Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File:                     RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier:          VkXj+rzajPIAKye0znYbYIfTSMEq8wCcyifBAHXw2q4=
Subject key identifier:   AB:AB:CB:14:0C:9F:CF:0D:BB:5E:26:65:EA:99:E8:22:A3:FE:9C:13
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer:       /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial:       019EFA27707B8D3A00B52E4B765D38BA2E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number:          0483
Signing time:             Wed 24 Jun 2026 15:02:29 +0000
Manifest this update:     Wed 24 Jun 2026 15:02:29 +0000
Manifest next update:     Thu 25 Jun 2026 15:02:29 +0000
Files and hashes:         1: BWVL9f-KpOOHJHITcd_zmQga4BM.roa (hash: 16slF0zkT/3GuOWybhDOTweAZ519QDUn0ORtD9/qMi4=)
                          2: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: 9KH0SXbykCURAKmsj8Tj6rD91wDVxt0XsdmaroTkFPk=)
                          3: wFIGK-hJfwnzYHOy-0zpMlYIwX8.roa (hash: ijX/47c/1yaEzAjtMYS0nchNRSTG2HHJG2gdZxBcrMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fa:27:70:7b:8d:3a:00:b5:2e:4b:76:5d:38:ba:2e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
        Validity
            Not Before: Jun 24 15:02:29 2026 GMT
            Not After : Jun 25 15:02:29 2026 GMT
        Subject: CN=ababcb140c9fcf0dbb5e2665ea99e822a3fe9c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:4b:0e:bb:45:ee:b8:08:03:bd:51:d7:7c:
                    46:5a:d3:3e:1c:83:7e:a0:61:aa:d5:7c:fd:ab:6b:
                    c1:82:c3:21:a5:e0:94:62:44:9c:88:c8:cf:e4:d7:
                    fd:03:62:b1:01:81:b5:57:9d:c9:a1:d0:7f:2c:e1:
                    7d:0b:ae:03:93:54:bb:6c:7e:15:40:91:9d:99:c9:
                    4d:8c:00:4d:a5:de:0e:86:d7:bb:5c:c8:6c:09:89:
                    60:f7:ab:d3:fc:3f:7c:97:b5:3b:94:77:cd:16:77:
                    a2:2e:f2:d4:91:7b:f1:f9:ed:db:70:91:49:22:c5:
                    5f:ba:ff:4e:de:46:b7:77:25:40:0c:f3:5f:99:17:
                    c7:46:f3:4c:0d:54:e4:7e:c9:42:03:72:17:31:00:
                    2e:8e:04:43:8a:8d:b9:c0:63:22:85:4e:36:ae:18:
                    67:20:4e:d7:3b:9c:b1:4d:5d:4c:58:75:96:04:46:
                    48:1b:9a:ca:4c:0b:60:06:72:c5:03:7e:3d:dd:d0:
                    0a:b7:08:d6:e0:1d:17:05:4d:7e:9b:66:c0:c4:d0:
                    6a:02:fb:b2:d7:b4:71:23:11:b2:04:49:a5:a5:cf:
                    42:8e:d7:f5:17:2e:7f:c6:a8:74:22:37:33:25:9d:
                    78:17:49:7d:24:7e:c7:e3:81:b3:34:58:fe:9a:31:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:CB:14:0C:9F:CF:0D:BB:5E:26:65:EA:99:E8:22:A3:FE:9C:13
            X509v3 Authority Key Identifier:
                keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:57:af:80:05:fe:6d:66:fc:59:86:98:02:81:ac:13:a6:34:
         88:ee:00:fa:d4:4f:43:72:17:09:cf:b3:4e:18:83:8b:b7:b4:
         8b:eb:b7:89:45:5c:1b:5d:20:76:fb:13:9f:fe:a2:7e:6c:d2:
         34:9d:d2:eb:6d:4a:92:0a:ae:76:42:33:83:ed:16:a1:92:2b:
         82:45:9b:8e:03:20:b8:a7:a8:ff:9b:ff:06:a2:57:34:9e:d0:
         42:65:50:0f:41:34:02:68:42:92:9f:95:48:ad:a2:c7:15:a7:
         1f:1e:26:51:28:4e:e9:42:a3:6c:c1:22:c9:c8:cf:4b:71:8a:
         d2:8a:15:44:1b:a2:f6:ef:b3:65:1b:36:5d:90:2c:62:3a:d7:
         08:55:30:b6:c3:25:ab:a2:24:dc:f0:04:85:e5:56:d8:f6:96:
         d2:36:2d:01:e9:88:f2:80:7a:a2:3e:1c:fd:61:f0:09:06:41:
         dd:5f:80:1c:66:0d:3c:0a:29:07:d0:f4:b9:91:e2:9b:c9:5d:
         07:e0:ce:86:da:26:e3:fc:f9:97:3c:62:31:10:52:94:39:8c:
         7a:df:75:a4:cf:e1:c0:40:aa:d5:57:12:83:66:a5:6f:49:1a:
         3f:63:3e:b8:e3:e7:f1:80:ed:29:74:53:64:d7:21:e2:91:64:
         6c:a0:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:21:11 2026 by rpki-client