Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File:                     V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier:          +jGjMvGyIxTrjKh3IU5LvBPatxszA3gcz9fQSyoodfo=
Subject key identifier:   10:3A:E5:48:C2:F7:B6:F1:21:3F:83:8D:55:D9:D2:61:FE:FA:A7:70
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer:       /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial:       019EAA1CD48ED33D5BEEA6F2C150D2801D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number:          067C
Signing time:             Tue 09 Jun 2026 02:01:16 +0000
Manifest this update:     Tue 09 Jun 2026 02:01:16 +0000
Manifest next update:     Wed 10 Jun 2026 02:01:16 +0000
Files and hashes:         1: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: 5ki9+D9rwJU9VN3kc1SiYnZTOpY8t/MJKTU7bPgTvpA=)
                          2: iz1NumDDEP4HEocZooUpzgUrWuA.roa (hash: Xh3SqqlYQ0WusNga4Qj1Gif5nRzkl+/fhOngglLEBZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jun 2026 23:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:aa:1c:d4:8e:d3:3d:5b:ee:a6:f2:c1:50:d2:80:1d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
        Validity
            Not Before: Jun  9 02:01:16 2026 GMT
            Not After : Jun 10 02:01:16 2026 GMT
        Subject: CN=103ae548c2f7b6f1213f838d55d9d261fefaa770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c3:1e:db:99:0c:f1:42:65:70:a7:5f:eb:a7:
                    6d:22:18:97:4b:0f:12:09:99:0d:fc:bb:40:78:e9:
                    5f:84:a5:a5:4e:17:c3:0e:ae:d0:98:f9:25:59:34:
                    5d:77:cd:73:a6:71:03:ac:51:e6:90:14:06:2f:17:
                    ac:dd:59:77:d2:91:f7:e4:43:3d:b6:c2:84:07:e5:
                    42:95:6a:71:30:c6:3d:dd:ed:4c:7f:ab:11:64:fc:
                    1c:8b:2f:8d:91:82:fa:b9:b9:f9:cb:a8:9d:32:72:
                    65:13:59:f3:d1:86:78:ba:31:96:d8:da:57:a3:bd:
                    7d:9d:93:90:c7:8d:94:fe:dc:20:f5:af:d5:77:b2:
                    51:56:04:4c:9d:4e:78:e4:02:c6:06:f5:40:0c:04:
                    e7:90:6e:21:5a:36:f2:04:ea:96:58:dc:6f:b2:2c:
                    d7:17:46:7e:73:eb:61:a9:b4:72:c7:c6:4f:62:c4:
                    2f:9a:95:db:6a:b1:10:b8:c5:19:d0:4a:b6:fc:b0:
                    74:ee:d4:49:51:bb:f9:2d:2c:27:56:30:46:64:18:
                    2d:78:20:22:94:fe:b9:c3:b5:78:9b:d0:48:3e:48:
                    21:86:e3:c4:d3:e3:f1:75:ce:62:c4:a2:b9:21:8b:
                    e1:c9:fb:4d:9b:05:8f:84:51:c4:c3:a3:24:ba:6a:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3A:E5:48:C2:F7:B6:F1:21:3F:83:8D:55:D9:D2:61:FE:FA:A7:70
            X509v3 Authority Key Identifier:
                keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:d2:47:f8:17:56:48:62:27:2b:19:cc:e2:f5:99:c3:8a:41:
         0e:33:47:4b:d5:8a:9e:64:f9:2e:a2:be:6c:56:e3:3f:42:54:
         66:49:dc:a3:32:0b:37:75:5e:c1:fe:e5:68:c4:50:8d:52:35:
         7a:c3:66:18:69:94:1a:1d:f3:cf:67:62:ec:c1:8d:a6:70:b1:
         d2:e1:bc:75:9a:10:10:25:28:40:bf:f2:9d:c8:e8:f1:e3:f8:
         d5:14:f9:ab:54:55:81:0d:af:97:37:c9:a6:44:77:37:43:b2:
         c1:48:61:78:c8:6f:4f:30:f1:44:a3:1c:a5:6b:19:62:8f:f1:
         a4:43:dc:a1:2a:17:a1:c7:35:14:a6:bb:0d:e0:5c:96:a9:16:
         1e:2f:79:1a:4e:c0:a4:27:0d:1e:c4:46:ac:b3:b5:b1:ba:27:
         4f:57:27:8d:65:2c:35:bb:d4:7e:41:78:0f:c0:be:31:b8:79:
         2a:13:53:a8:67:92:b2:1f:72:03:b6:1e:59:28:2e:bd:ff:3b:
         cb:01:70:63:8e:74:4a:99:77:83:8b:9e:b7:26:8d:b7:16:2d:
         bd:5f:44:16:00:d6:1c:00:9f:10:66:55:82:62:71:fd:35:1d:
         28:58:6a:47:7f:12:c0:41:e1:35:46:46:c2:8d:a7:ce:c6:01:
         0d:68:8e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 09:23:34 2026 by rpki-client