Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File:                     INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier:          GYQun24wrWv6A/Q3EGwp7fmWGuXffJozmfqnGg9kaSs=
Subject key identifier:   BB:91:ED:78:58:B2:92:25:E8:19:1F:CB:2C:CD:DD:9F:22:47:72:8D
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer:       /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial:       019F10E554B9380375F1D6991B4A71C9E7EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number:          1980
Signing time:             Mon 29 Jun 2026 01:01:32 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:32 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:32 +0000
Files and hashes:         1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: PUNS7KFrUkzuawbw9K2IpLZ9cYQgJwSZ4f08rYQVUqU=)
                          2: V8NlnKjUgS7bj4rUkCz5LctnTTY.roa (hash: 2V4IKo8nS+06Kfv+fwmatbojuyWYf1XN4kaAl/BcTuo=)
                          3: oEH5CL4Krryfh-iShKBtkq07VfQ.asa (hash: GkycII0/qjAz0UiuBL6s5szZ1IchdfI3Luf3s69wkYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e5:54:b9:38:03:75:f1:d6:99:1b:4a:71:c9:e7:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
        Validity
            Not Before: Jun 29 01:01:32 2026 GMT
            Not After : Jun 30 01:01:32 2026 GMT
        Subject: CN=bb91ed7858b29225e8191fcb2ccddd9f2247728d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:91:20:97:00:01:e9:35:6c:dc:e1:80:3e:
                    a3:f1:67:ce:0c:e0:b9:00:8b:f0:75:14:8a:9b:57:
                    79:f0:a5:a4:08:86:8c:d8:3e:1f:3f:cc:ef:f8:94:
                    42:b0:b3:a0:bf:ad:37:0d:a3:6f:a0:50:88:f4:21:
                    23:99:9f:e5:14:74:f6:77:05:79:24:91:a9:1e:77:
                    a1:62:e5:06:45:e7:a7:24:f1:64:66:12:52:20:6d:
                    36:59:49:74:ee:39:2a:ee:be:b8:de:3a:ec:a6:31:
                    08:16:11:5f:91:85:1b:e5:28:9e:c1:ac:8f:86:b4:
                    d6:33:c8:28:93:44:83:a9:b6:43:d4:08:f0:4b:df:
                    97:13:df:ce:2c:45:5f:ec:89:14:50:fe:19:9c:2c:
                    8f:f6:3c:f2:7e:7d:30:66:72:e6:bb:1a:9a:97:87:
                    c3:f6:42:ee:78:2e:22:ac:43:29:22:73:66:64:9a:
                    b8:1b:28:61:89:5d:44:82:c3:77:c5:28:63:b6:f4:
                    fb:8b:c7:67:a5:80:bd:4a:0a:09:93:6e:09:6a:eb:
                    60:26:aa:ab:f9:85:69:8e:cc:45:a1:9a:fa:af:6c:
                    7c:e5:2c:27:ab:a9:8f:4a:24:99:d5:8a:b8:ac:a7:
                    d2:c1:a8:5c:a2:5d:5e:d8:3f:b7:d9:03:54:7e:d7:
                    de:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:91:ED:78:58:B2:92:25:E8:19:1F:CB:2C:CD:DD:9F:22:47:72:8D
            X509v3 Authority Key Identifier:
                keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0f:4c:56:a2:e1:05:c5:49:e9:99:47:b2:99:0a:69:23:06:
         01:73:11:96:83:3c:96:75:0a:7c:ef:00:07:4d:9a:2a:ab:6a:
         7b:d9:7a:8f:74:78:60:8d:1a:d5:94:ba:0c:14:bf:b5:4c:b4:
         94:2b:63:d2:b4:0f:b0:ed:87:fc:6f:03:9b:f1:21:0c:1e:48:
         13:f5:84:92:dc:bd:01:d8:65:01:e7:37:81:9e:7f:f6:d1:50:
         ac:e9:11:5f:67:00:81:60:21:2d:a9:77:ea:4b:66:a2:05:72:
         c5:31:a6:6e:4a:f6:de:1f:bf:63:18:c0:56:f1:14:29:04:98:
         fa:16:37:43:84:ee:f9:05:e6:b9:f7:58:cd:0d:37:e7:8a:e5:
         71:a4:b1:a7:db:4a:ff:d6:4d:82:73:43:4a:14:71:a3:34:ab:
         c4:3a:45:88:c6:b5:35:1f:22:dc:7c:8e:39:09:9f:5f:82:6e:
         ef:74:b7:12:77:e4:7c:24:ec:5c:3d:41:93:03:dd:45:a0:e1:
         33:71:73:88:88:e3:fd:08:54:85:8e:8f:ca:f0:2f:07:94:33:
         59:3f:6d:c8:af:85:c9:90:f2:cc:44:4e:27:7d:a4:71:74:1d:
         f4:56:3c:7f:5f:08:81:79:38:2a:bb:b8:4d:f5:4e:b1:7b:32:
         16:a9:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:03 2026 by rpki-client