Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
File:                     dn62YZNtyV2j7MTKPq9YE4nA2FU.mft (raw, json)
Hash identifier:          blna/+UlUW4ij49BHfyyAMaMb1rXhvTz2zONV0u47i0=
Subject key identifier:   75:18:BE:D2:DE:BF:C2:24:67:06:C8:A0:F0:51:CA:73:A9:D1:95:2F
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Certificate issuer:       /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial:       019EEC3473AF4F1664E08296897FCB7BDB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
Manifest number:          1978
Signing time:             Sun 21 Jun 2026 22:02:00 +0000
Manifest this update:     Sun 21 Jun 2026 22:02:00 +0000
Manifest next update:     Mon 22 Jun 2026 22:02:00 +0000
Files and hashes:         1: afJIfmFpNu3X_XQnH955OF5pA20.roa (hash: clXQX+IWESYXCRjS08HRXKg3UCGRxStO10aaboiTF8Y=)
                          2: dn62YZNtyV2j7MTKPq9YE4nA2FU.crl (hash: 1VklgLAdqbTUG1xYyaecTf6MAi6b+8nV8URLecfbMqM=)
                          3: stZCtmiLOSA_sYTyLesIwzuXoDk.roa (hash: WCDdO6ymRey5SOvMXoHMkslbV9l33cheMotNCIxCBuI=)
                          4: vVyoq21fq5N0bQRNR4Xy1y4vKCM.roa (hash: pFuQwPFyMpW0ZL+hqmbOueu17RdSLSiz3aOGAXafJ4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 22:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ec:34:73:af:4f:16:64:e0:82:96:89:7f:cb:7b:db:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
        Validity
            Not Before: Jun 21 22:02:00 2026 GMT
            Not After : Jun 22 22:02:00 2026 GMT
        Subject: CN=7518bed2debfc2246706c8a0f051ca73a9d1952f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:05:9a:fe:c4:53:09:a0:8b:98:3c:1d:2a:0d:
                    26:8b:db:5c:71:66:a8:68:cd:f5:77:3a:25:be:fb:
                    bc:d7:65:7b:5f:4e:43:02:7f:c5:db:94:13:ec:44:
                    80:ec:0d:fa:b9:cf:57:8f:5a:20:a8:cd:05:99:08:
                    f2:03:ef:af:30:34:6f:98:9d:d9:6b:1f:5c:f8:8d:
                    19:54:fd:1b:ad:96:23:cc:3c:af:9a:e4:54:d6:2f:
                    00:bf:fc:4f:49:e3:70:bc:df:9f:aa:57:03:cb:6e:
                    01:6e:ed:69:ef:f7:33:c8:35:05:b7:0d:29:03:7f:
                    8e:6e:4d:ea:4c:7b:42:dd:63:87:b5:f8:f4:b8:f1:
                    18:7b:c5:65:1c:4c:42:48:a2:5d:dc:35:b4:a3:cc:
                    7e:4d:8c:a3:78:7b:00:c9:c0:bd:d2:da:d9:e4:09:
                    7b:0d:b3:17:f9:ba:b2:41:3e:64:05:6a:b0:d9:2e:
                    75:e6:bf:98:ab:4e:3f:aa:d6:0a:a7:78:65:4b:41:
                    d8:0d:c9:c6:4c:bd:52:13:58:ce:3f:7b:7b:39:a0:
                    b6:7d:95:b1:16:a5:8e:3a:72:a5:5c:f8:f8:bb:87:
                    d6:98:a6:28:94:a1:74:81:79:85:30:eb:60:08:9d:
                    35:26:e4:89:08:08:1e:6d:e6:5a:78:c4:5f:69:9b:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:BE:D2:DE:BF:C2:24:67:06:C8:A0:F0:51:CA:73:A9:D1:95:2F
            X509v3 Authority Key Identifier:
                keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:da:e0:ed:ff:7e:59:e8:a5:4d:9b:1c:3c:c8:1f:32:a5:51:
         20:72:21:6a:3a:fe:21:3f:f0:2f:f1:af:9b:70:a9:cc:9d:79:
         2b:10:07:f8:cf:b4:81:6f:b3:8e:91:2a:26:94:80:f2:59:06:
         d2:01:2f:54:db:29:71:f0:61:80:51:62:3a:6b:c9:3d:2f:32:
         bd:67:52:49:49:ee:8a:c4:68:de:ff:59:e0:84:6e:60:25:f8:
         96:22:18:e1:09:d2:91:e7:1c:8b:5d:26:0e:01:9b:18:b8:88:
         ac:97:d4:4b:93:3b:f8:92:4f:1e:36:53:cb:7b:0a:0d:41:55:
         fa:0f:9c:fa:92:c4:d4:98:c5:92:5c:26:4b:0e:55:18:1f:2d:
         6d:75:eb:84:81:d9:ab:87:b9:b2:d0:96:98:61:c9:fb:54:7f:
         e6:4b:3c:07:ce:50:1f:83:7c:00:eb:ed:0e:d9:85:ea:00:a4:
         d7:3a:5d:28:27:6e:e9:76:94:6d:25:3d:63:5f:42:8f:87:f5:
         e9:86:b6:f6:46:a4:42:81:76:40:53:31:c1:48:11:5e:45:66:
         6e:4f:22:e7:e1:38:82:b6:80:79:ce:23:04:04:f1:7e:66:52:
         5c:0e:96:7c:31:0d:13:10:5d:f4:de:59:c8:96:25:83:67:42:
         84:73:75:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:52:28 2026 by rpki-client