Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
File:                     lRUfu3HkGy0QY9OxEUGtoahEx_c.mft (raw, json)
Hash identifier:          hU15hBR5Yc63niCTL3+zmDzW2CLh5atT3lr9bh0hx8k=
Subject key identifier:   C1:15:41:D4:04:35:76:0F:0B:77:EB:54:DA:38:C4:F9:53:7E:3E:39
Authority key identifier: 95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7
Certificate issuer:       /CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
Certificate serial:       019F122EACECD9A18F0BA58B8C69ACC69DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
Manifest number:          15FB
Signing time:             Mon 29 Jun 2026 07:01:16 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:16 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:16 +0000
Files and hashes:         1: 43DpV7xrZKIPgR3LXQiPDkxuS6g.roa (hash: Pz+pBSh7qLUtOCsg2X6KXkUs5v6TAPEm46EKWek5QPQ=)
                          2: KXQ6A3de6ngkk1WG9cHu1Wh6z8U.asa (hash: 5ZyKxUcShckFXuyMs3UQFf3JSdmvQECqj6DhdV60Ytw=)
                          3: lRUfu3HkGy0QY9OxEUGtoahEx_c.crl (hash: soWbBjTBLuosOcDvWdn9syidirJS2I5iV15WCZMmdiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:ac:ec:d9:a1:8f:0b:a5:8b:8c:69:ac:c6:9d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95151fbb71e41b2d1063d3b11141ada1a844c7f7
        Validity
            Not Before: Jun 29 07:01:16 2026 GMT
            Not After : Jun 30 07:01:16 2026 GMT
        Subject: CN=c11541d40435760f0b77eb54da38c4f9537e3e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:ed:1c:1a:64:b5:84:59:7f:58:a0:56:57:
                    ce:6a:ad:5b:3b:aa:94:98:71:dc:6f:7a:53:88:e4:
                    fc:db:c9:d9:01:eb:3d:8c:91:c0:87:12:fe:04:68:
                    53:9e:d9:7f:eb:f2:a8:07:d1:bf:5e:f2:3a:36:8e:
                    1b:56:e4:07:46:9f:23:20:66:32:44:4c:bb:7b:93:
                    07:c1:b3:4f:6d:ea:e1:43:42:2a:54:60:8f:a0:8b:
                    5e:54:5d:6f:c2:7f:45:98:fd:40:b4:51:18:8d:81:
                    5a:82:62:7d:a3:0b:a8:13:1f:2a:56:2b:03:b4:14:
                    5b:43:11:ee:66:18:98:a2:f2:1c:ad:4f:12:22:2e:
                    7d:5d:15:da:81:f9:a1:a1:3c:bc:3d:8a:d7:1f:0d:
                    ff:ba:73:ff:38:ea:83:07:4d:01:0a:e0:7f:1b:b5:
                    6e:b9:e8:86:1d:a7:b5:4f:d8:44:92:6e:27:e1:0d:
                    43:16:28:54:ab:68:0b:79:74:08:a0:d8:3f:0e:10:
                    46:1b:08:65:47:05:b4:c4:ec:18:be:3a:8e:49:5f:
                    6c:d6:80:69:79:5f:d3:73:b8:b5:54:7e:64:82:04:
                    e3:8d:58:f5:4c:c8:9c:70:17:58:22:12:15:d9:52:
                    04:c2:8a:03:2f:6c:be:55:93:96:95:28:3e:db:c3:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:15:41:D4:04:35:76:0F:0B:77:EB:54:DA:38:C4:F9:53:7E:3E:39
            X509v3 Authority Key Identifier:
                keyid:95:15:1F:BB:71:E4:1B:2D:10:63:D3:B1:11:41:AD:A1:A8:44:C7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRUfu3HkGy0QY9OxEUGtoahEx_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/185fe9-2517-438c-8e26-9fd836e8b366/1/lRUfu3HkGy0QY9OxEUGtoahEx_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:b5:74:e1:3f:91:9e:35:e1:b4:5c:8d:60:ad:65:b4:a2:
         c4:fc:3a:c9:a9:a9:89:43:a8:cc:8e:17:6a:f6:cb:e0:95:80:
         da:ef:1a:62:07:c2:ae:13:a7:80:4e:0d:8a:2c:fa:5c:49:56:
         9d:b4:bc:77:7b:8b:b3:e9:0f:b6:c3:7a:fa:1b:4a:47:2b:6b:
         2e:16:54:90:15:66:1e:bc:5a:4a:c9:fe:04:41:5e:b1:10:49:
         c0:29:c4:c5:36:80:ee:3a:dc:18:85:1c:50:7e:2d:c6:3b:11:
         e0:d2:fa:26:61:c1:c1:ce:66:19:d8:76:e6:66:c4:8f:fd:f2:
         48:4a:a9:e2:f0:4c:78:b7:53:3c:8e:51:5d:51:90:88:14:c9:
         d4:90:63:e8:d5:e8:c7:4f:71:17:2a:49:4f:5f:ab:3c:94:db:
         ee:6a:9e:f3:8d:8c:44:71:13:b4:58:3f:ab:1a:8a:cf:04:27:
         ab:31:dd:88:35:69:4f:6e:75:75:7b:ce:f4:68:40:e4:63:4e:
         d0:5e:41:01:ab:3d:c6:0e:bf:f8:a1:5b:e4:98:ce:36:62:e6:
         64:8e:26:97:d8:93:1f:e8:c9:27:ef:d0:e8:16:7a:82:93:71:
         be:1a:f4:35:70:46:bf:f5:40:33:66:ad:01:6a:a2:01:2a:21:
         6a:02:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:01 2026 by rpki-client