Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File:                     d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier:          dxIf2R6e8v6O72r2snR9hcfzuPFwEkiZ6n6VSLdIPIU=
Subject key identifier:   30:4A:3C:0F:20:CA:32:DC:62:BB:A6:17:C9:E6:D4:13:BC:65:4A:EB
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer:       /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial:       019E9B17734AD33C7216D548DB13915E56B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number:          06BD
Signing time:             Sat 06 Jun 2026 04:01:05 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:05 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:05 +0000
Files and hashes:         1: 1uDiO66z4_GJhppKD5iOYZne4xo.roa (hash: njjChOiFqIrX1FbvslTiBWjd0QGU3XMKBcIu3VrqVf0=)
                          2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: PFcW823x7tAuBGeW0EcyQQNlc2jbhi91VtyXyCe+cck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:73:4a:d3:3c:72:16:d5:48:db:13:91:5e:56:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
        Validity
            Not Before: Jun  6 04:01:05 2026 GMT
            Not After : Jun  7 04:01:05 2026 GMT
        Subject: CN=304a3c0f20ca32dc62bba617c9e6d413bc654aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:45:f4:67:9e:17:c4:75:b3:f1:9e:3e:e8:
                    fc:d7:2a:75:b9:86:6f:18:76:2e:a2:7a:6a:45:a8:
                    2b:d8:59:a9:7c:f2:10:40:3b:b0:67:63:13:e0:29:
                    2c:a7:d1:2e:01:6d:79:5f:d6:ba:d7:5b:8f:8c:1d:
                    2b:39:40:d7:a9:1a:d1:4f:e8:8e:80:e2:f3:24:ce:
                    ab:b9:89:34:2d:6d:75:da:6c:5e:50:a5:83:aa:bd:
                    6f:fe:84:13:21:b5:cd:eb:1e:2b:ba:ec:3d:b0:c2:
                    55:51:43:7f:ce:72:72:e4:6a:e9:6d:a3:2e:c9:8f:
                    b5:d9:2e:e0:7c:5b:7b:85:ab:86:82:d0:05:24:69:
                    f2:c7:5a:ed:3a:fc:f9:42:d5:9b:e6:c9:3f:a3:6c:
                    be:75:04:cb:85:60:ee:d2:76:87:c8:61:c0:99:c1:
                    68:e3:62:2a:31:3a:f0:64:4f:a6:7a:40:1e:02:93:
                    b5:e9:52:98:7b:6d:7d:cc:aa:d3:96:ce:b4:13:44:
                    53:9f:b4:f0:6e:3d:64:6f:fe:73:db:b0:2f:15:25:
                    5d:3b:69:ce:61:16:1a:ba:16:9b:a7:39:76:fd:10:
                    2f:d6:aa:f7:ff:ae:6e:e4:5b:41:22:7c:8c:99:45:
                    d6:62:83:4d:a2:43:be:8e:8c:fe:7d:aa:4d:74:47:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4A:3C:0F:20:CA:32:DC:62:BB:A6:17:C9:E6:D4:13:BC:65:4A:EB
            X509v3 Authority Key Identifier:
                keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:44:74:b3:a2:c1:b0:89:59:47:c6:2d:31:dd:ae:76:a5:22:
         b8:46:c8:04:6b:af:51:1c:65:c1:c5:71:42:32:e2:68:e3:f5:
         85:f1:19:ad:46:df:05:31:fd:76:6b:d8:0e:56:10:78:3b:e5:
         5b:4e:be:1e:e8:62:32:a9:8e:00:f6:f8:f8:2e:2d:40:e0:6d:
         0f:59:26:83:56:4f:78:ab:dc:4a:25:02:1d:1e:99:fd:f6:38:
         47:a0:ec:18:34:d0:60:cf:fc:02:c9:2c:56:32:ad:54:4a:b5:
         98:c4:91:5a:bc:17:33:4d:8f:77:48:46:7d:87:70:73:92:80:
         84:f6:8a:43:5e:a3:06:5f:8f:af:9e:33:44:df:39:50:67:f8:
         4f:f4:ce:20:ff:58:7b:76:fd:8a:d7:09:2c:c9:28:4a:d4:f5:
         d1:c0:61:ca:ff:47:c2:48:3b:57:d9:8e:e8:13:c2:5f:f3:a7:
         87:90:61:18:f5:7e:a2:5d:a0:48:52:10:59:70:27:9a:49:a4:
         2d:63:00:1a:ec:f4:ed:16:c9:d2:dd:d9:23:4e:52:2d:2c:e4:
         70:44:d1:44:f7:b7:67:8e:2a:34:6a:f0:d7:8a:ba:9b:ac:6b:
         b5:83:66:da:54:52:d4:40:b3:eb:08:e6:2c:78:5f:0f:bf:72:
         83:e5:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:18 2026 by rpki-client