Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File:                     AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier:          Z7cAYL+/FEwQjSn/TqJDUgGlRJGqYXXjxIZ+BJbPSTA=
Subject key identifier:   8F:D3:A2:A6:41:56:C6:C8:9B:46:42:56:5B:F7:56:E4:B8:09:7A:8D
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer:       /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial:       019F194421EB8BC32F621A49A112BBB1E3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 16:02:03 +0000
Manifest this update:     Tue 30 Jun 2026 16:02:03 +0000
Manifest next update:     Wed 01 Jul 2026 16:02:03 +0000
Files and hashes:         1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: RAPFgLOIYk5pT+17YYw2aDMeGvZnWeSMSOTONm8ygNc=)
                          2: ScJK2ivQIxsBlhkpxe_Fy41_8xc.roa (hash: TSQwrA/vSc9MyjbkX9qzVifKTyWOKyvXJf3qefMx3B4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:21:eb:8b:c3:2f:62:1a:49:a1:12:bb:b1:e3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
        Validity
            Not Before: Jun 30 16:02:03 2026 GMT
            Not After : Jul  1 16:02:03 2026 GMT
        Subject: CN=8fd3a2a64156c6c89b4642565bf756e4b8097a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:96:f7:08:b2:7b:b1:ad:0c:7e:f6:d4:e2:
                    9b:47:a4:2a:ba:96:ea:01:a1:02:d0:f2:24:1d:d1:
                    9e:71:d3:6c:54:a2:5c:a6:80:7b:12:80:fb:21:73:
                    3e:5f:56:d4:b6:c1:ab:ae:07:a3:a1:7e:af:28:a1:
                    71:41:8c:ff:3c:58:b9:d9:30:c2:49:d6:42:ef:41:
                    bb:59:7e:d4:83:1f:5f:c6:48:5e:df:b2:e8:93:a9:
                    d0:af:94:c4:3d:2c:7a:4b:e3:13:2e:de:fb:26:b0:
                    f5:1b:79:7a:70:ce:34:cd:d3:c7:fd:54:bd:76:44:
                    b0:7f:27:2e:6a:48:0b:44:fc:5e:eb:16:b5:e7:e6:
                    e9:d4:a9:66:cb:c4:9e:fd:fd:01:6f:c6:e6:a6:b6:
                    c3:be:0e:dd:df:dd:f8:ac:7d:83:c7:5b:4f:d2:09:
                    89:e9:7f:99:44:3e:ea:fe:db:46:cc:85:df:ed:d8:
                    bf:d2:a7:bf:a4:61:45:83:d6:58:9c:58:d9:fe:c9:
                    bd:47:13:50:1a:20:a5:56:ec:a3:0b:20:74:68:01:
                    e3:d3:2e:b0:48:bd:bf:04:22:3a:ba:1c:c1:48:c7:
                    41:fa:9b:04:56:99:97:7a:ff:a3:47:f6:4e:82:43:
                    54:98:ae:b9:e3:92:fc:0b:d3:e5:c8:c0:f6:12:07:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D3:A2:A6:41:56:C6:C8:9B:46:42:56:5B:F7:56:E4:B8:09:7A:8D
            X509v3 Authority Key Identifier:
                keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:61:62:50:f7:a0:9a:76:56:53:50:15:ac:31:3e:59:e4:43:
         02:cc:a7:16:c1:cd:1e:3f:78:d4:ee:26:85:84:00:47:02:34:
         de:c1:4b:9e:23:2a:aa:df:b1:58:dc:58:e3:45:f5:bf:7e:88:
         c5:31:63:b0:b8:ae:a2:04:43:08:ee:b4:ae:39:e8:b2:dd:d6:
         91:03:b0:38:b7:27:2a:46:71:eb:45:3f:2b:eb:77:3d:ad:4f:
         35:8d:6b:33:6e:31:d8:87:94:f7:54:4e:e2:66:d6:03:fd:eb:
         af:fa:ab:52:95:97:00:3c:1b:94:89:4a:a3:7a:cc:be:96:1d:
         70:7c:72:42:ce:06:92:9b:2b:63:b2:be:8e:95:ad:67:fc:06:
         c5:07:7d:40:49:f9:b1:28:a9:51:dc:7a:30:0e:0f:c7:71:37:
         48:ec:4e:3d:b0:25:24:36:ce:ce:73:23:22:f9:cd:c6:33:c3:
         84:18:04:da:8f:2f:23:2a:d4:72:c3:bb:a1:ce:e1:6a:12:6c:
         de:79:06:00:c9:44:17:33:ef:03:21:a8:a9:16:34:6b:ca:95:
         42:f1:14:7d:31:e5:82:af:7d:50:5e:cf:37:1a:a7:ad:81:c1:
         72:21:8e:24:53:bf:c9:9f:0b:7e:d3:bf:32:1f:61:a8:af:cc:
         98:82:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:47 2026 by rpki-client