:
         3a:0c:04:9f:39:00:7f:ae:ad:7b:a3:28:96:f1:91:ed:79:c6:
         26:30:7d:f4:6e:7e:f8:a8:ce:a0:7a:ba:f9:4d:7d:11:03:ab:
         1f:56:bc:51:fb:01:5c:a2:1f:62:2f:8b:ab:9a:33:74:f2:82:
         b6:ba:e8:95:43:1a:11:c3:bb:eb:31:85:b0:ca:c4:8e:6e:b8:
         2e:55:8f:a0:bb:75:de:8d:94:40:09:cf:96:3e:8d:c9:28:71:
         8b:b3:aa:de:cd:14:50:48:4d:a0:ae:dd:40:23:7a:50:2e:a8:
         62:3e:f7:e3:2a:bf:5e:b6:f5:f6:ce:21:03:36:6b:29:1b:41:
         1b:e8:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:35:30 2026 by rpki-client