Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File:                     mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier:          XcTL4gUvNi0a8hm9Q9NY6pw6HFEEkkodJJ2Qko3VIQ4=
Subject key identifier:   71:B7:48:9A:E3:13:36:B5:FD:BC:05:DD:58:E4:84:B0:26:31:A1:9F
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer:       /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial:       019EB732E82CAB62B89074F1AB076BC8EDDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number:          1277
Signing time:             Thu 11 Jun 2026 15:00:27 +0000
Manifest this update:     Thu 11 Jun 2026 15:00:27 +0000
Manifest next update:     Fri 12 Jun 2026 15:00:27 +0000
Files and hashes:         1: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: kWbnH0e68djqruDx6xrNnRtjGEHSG6Yn3u9cqIQCB7U=)
                          2: oGhU7IJoDElhSJr9URGhXOwAaLk.roa (hash: RlkIPIJZ2vJYpwqoiUxVktYoRH+UnOVJBwSR2Sn3Qb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:32:e8:2c:ab:62:b8:90:74:f1:ab:07:6b:c8:ed:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
        Validity
            Not Before: Jun 11 15:00:27 2026 GMT
            Not After : Jun 12 15:00:27 2026 GMT
        Subject: CN=71b7489ae31336b5fdbc05dd58e484b02631a19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:24:66:27:58:91:b2:b4:e3:11:f7:b5:a9:
                    49:a6:3d:5d:ec:df:9a:aa:41:b5:7d:ab:9e:22:2a:
                    64:16:16:5d:95:79:28:c0:a0:1a:5d:b5:75:9b:46:
                    12:ae:49:cf:e3:53:f4:6f:d6:b7:c5:46:0b:6e:61:
                    35:cd:f8:9e:30:41:b8:bd:be:4a:af:11:9b:9f:c2:
                    21:bc:4c:f6:2d:0d:e8:39:38:f1:8d:1e:8d:ab:43:
                    55:21:7e:93:ec:99:ef:25:0c:7f:d6:ec:12:a7:98:
                    f4:de:c9:aa:f7:b6:68:19:f5:cb:33:28:a9:7f:a2:
                    8b:f1:48:b9:36:d1:b9:6e:6a:fa:51:43:52:db:36:
                    cb:0a:a1:de:fd:4c:6a:3e:d5:d5:61:59:bf:ef:a9:
                    ec:cd:2e:19:78:a3:83:66:a9:6e:85:26:96:ae:50:
                    87:73:fa:dd:55:df:7e:10:f7:81:5f:46:a9:ae:8c:
                    40:8c:ea:bd:03:95:a9:8d:f3:dc:d9:f1:9f:c5:9d:
                    87:8d:07:94:ec:9e:a3:86:32:89:b7:b3:2d:cd:8d:
                    04:8b:6e:56:b6:9c:db:1d:9a:b6:45:9b:e2:5b:f1:
                    f4:a7:36:39:09:98:7a:ad:8f:e4:f8:f3:e7:6c:43:
                    3b:f9:21:79:6d:fb:85:a8:d0:1b:4a:17:81:3b:fb:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B7:48:9A:E3:13:36:B5:FD:BC:05:DD:58:E4:84:B0:26:31:A1:9F
            X509v3 Authority Key Identifier:
                keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:01:83:b7:60:0b:0f:13:8b:3b:fe:91:c9:24:05:4a:08:85:
         eb:bb:38:78:bf:60:2f:42:d9:39:3c:2e:0f:fa:7e:2e:4a:b8:
         b1:f2:69:da:38:b6:e5:55:ea:8b:ee:6d:68:35:4c:f7:18:45:
         66:ac:c9:04:0d:3f:a2:97:9b:4a:d3:4f:7c:2e:17:1d:9b:2e:
         d6:75:74:ea:60:59:e1:c3:01:b8:43:fc:90:19:4a:37:c5:ff:
         2b:f1:76:2e:26:d8:94:57:c5:71:0d:d4:20:c9:0a:dc:af:64:
         4c:b8:fa:8b:5e:39:26:76:9e:b2:cf:72:1a:76:a6:b3:46:de:
         21:3f:29:a1:67:2e:97:38:91:55:93:56:23:f7:34:28:b4:a3:
         6d:63:c7:b0:0b:ef:8b:7e:86:f8:2d:82:be:08:1e:04:8f:3c:
         3b:6f:9e:12:aa:f4:db:59:4d:42:b0:5d:80:b9:62:8e:f8:1f:
         70:7a:19:c9:46:1f:50:25:74:73:e4:38:70:a2:b6:8a:bd:27:
         12:c5:0d:3d:9d:71:63:63:4f:55:b7:34:5a:d2:bd:99:a0:35:
         0a:19:9d:b0:04:17:55:dd:12:94:63:aa:9c:0e:53:33:77:cc:
         22:a8:61:14:5b:89:3a:51:73:35:21:fa:d4:3b:cb:33:49:cd:
         01:d1:6d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:20 2026 by rpki-client