Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File:                     D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier:          w6KxEFz60h2pC9PDAA/nM0RN6s/soOD7KHMPLWGSyUw=
Subject key identifier:   A1:C6:33:AE:1D:43:FF:7D:6A:AE:DD:8A:F2:B2:57:03:08:45:F2:61
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer:       /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial:       019F18675E1AE7174D1BA4456B458E5246CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number:          06EF
Signing time:             Tue 30 Jun 2026 12:00:55 +0000
Manifest this update:     Tue 30 Jun 2026 12:00:55 +0000
Manifest next update:     Wed 01 Jul 2026 12:00:55 +0000
Files and hashes:         1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: muEQHFIckfclr/8zwKkXPb3KPNpmEBXBiE0HxTwIKio=)
                          2: P-p2NxW9TFmZAwW03gw6xGVVFZc.roa (hash: VYJ/qjVSy2HmGtgmvHoLOPXTUBBAf8syxAzQSjcRmvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:5e:1a:e7:17:4d:1b:a4:45:6b:45:8e:52:46:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
        Validity
            Not Before: Jun 30 12:00:55 2026 GMT
            Not After : Jul  1 12:00:55 2026 GMT
        Subject: CN=a1c633ae1d43ff7d6aaedd8af2b257030845f261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:64:30:e8:6c:65:0d:28:69:31:c5:4c:d1:3e:
                    b3:e1:e5:01:d5:86:49:16:a0:ec:e2:4d:54:f3:b7:
                    97:91:41:3c:e0:ad:44:8e:13:2b:1a:ab:53:73:19:
                    4f:0c:2b:10:f1:f8:ad:cf:49:17:b2:0d:ea:bb:d3:
                    87:68:ce:14:b2:78:4e:c8:08:c6:4f:85:d7:e0:f3:
                    98:9b:df:20:0c:e9:2b:f2:8f:0f:55:a0:fc:95:4b:
                    f9:68:bb:db:e2:42:c1:6b:99:a5:c6:44:6c:5c:f7:
                    d3:b8:8e:20:be:05:be:4d:16:0c:ff:f1:d8:a2:99:
                    0f:54:6c:d9:57:dc:dd:fb:5a:ca:85:be:f3:8c:69:
                    46:3b:03:c5:f8:70:7c:43:cf:f5:46:f0:18:60:93:
                    ec:b2:a0:3c:43:23:c7:d1:18:85:bf:59:01:93:37:
                    07:06:b1:6f:65:d2:09:69:83:62:21:a5:92:3a:c4:
                    a9:40:08:4c:81:8a:57:b3:fe:d9:42:82:2d:81:96:
                    4c:08:b0:4f:dc:44:25:16:a3:78:4a:c8:de:4b:29:
                    f5:0d:11:6b:7a:eb:87:11:36:86:55:3e:fd:df:64:
                    8a:82:f9:a2:74:6e:98:bf:d1:4e:05:c7:b6:a2:48:
                    2d:e9:45:da:ce:dd:d8:52:21:2b:6f:12:80:9b:32:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C6:33:AE:1D:43:FF:7D:6A:AE:DD:8A:F2:B2:57:03:08:45:F2:61
            X509v3 Authority Key Identifier:
                keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:59:fd:0d:f3:82:7c:1f:28:bc:85:0b:4a:d3:90:2c:27:
         e6:45:a0:12:53:97:30:5e:36:55:64:5f:11:5a:83:ee:90:4c:
         a6:3f:35:1c:83:04:a0:1b:ee:13:99:23:ea:9a:a7:ff:64:64:
         0e:7a:c3:ff:41:b8:f2:85:55:48:96:4c:16:85:e0:db:1f:66:
         dd:09:3e:1c:40:a4:ca:ce:e2:01:40:eb:ad:92:04:8c:43:ff:
         18:a9:3e:2b:89:32:96:e4:22:ea:bf:ba:d4:de:59:da:9c:81:
         e5:47:a2:5b:41:08:bd:5d:d2:97:a7:fb:1d:57:50:9e:4e:a3:
         b9:0a:7f:6f:2a:54:e8:b1:b6:81:23:86:68:87:7f:c1:77:ce:
         10:f2:b3:1b:b0:29:74:a4:98:f1:3e:3d:39:cf:2d:f8:c2:f6:
         12:d7:57:c6:a9:73:f8:31:69:25:2f:9c:2d:44:10:09:0c:87:
         d8:2d:93:e1:be:21:99:02:5f:84:60:d1:16:be:89:ff:eb:73:
         62:86:f0:2c:fb:32:1c:b3:e2:4a:a2:b7:ca:48:61:00:5b:45:
         98:95:ca:12:fe:5c:45:1d:da:dd:bb:a1:02:44:99:0a:64:25:
         aa:f3:9e:a5:65:9a:23:17:67:22:dc:ac:f6:55:9a:8d:01:84:
         51:65:be:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:04 2026 by rpki-client