Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          vI2LNjpQTjuvpnLOxpOZxaoYnssA20Lb3KifzPqZZOM=
Subject key identifier:   50:2F:9C:F2:63:91:9E:AB:C4:51:53:20:C1:76:E2:3F:6C:6F:45:F3
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       019F18D6222747726D11DF3D6FE21BC9A72F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          1998
Signing time:             Tue 30 Jun 2026 14:01:54 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:54 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:54 +0000
Files and hashes:         1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
                          2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
                          3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: kSLX0o/Jgc8lrjp5f+XWKpGlXT0c0FQ7FHH04C3ZyoA=)
                          4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
                          5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
                          6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
                          7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
                          8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
                          9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:22:27:47:72:6d:11:df:3d:6f:e2:1b:c9:a7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Jun 30 14:01:54 2026 GMT
            Not After : Jul  1 14:01:54 2026 GMT
        Subject: CN=502f9cf263919eabc4515320c176e23f6c6f45f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:ec:70:67:5f:10:51:96:32:2e:a4:f9:50:
                    ea:5b:86:42:62:b3:4f:a8:44:cb:24:ed:e3:c8:cc:
                    1c:a7:60:3c:21:ca:9b:d7:de:ce:22:52:b5:2e:ba:
                    c0:73:28:b4:e8:c2:6e:56:ec:1d:a1:da:6a:de:30:
                    ae:93:52:7f:b7:59:25:63:bd:39:40:8f:0f:89:2d:
                    0b:2e:a4:8f:4f:d7:8c:f4:8a:d1:c9:89:80:b3:3f:
                    94:5f:92:ea:38:60:f6:61:3c:4d:97:1c:9c:b1:21:
                    fc:b8:3e:12:9c:b8:81:c5:eb:9b:eb:b0:63:74:10:
                    ae:9d:d6:d4:6f:da:d8:20:95:7f:fb:e5:72:c5:8c:
                    64:c8:f8:5c:d7:73:19:ca:ee:52:08:32:76:5c:11:
                    68:de:c3:f4:17:c0:01:27:96:17:f3:a6:26:ef:90:
                    4f:61:30:cf:e8:dd:39:8c:02:9b:bb:0e:a4:c0:fa:
                    9c:75:e7:be:b4:d8:e4:f4:38:58:c7:55:f8:6c:1f:
                    f3:e1:ae:4a:69:54:4a:46:a6:db:c7:31:d5:63:c5:
                    44:ae:87:de:e8:61:56:9b:91:76:6f:48:3b:28:d2:
                    e7:f8:83:51:3c:79:b1:de:ce:9d:2a:88:17:73:aa:
                    30:d3:49:26:94:d4:b0:c7:9f:13:80:ab:40:57:00:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2F:9C:F2:63:91:9E:AB:C4:51:53:20:C1:76:E2:3F:6C:6F:45:F3
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a3:13:15:02:47:2b:24:15:26:61:8b:54:fa:29:ba:35:48:
         cf:0b:45:5c:64:f5:37:1a:6e:d4:30:09:f5:f5:27:4a:39:e5:
         59:7e:a7:33:c3:e2:6b:c6:4d:a9:50:f8:d2:34:01:39:dd:aa:
         e1:12:b6:22:30:93:f4:35:ea:cb:d4:d9:b1:db:c5:f2:2f:8e:
         52:8e:48:d9:59:ee:15:63:25:1d:7e:3f:4c:1f:90:dd:02:bc:
         eb:c8:07:cd:79:c8:02:46:55:0a:3a:59:8d:d2:d0:0d:6e:84:
         b2:94:7b:fb:7e:ba:b9:01:da:2a:6d:dc:fa:bb:da:da:29:6c:
         40:b8:d0:b3:7e:27:2d:36:dd:e7:d6:f3:c3:b9:0c:65:90:b1:
         e7:c8:7a:f4:e2:af:d4:c6:03:19:9d:dd:f2:93:24:2c:e3:34:
         4d:11:70:46:c1:9b:52:83:ca:a7:62:bc:fe:64:ab:79:ff:6d:
         a2:de:02:ea:3b:cd:7a:19:97:ca:b3:8a:3c:b9:12:06:75:4f:
         5f:48:1d:87:d3:36:78:98:8d:51:c0:e1:ab:cf:e0:d6:53:1a:
         e5:0e:38:86:c7:8f:59:37:57:13:9f:51:d4:fc:32:2b:db:28:
         d7:db:ac:7b:1b:1b:26:ae:13:9e:0e:bc:a4:5e:43:5f:31:10:
         34:a1:2f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:16 2026 by rpki-client