Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File:                     0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier:          vdZl5qPsVIPLH7WdTnY6tQIHwpJnGCgML8X1S8ZF0ik=
Subject key identifier:   AB:96:03:91:8F:80:5D:9A:4D:9A:F6:63:3D:29:8C:67:C5:B8:0A:2C
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer:       /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial:       019F1867E984C1550BCE1440415A8846858D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number:          1350
Signing time:             Tue 30 Jun 2026 12:01:30 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:30 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:30 +0000
Files and hashes:         1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: ECEck3Cgq+HOs0K2XcwqNf5YipyBfuOhrMYpMjk+Iqg=)
                          2: OgtLPNJMhUcc3a3Q9gVgb_uUcTU.roa (hash: W+gl2jZGWcmgxMC+cnSTgyo7gRfrRZB5RZkp77uUONU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:e9:84:c1:55:0b:ce:14:40:41:5a:88:46:85:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
        Validity
            Not Before: Jun 30 12:01:30 2026 GMT
            Not After : Jul  1 12:01:30 2026 GMT
        Subject: CN=ab9603918f805d9a4d9af6633d298c67c5b80a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:40:60:36:bd:ac:8a:e8:26:52:1e:30:45:
                    09:05:d9:ea:71:a8:d6:f2:ba:a9:d7:d1:c7:ab:b8:
                    7a:fb:b1:a0:1d:2c:77:b3:a0:0e:6e:d5:bf:f6:4f:
                    39:b5:5c:05:e5:4d:3f:22:17:87:0f:27:ab:5d:08:
                    f0:12:0d:e7:ab:f4:79:3b:84:a6:12:d3:0d:4c:9b:
                    c0:21:9c:81:ad:12:af:42:20:05:3c:a7:25:c0:51:
                    53:9a:a4:d8:fd:ae:fb:3c:cf:d9:ec:1d:86:bf:69:
                    4a:09:61:4a:56:fe:b8:1f:0f:b9:5f:a4:d8:1e:d6:
                    6e:67:78:3a:c1:f8:49:8f:d7:da:e2:e6:3c:e7:46:
                    92:71:c6:ae:37:ef:ff:c2:3e:f7:d8:23:f2:ae:2e:
                    b3:10:96:80:24:6a:1a:c2:ea:e4:11:30:29:78:47:
                    15:46:ae:c7:b5:83:60:ba:79:5b:4b:96:2a:ec:50:
                    32:6e:c4:b8:00:54:03:b5:94:2e:48:21:e8:d6:41:
                    66:fa:d1:51:78:5f:cd:ce:f3:45:7a:f3:ee:62:d9:
                    f8:f9:6b:94:31:a0:29:ec:da:87:f4:c6:97:d9:53:
                    0b:91:8a:d2:5b:8b:b9:f6:31:10:71:a7:7d:04:d3:
                    19:a7:e6:12:b3:e4:03:a0:34:e5:3c:8b:1b:5f:58:
                    6b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:96:03:91:8F:80:5D:9A:4D:9A:F6:63:3D:29:8C:67:C5:B8:0A:2C
            X509v3 Authority Key Identifier:
                keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a1:b6:91:99:bb:c4:d4:ef:18:56:06:4d:5f:72:68:b0:60:
         48:cb:cf:9f:12:d0:51:d8:57:3c:db:d2:9b:c4:5a:a1:8b:13:
         93:3b:f4:9d:be:6c:92:8e:91:cb:0d:22:f7:57:23:a5:12:a6:
         d0:06:cd:6f:14:21:cc:df:f7:3e:31:7b:a8:46:40:cb:b6:d8:
         b0:c7:00:f8:4a:05:11:41:56:c8:cc:c1:e6:3b:d0:3c:ee:f1:
         1c:a9:ae:b9:05:45:05:46:ac:2e:b2:e2:78:5c:51:94:65:0f:
         52:f0:64:c6:1e:59:85:6c:ab:c2:14:97:9b:d2:e4:e2:4c:fc:
         e8:8d:b0:13:24:2f:0e:a1:3a:b9:62:1c:ac:8d:1b:cc:c0:c6:
         47:c4:59:f1:7c:ff:3b:e1:11:a0:a5:f9:09:68:17:c0:b5:7b:
         12:3b:c0:46:a3:af:d9:f6:ec:79:f6:0a:ac:d3:76:60:2b:fa:
         01:6b:3b:29:f4:e0:75:f7:e7:10:55:df:e4:49:fb:e3:ac:b9:
         96:17:6f:eb:36:02:f2:f6:6f:50:6a:e6:3c:f5:87:95:e6:a6:
         a8:c1:e9:a7:dc:e1:1c:2d:b7:cc:0f:6b:78:2e:a7:5d:db:9b:
         81:79:54:95:74:91:03:ed:ab:98:6c:f8:2e:0e:ac:d0:97:b1:
         44:ec:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:43 2026 by rpki-client