Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File:                     DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier:          83IDfGE5lfiWry41ydrnNdc2uAiAJdN6KG+nRiTCdIM=
Subject key identifier:   61:D4:0C:95:98:D4:6A:29:1D:AD:82:3D:33:AB:05:1F:C9:25:EA:69
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer:       /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial:       019EE857779A6E56BC4225E16C04D8CD8EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number:          078A
Signing time:             Sun 21 Jun 2026 04:01:46 +0000
Manifest this update:     Sun 21 Jun 2026 04:01:46 +0000
Manifest next update:     Mon 22 Jun 2026 04:01:46 +0000
Files and hashes:         1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: P6c7iJ87XzA8aynKdnMf2cB8CoxpwjSlxMLnkKcmWI4=)
                          2: YWPvVhMhWOdJq4IgusjcDgptc9E.roa (hash: VwHMf9+Fwh3KRyIosC2+XI4IaINip+46g+Oe4aIU/sk=)
                          3: oZhmNHo1g-fLhYbLEUh1GW508Ns.roa (hash: pc/tqbY3tzsPX8Y1oHBCD976XbZr/U1sHfOZb8voLLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:57:77:9a:6e:56:bc:42:25:e1:6c:04:d8:cd:8e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
        Validity
            Not Before: Jun 21 04:01:46 2026 GMT
            Not After : Jun 22 04:01:46 2026 GMT
        Subject: CN=61d40c9598d46a291dad823d33ab051fc925ea69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0b:96:69:88:6b:8f:3e:a5:8b:d5:89:b2:8b:
                    77:60:24:7f:03:35:bd:c5:24:84:cd:80:5f:45:74:
                    85:e9:e2:16:e5:88:67:11:a0:17:6e:39:f7:3f:62:
                    11:59:21:ef:c9:dc:57:0b:2f:50:6f:58:3e:32:38:
                    2e:22:10:0b:95:56:1b:09:d4:cc:96:db:c9:74:c4:
                    65:84:a4:82:31:f9:68:fa:64:45:da:c2:b2:37:69:
                    b1:4d:81:a7:ee:86:73:b1:13:29:1d:2f:18:c6:1b:
                    4f:96:ed:14:6d:cc:aa:98:66:42:80:93:9c:d6:c4:
                    5a:65:55:4d:50:0f:bd:03:18:36:20:49:27:88:bb:
                    e6:db:4b:f4:39:39:d8:b5:a4:2a:ca:3f:0b:15:75:
                    62:4a:f2:3a:d3:f0:5c:2b:79:48:b0:b5:e8:5a:25:
                    79:8f:61:75:28:7c:0e:50:f4:6e:6e:1e:07:14:86:
                    41:bd:3e:72:71:97:7b:b5:07:0b:1f:72:96:91:17:
                    cb:c3:b4:99:37:9b:80:70:43:ce:19:48:fc:26:c8:
                    fe:03:08:fd:30:8e:9e:2d:db:84:cb:ca:f0:51:0f:
                    8a:96:45:04:ca:fb:b8:a3:ca:f0:c5:ad:34:66:c1:
                    7e:b6:65:ca:5f:8b:b9:b0:50:57:77:8a:88:7e:41:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D4:0C:95:98:D4:6A:29:1D:AD:82:3D:33:AB:05:1F:C9:25:EA:69
            X509v3 Authority Key Identifier:
                keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:0d:80:60:bf:05:72:bf:5a:12:0b:0f:1b:e7:c0:a4:8b:
         a7:7c:f0:8f:94:96:86:ed:ad:90:f2:ef:a9:0e:8b:4c:ff:a3:
         38:c9:67:9e:27:26:a2:6e:bf:f7:02:98:3b:88:d3:10:9c:c3:
         70:16:8c:83:13:79:e0:f6:f1:69:a8:6f:fb:23:8e:3a:b8:a7:
         a6:c8:e5:25:7d:8a:fc:cf:a4:8d:01:ea:a0:0d:b5:05:39:37:
         26:1c:2e:a8:20:e8:02:94:4e:1e:6e:7c:ac:01:82:0b:68:38:
         2a:b7:3c:00:61:97:63:7b:15:6c:64:28:a5:a8:35:0c:95:81:
         a8:e1:db:f7:75:c6:ed:04:39:e6:f2:ba:9f:08:27:1d:3a:a4:
         d9:58:2f:12:ae:fc:66:5a:a9:e2:94:83:f3:32:ce:30:b2:77:
         45:4b:8c:d3:e0:b9:f3:56:af:c5:e5:ab:40:43:ed:9f:8d:f1:
         f7:9a:72:90:37:07:de:ae:02:5a:a9:c0:34:9f:1e:d6:7d:a6:
         14:af:a3:f9:c0:62:b0:6f:70:76:cc:58:03:e9:df:b9:45:b9:
         33:50:a6:bc:54:da:f3:65:47:18:0c:d0:1c:62:26:89:57:92:
         1a:7a:f7:a5:52:0a:54:6e:e9:a7:42:e3:30:4f:2a:01:7b:69:
         bb:91:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 11:12:07 2026 by rpki-client