Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File:                     48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier:          4hy3c3gRCZIWfA1ccRoFzH0WAsTqJJHYj2Y50+NQC5c=
Subject key identifier:   73:5B:B2:4D:09:72:C7:63:34:B7:23:A0:EF:23:3D:68:0D:3B:79:C4
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer:       /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial:       019F13418FE282E47AB95860E226825354D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number:          1984
Signing time:             Mon 29 Jun 2026 12:01:31 +0000
Manifest this update:     Mon 29 Jun 2026 12:01:31 +0000
Manifest next update:     Tue 30 Jun 2026 12:01:31 +0000
Files and hashes:         1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: SDMaiiZRX5pfkZ1yPJ/Yd/1gOyVoFLqkROqEtsfNelA=)
                          2: Bh71MIA76HLsWqh-KULy4KIN5yE.roa (hash: 2dPXwrTJcmE8t9PcfYM/2V6FylW3n+nURaEmxVQppFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:41:8f:e2:82:e4:7a:b9:58:60:e2:26:82:53:54:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
        Validity
            Not Before: Jun 29 12:01:31 2026 GMT
            Not After : Jun 30 12:01:31 2026 GMT
        Subject: CN=735bb24d0972c76334b723a0ef233d680d3b79c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:d8:66:38:59:ac:4c:99:bb:1a:ef:0e:60:
                    1f:9b:6e:c0:88:55:18:6e:0d:56:81:aa:3a:5b:b1:
                    ce:a4:6f:4e:1f:f0:74:88:ac:80:44:78:89:64:3d:
                    f2:e3:5a:d1:7f:f7:15:f0:55:c0:e4:30:0b:26:78:
                    5e:45:a9:fb:61:98:e8:79:d5:ff:4d:73:b4:98:fd:
                    f7:70:66:7c:7e:ae:58:62:e2:fc:3b:e2:3b:38:ca:
                    5b:55:6a:b8:ab:a2:e3:9d:97:7c:a0:50:2b:bb:d6:
                    3a:d0:7e:dd:b9:95:f8:89:a9:b5:d1:fb:a3:99:bd:
                    7a:8c:23:81:c0:bd:07:3d:36:4e:e2:57:b3:15:29:
                    88:44:4a:0b:14:30:ca:dd:cc:27:93:31:84:cb:b1:
                    52:f1:6b:ba:06:9b:57:9f:fa:7b:4f:61:90:f7:45:
                    60:8a:c7:0e:c8:15:e4:8a:bc:e0:1b:50:86:82:01:
                    0b:51:5a:1b:78:a1:a0:91:f9:5c:62:af:63:a8:8b:
                    9e:13:de:96:38:dc:08:ec:cf:30:d7:19:b3:7c:3d:
                    da:06:40:69:eb:3b:6f:e1:31:23:15:85:e8:e8:a4:
                    95:8c:09:eb:d9:67:9c:1d:75:64:04:f1:49:63:af:
                    a7:da:ce:ce:6d:02:6f:26:f9:ec:e2:87:fe:98:38:
                    68:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5B:B2:4D:09:72:C7:63:34:B7:23:A0:EF:23:3D:68:0D:3B:79:C4
            X509v3 Authority Key Identifier:
                keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:a4:0d:8a:0b:1d:91:a2:b1:fd:21:e7:3d:1f:88:12:3c:
         b8:53:cf:44:a0:42:2a:69:4f:08:a2:19:32:1b:1b:2e:7a:91:
         fd:cb:79:18:81:41:e2:48:54:77:2d:79:c7:9e:06:f5:ab:b9:
         bb:18:72:97:ec:db:e2:a2:d0:2c:aa:85:b8:e9:49:03:6a:61:
         c7:4e:48:a9:b7:1e:82:20:ea:77:90:0d:41:87:7f:b0:df:bb:
         f4:7f:3b:76:5a:05:45:ea:3e:12:91:92:24:e4:46:4f:23:93:
         55:52:53:1d:f0:5b:93:e1:6a:fe:b6:c7:77:95:be:0e:eb:52:
         72:3c:1c:dc:94:aa:6e:a3:79:27:61:36:9a:9d:7e:cf:7e:be:
         c7:23:6f:15:1e:79:b8:95:6c:b1:d6:30:eb:9a:7a:00:37:c7:
         7d:d0:52:65:f6:25:81:e2:e0:1e:45:d6:f9:53:e6:74:2f:6f:
         5b:2a:8e:f9:5f:d0:2a:e2:25:a5:a1:f9:c7:63:65:cc:f3:60:
         43:3c:2a:97:a7:70:58:d0:50:87:be:9c:11:3b:da:3c:78:8e:
         48:bf:a5:55:dd:f7:f6:30:56:a0:03:fb:68:5f:85:29:db:8b:
         3d:23:35:b5:07:71:d8:ba:d7:6c:fd:00:19:a9:8b:d6:e2:3c:
         14:91:08:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 22:07:52 2026 by rpki-client