Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
File:                     C2LPjNkLafk26CtXgBzXedcuPz4.mft (raw, json)
Hash identifier:          Dqft2glKRDowJimjDF+yYAFMz66fMY63JHo+TasOzVQ=
Subject key identifier:   C1:B9:65:4D:B1:DD:09:93:B3:B1:CF:33:8B:12:0C:DA:3E:24:F3:18
Authority key identifier: 0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E
Certificate issuer:       /CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
Certificate serial:       019F17C3957C299C918F1950DEE28295F237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
Manifest number:          0D73
Signing time:             Tue 30 Jun 2026 09:02:01 +0000
Manifest this update:     Tue 30 Jun 2026 09:02:01 +0000
Manifest next update:     Wed 01 Jul 2026 09:02:01 +0000
Files and hashes:         1: C2LPjNkLafk26CtXgBzXedcuPz4.crl (hash: oKBxiGT6xswK/qvNlV54boByYk48cAYpECgwXWVBfsY=)
                          2: pwE_SfXTpr9tglpARupCJ6k_dPs.roa (hash: MJdvGBgQiMUrOWyGd3oHbenSc8E/Lbv1F5XgS63yo/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:95:7c:29:9c:91:8f:19:50:de:e2:82:95:f2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b62cf8cd90b69f936e82b57801cd779d72e3f3e
        Validity
            Not Before: Jun 30 09:02:01 2026 GMT
            Not After : Jul  1 09:02:01 2026 GMT
        Subject: CN=c1b9654db1dd0993b3b1cf338b120cda3e24f318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:0a:23:64:5a:c3:80:9f:99:01:be:68:e3:
                    66:0a:95:8b:55:93:a4:91:92:7a:60:6a:56:a8:bb:
                    ef:2e:dc:33:b0:58:3c:c3:1b:b3:1c:1a:a5:79:4e:
                    b2:ec:bf:9c:d9:f6:45:98:9a:ee:9b:23:94:81:19:
                    ce:35:cd:5e:68:cb:55:d2:1a:19:ca:17:83:c9:17:
                    aa:5a:10:83:55:aa:7c:61:f4:b9:72:5f:f7:12:cf:
                    a4:88:7a:3c:54:68:82:b5:7b:a0:f1:6d:3a:58:43:
                    ec:db:a4:82:fd:e3:8a:80:32:40:77:f4:40:37:61:
                    94:32:78:48:c4:e5:b0:09:1b:e3:4b:4b:2d:da:b7:
                    cf:26:80:e8:0e:2c:c6:3b:53:7c:56:3c:dd:fb:3c:
                    59:27:68:60:cf:37:48:4b:94:4c:93:46:e8:43:c6:
                    65:3d:6b:85:36:58:32:51:d4:20:42:14:0d:ba:12:
                    78:cb:ce:bb:b8:f8:6c:58:6a:3c:b5:27:da:6e:eb:
                    f6:81:8b:0f:93:0a:3f:7e:8a:8a:36:d3:1a:7a:ed:
                    3a:ed:3e:19:e2:3f:d5:bb:89:fa:7e:0c:73:fb:ca:
                    21:4e:b0:10:e1:bb:7f:f9:e3:ad:a8:72:41:55:40:
                    75:c9:cd:71:8d:bf:0d:e7:fb:85:72:6b:cb:99:c8:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B9:65:4D:B1:DD:09:93:B3:B1:CF:33:8B:12:0C:DA:3E:24:F3:18
            X509v3 Authority Key Identifier:
                keyid:0B:62:CF:8C:D9:0B:69:F9:36:E8:2B:57:80:1C:D7:79:D7:2E:3F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2LPjNkLafk26CtXgBzXedcuPz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/82cc5d-d6a8-4667-b049-967c57d5a361/1/C2LPjNkLafk26CtXgBzXedcuPz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:46:7b:64:77:f7:ff:60:f3:cf:13:23:af:0c:cb:f9:3c:9c:
         89:75:6d:cf:16:ad:ff:ee:84:6b:7f:3c:36:8f:89:3c:80:8b:
         3d:4f:1e:41:0c:bf:d2:f5:de:bb:7a:9e:82:b3:00:48:6f:bd:
         41:d4:15:16:90:d5:2a:f3:0e:ef:8c:38:be:fe:56:40:f1:e5:
         31:13:42:b8:9e:44:c0:b2:64:9b:e7:2f:17:ac:82:1b:4f:8d:
         39:b0:bc:a9:e5:8b:89:9b:cf:fc:65:05:f5:58:55:60:38:1f:
         11:27:8f:e4:53:66:06:4a:c4:0c:a6:3d:10:01:41:22:db:64:
         ba:d3:5a:91:b2:d9:69:24:0c:af:95:19:07:91:b5:d3:06:fb:
         72:22:10:71:43:5a:ee:32:dd:e8:03:79:c3:79:c8:fc:00:49:
         56:9b:01:7d:35:60:73:6f:e8:26:bf:0e:71:10:0f:6c:8c:ba:
         1e:76:9d:a8:64:c2:02:c2:1f:81:52:0d:ec:df:0c:be:41:b7:
         34:28:dd:a1:de:08:a2:a7:1f:92:00:e2:c0:da:bc:b5:58:ad:
         ab:1d:9c:7c:36:88:e4:fc:05:34:2d:2e:b9:39:d1:34:ad:df:
         6a:f6:2f:c5:82:e3:cb:a2:46:f0:a2:1d:83:34:f4:cb:47:71:
         3e:9a:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:03 2026 by rpki-client