Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
File:                     c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json)
Hash identifier:          e4ci+Liu6v8yQDvf/Rc3/zE60zDLp0XK3e4WDkIZEd8=
Subject key identifier:   33:47:18:4C:7C:33:64:60:78:DD:0F:28:47:99:3C:2A:18:48:10:BB
Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
Certificate issuer:       /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Certificate serial:       019EB92201F0CCA9104BAE002D0B623F4539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 00:01:14 +0000
Manifest this update:     Fri 12 Jun 2026 00:01:14 +0000
Manifest next update:     Sat 13 Jun 2026 00:01:14 +0000
Files and hashes:         1: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: Q0i9skgXHzSAatWic7cG8TE5IQ4ReXd0RX5xXQSVuqY=)
                          2: vc7ewQR162pr-7rdGykOov0txVE.roa (hash: 6BVZB2JOatn5xn04X9qghhGRmm3MYSHBqBvWVGQDwyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:22:01:f0:cc:a9:10:4b:ae:00:2d:0b:62:3f:45:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
        Validity
            Not Before: Jun 12 00:01:14 2026 GMT
            Not After : Jun 13 00:01:14 2026 GMT
        Subject: CN=3347184c7c33646078dd0f2847993c2a184810bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2d:e5:97:45:32:fc:23:b6:a3:e2:36:06:a7:
                    b7:cc:54:2a:a7:b3:49:01:a9:20:c1:81:44:2a:48:
                    39:e5:7c:70:6d:b9:38:0c:f7:f5:d5:5a:32:3a:5a:
                    d8:f8:f8:05:15:4a:c6:2b:33:27:9a:ed:7b:97:b2:
                    2b:d0:a8:5c:19:f9:30:8d:f6:4e:06:22:14:40:b9:
                    59:0b:96:99:f4:d4:4a:a0:34:71:65:6e:8b:6b:46:
                    54:28:10:03:13:26:1b:7f:20:dc:a7:29:dc:79:a6:
                    63:fb:da:66:c6:de:45:05:4f:c8:9a:be:c7:f5:aa:
                    c1:2c:15:ed:4e:2a:e8:5b:b1:20:d4:a2:55:56:93:
                    69:93:9b:4d:e2:ff:27:0f:7b:89:68:ef:2b:e8:43:
                    cc:6e:80:a7:c4:68:d7:dc:4c:85:78:c1:bd:30:54:
                    11:3f:a4:f6:65:bd:35:f8:81:35:c7:26:05:5c:4a:
                    f2:c8:7c:f5:80:03:92:e5:0a:50:84:78:61:72:23:
                    1f:62:b0:86:ee:3f:30:06:3c:0b:cd:f5:08:47:af:
                    4f:0e:5a:27:77:41:09:3c:e8:98:71:19:ed:e2:63:
                    a2:bb:f7:99:bd:a1:c4:7b:e2:f8:3b:00:35:39:38:
                    74:13:b2:86:eb:f2:fa:22:48:2c:6a:3c:ef:71:07:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:47:18:4C:7C:33:64:60:78:DD:0F:28:47:99:3C:2A:18:48:10:BB
            X509v3 Authority Key Identifier:
                keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:1c:b2:3e:0f:13:7e:20:15:5a:bd:ad:af:1d:bb:a0:64:
         98:3b:4e:05:27:63:62:02:bc:b6:4a:e2:7a:fe:21:ff:38:83:
         54:86:9e:88:24:0a:46:e1:1c:43:10:5c:d9:2c:30:3c:be:1a:
         2d:09:e5:49:a9:b0:ce:a7:3f:01:c4:66:c0:3b:66:4b:b2:ce:
         82:92:37:c2:80:04:f3:0f:fe:2f:a3:da:22:93:54:6d:a5:19:
         50:f9:c0:1d:a3:43:79:70:ac:50:59:d0:44:56:62:b8:d0:53:
         d9:33:0d:e7:1d:46:56:e1:15:6e:12:0f:29:b4:dd:bb:83:bb:
         18:ae:bd:63:49:76:24:24:52:93:4a:0a:16:65:b2:6a:f0:c6:
         08:eb:73:9c:75:89:f5:6e:f9:65:f0:42:b6:19:60:38:03:5f:
         3d:5a:68:ed:a5:14:bc:32:28:37:e1:95:a2:96:83:83:a1:78:
         19:38:ab:45:57:14:f8:97:c9:b4:fa:a0:d4:cf:8a:36:4c:ef:
         84:3c:af:e0:3d:50:6e:ad:44:d2:ea:c5:76:9b:1e:73:4f:ff:
         26:90:ed:8c:a8:03:6e:29:a9:94:f6:e9:85:17:d7:de:6d:a5:
         c8:5d:db:23:da:6c:d0:d7:53:35:66:6d:ed:31:00:83:5b:8f:
         7f:da:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:27 2026 by rpki-client