Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File:                     0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier:          gmhTdqgsG7jGSSGePkYPfWCeTy3OLwG1BzVO81YQtZo=
Subject key identifier:   21:1E:EF:01:8F:B9:65:6F:7F:97:53:30:36:D6:51:84:BD:AD:20:02
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer:       /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial:       019F18314DF62019831AFE5759495B386CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 11:01:52 +0000
Manifest this update:     Tue 30 Jun 2026 11:01:52 +0000
Manifest next update:     Wed 01 Jul 2026 11:01:52 +0000
Files and hashes:         1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: jKQY4tvYWrXFk7+UX/PIiHmmovxD/lHkVBN27QM/p0Y=)
                          2: qyL4pyAcBGjJOHJM0EvmdF4KW0w.roa (hash: 27Zjq50aqFTh0F3x/N5hr5Co5n5KTC4C5HqzL3GDGGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:31:4d:f6:20:19:83:1a:fe:57:59:49:5b:38:6c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
        Validity
            Not Before: Jun 30 11:01:52 2026 GMT
            Not After : Jul  1 11:01:52 2026 GMT
        Subject: CN=211eef018fb9656f7f97533036d65184bdad2002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:6e:1b:56:be:fb:3a:c3:08:99:69:72:a5:
                    27:3a:6c:14:d8:fc:9c:a7:52:0e:d6:2b:67:99:3e:
                    38:78:d9:4e:19:32:3d:29:a0:d3:25:b3:09:3f:4c:
                    30:ed:c4:d3:67:9a:ba:48:19:44:93:e2:db:58:06:
                    55:0d:0c:75:4c:d9:cf:5e:c6:b6:63:c1:31:14:23:
                    be:57:cf:83:ab:69:74:c1:4e:ea:ba:9c:e4:21:30:
                    0e:6b:f5:c3:dc:ab:47:33:7d:23:5c:97:0e:67:9b:
                    e5:f0:a0:74:f7:2c:50:28:22:02:cf:72:a6:9d:e7:
                    0e:5e:12:c5:90:08:34:0e:14:24:31:d3:b1:0e:84:
                    6c:c2:ff:ee:21:9a:01:42:5e:df:c0:d5:98:28:29:
                    23:fa:c6:7c:c6:59:7f:81:7c:6f:4d:dd:b4:8a:3b:
                    83:53:77:bb:c1:1f:b6:a8:8c:1e:e6:95:87:a0:28:
                    3c:0a:e0:48:ff:40:63:7f:cc:db:90:ed:ab:4e:3d:
                    30:fb:b7:fc:ae:e6:14:96:55:16:4a:35:e7:55:0f:
                    85:24:0e:8a:f5:ec:ea:64:ee:31:c4:ea:f3:44:ef:
                    04:be:64:10:3a:7a:fe:6a:74:ce:eb:f5:26:cb:15:
                    fa:3f:81:92:1f:61:35:94:c8:db:96:d7:32:ba:47:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1E:EF:01:8F:B9:65:6F:7F:97:53:30:36:D6:51:84:BD:AD:20:02
            X509v3 Authority Key Identifier:
                keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:46:07:86:42:44:87:09:08:dc:85:c6:3b:85:ed:68:7c:
         fc:0d:5e:23:be:73:a5:f4:e4:d8:24:07:82:c2:0b:4a:78:a4:
         14:3f:0b:b1:40:f1:92:d2:87:0d:6e:03:20:87:38:e8:c8:4c:
         72:ae:c1:84:24:bf:ba:5e:f4:da:3f:d1:da:ca:8f:14:b3:b4:
         33:fd:69:d1:3f:25:17:90:5e:10:28:47:b2:c6:6b:00:1e:78:
         db:b7:3b:95:78:20:65:46:a5:47:d8:69:49:d9:8a:dd:f5:b6:
         99:09:36:e0:50:c0:84:ee:c6:00:5f:fe:3d:d6:e9:65:85:87:
         f0:69:ee:95:b6:b9:4b:80:bb:8a:01:e7:ca:b4:39:d8:30:ca:
         11:28:f7:85:6c:1b:b6:14:98:e0:4f:e4:33:ae:29:e9:90:eb:
         0b:ee:7a:25:24:b4:d3:13:51:3d:d9:7c:96:76:de:19:e9:1b:
         c6:2d:1d:41:46:87:79:f6:73:99:eb:43:df:1b:a9:12:9c:64:
         49:e4:58:f0:d1:d9:12:c2:95:df:95:ad:c3:f6:d7:d2:78:7d:
         b2:fd:36:76:e2:6e:65:73:7d:16:c1:f4:3e:fb:78:ac:d6:a5:
         96:92:4b:93:4a:d5:4c:9b:d2:e8:84:30:d0:48:02:b1:1c:8d:
         70:13:23:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:56 2026 by rpki-client