Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          byo8Xmjec0BRgWw2jP0yZNln0AGZWOXKAk5Qt7D5nNk=
Subject key identifier:   F2:A1:82:4A:5A:80:FA:C5:71:39:47:61:B5:42:96:FA:61:69:75:B3
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       019EBB0FC27336C691FFA4F654F1D167F23F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          04C8
Signing time:             Fri 12 Jun 2026 09:00:32 +0000
Manifest this update:     Fri 12 Jun 2026 09:00:32 +0000
Manifest next update:     Sat 13 Jun 2026 09:00:32 +0000
Files and hashes:         1: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: vhuTFbhb5oBx49dlWK1o56tvPolrok8O2Dpdoj+LNOs=)
                          2: X4f6FdUM7-oxmTPyJDPnSjOJQjc.roa (hash: G+8NGrdkwPv6Os9FA75QeRzjamvnyvobATUloFoNoiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:0f:c2:73:36:c6:91:ff:a4:f6:54:f1:d1:67:f2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: Jun 12 09:00:32 2026 GMT
            Not After : Jun 13 09:00:32 2026 GMT
        Subject: CN=f2a1824a5a80fac571394761b54296fa616975b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:74:dd:39:43:3f:f7:83:d1:14:71:83:03:
                    f0:61:ee:25:ed:c8:bd:64:0c:34:5c:e0:de:1d:cf:
                    9c:20:13:76:c0:53:e1:be:ef:b2:c6:83:1e:70:15:
                    a5:12:f8:37:ed:79:5b:4c:e9:57:89:73:1b:49:43:
                    f2:3e:7f:6a:59:21:6e:d1:e0:5b:9d:49:25:38:53:
                    7b:39:58:0d:de:99:e9:f8:55:ea:47:96:44:8c:01:
                    47:d7:c2:2e:f1:ff:58:c0:d4:49:34:b4:40:45:05:
                    1a:fa:95:51:f7:fe:f8:bc:95:bd:c0:06:ec:24:3f:
                    bc:c5:92:fe:4f:bf:e0:93:bc:1d:11:50:17:c4:1c:
                    ec:d8:30:c5:08:25:4e:30:d9:a2:d2:33:ec:f4:d5:
                    f6:cc:66:2d:0a:d0:2c:1d:d7:db:d6:85:38:70:32:
                    2f:18:14:26:99:cd:6d:df:1f:17:b4:8d:f8:96:19:
                    0e:5e:33:5b:0f:41:ca:ec:35:46:6d:7d:76:5d:97:
                    78:2d:9d:a3:2b:ed:09:a8:0d:f7:b9:14:ee:6c:d0:
                    2a:bf:ee:82:20:c9:a1:5b:30:df:24:22:95:72:d9:
                    25:f4:d9:31:59:3b:9e:c2:01:4e:f6:ec:58:de:39:
                    95:b7:43:eb:7b:cf:49:98:8b:64:bc:d9:fc:e7:24:
                    b3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:82:4A:5A:80:FA:C5:71:39:47:61:B5:42:96:FA:61:69:75:B3
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:36:27:c6:f1:31:2e:af:63:d3:1f:64:7f:cb:61:12:42:62:
         63:22:32:6e:9d:6b:93:cd:96:21:d9:6b:a7:e3:b7:eb:60:ef:
         06:7b:c9:2b:16:5d:84:56:9e:da:15:65:fb:46:54:e3:a1:44:
         e0:26:a5:bb:63:99:6c:a2:7e:0a:12:83:f2:ad:90:d7:1a:78:
         fa:e6:65:0d:8e:66:18:f7:b9:df:08:d9:92:f5:72:23:17:77:
         18:12:47:23:8c:e9:a8:9e:f7:14:0f:85:e1:ea:5c:3b:83:12:
         a3:71:cc:c6:65:9e:03:19:e0:56:52:ef:e5:16:6d:dd:50:08:
         f0:01:7f:85:18:23:d5:9c:dc:04:32:6a:50:da:73:92:0b:5c:
         07:ff:3b:eb:53:24:46:0b:34:84:c4:4c:3c:7f:e1:57:58:82:
         9d:0e:f0:d8:6c:a2:f5:fd:39:36:63:f0:16:b0:9a:f6:4f:13:
         2a:46:bc:1d:74:06:53:25:25:73:dc:51:8e:97:71:ac:f5:71:
         42:1a:39:16:67:96:20:86:db:8e:61:59:2e:90:ce:d3:21:ee:
         37:41:83:c6:19:94:40:af:6b:8d:96:fb:ea:3d:3a:b0:49:e6:
         9e:0d:9b:93:74:b0:5e:7e:2d:98:67:17:77:82:1c:3d:6c:3a:
         f1:31:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:53:20 2026 by rpki-client