Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File:                     1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier:          WP8Xg9KjSeXRnUeOUwCS2zGLW0p28h9O3Qp/+1GlilE=
Subject key identifier:   F7:3A:AC:27:45:33:90:A4:1E:DD:BC:AD:6E:B5:4A:77:C6:04:01:AE
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer:       /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial:       019F1867675B9B9D84830152612136CE50E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number:          15A1
Signing time:             Tue 30 Jun 2026 12:00:57 +0000
Manifest this update:     Tue 30 Jun 2026 12:00:57 +0000
Manifest next update:     Wed 01 Jul 2026 12:00:57 +0000
Files and hashes:         1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: 923+6FhdQ4cEUbAxOf2BOcJJU6JbuuQ9pHLvXYo5V+8=)
                          2: qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa (hash: 2lNtTexaTuQ64Sk2B9hHpKofwKN/Vg7RcO43ReydSmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:67:5b:9b:9d:84:83:01:52:61:21:36:ce:50:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
        Validity
            Not Before: Jun 30 12:00:57 2026 GMT
            Not After : Jul  1 12:00:57 2026 GMT
        Subject: CN=f73aac27453390a41eddbcad6eb54a77c60401ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:5d:f6:bf:1b:fd:70:e5:79:d6:4d:db:e1:
                    23:54:53:ec:e9:a6:18:13:f3:e6:69:1e:9b:6d:4d:
                    c3:65:e2:d8:fe:45:28:a7:2c:96:1d:55:b7:b5:3b:
                    72:8e:ec:45:83:45:22:f1:97:78:a3:d1:70:db:f6:
                    a4:ba:b8:e3:00:cf:1e:7c:c7:6b:f6:13:9d:48:e6:
                    12:fa:2a:4f:a3:51:29:f6:ec:e6:57:02:a1:1a:28:
                    2c:ea:ba:22:b0:af:36:df:a4:45:52:2b:fd:cf:79:
                    12:31:af:29:1d:94:eb:34:8a:c6:94:70:18:27:e2:
                    55:52:c8:29:bd:ec:47:3a:49:50:c2:82:3f:c7:d3:
                    b1:61:1c:fd:cf:c7:9a:89:04:c6:86:7a:94:d0:30:
                    5f:1d:3d:29:b5:76:da:77:21:c4:79:79:09:14:8e:
                    69:21:7e:e5:8d:83:c7:4b:1e:70:c0:18:8c:1d:07:
                    76:b9:fe:7b:06:06:4b:b3:a1:e7:ec:c9:45:a4:25:
                    fd:6c:f7:b2:2c:18:79:67:aa:f5:30:e5:d3:bf:60:
                    c0:d9:3d:91:0f:be:df:c6:f6:a6:ed:6c:43:24:67:
                    26:32:ef:fc:d4:71:db:f7:ad:54:d6:93:fa:5e:ed:
                    55:4f:a9:16:db:04:15:0f:ab:07:41:ce:67:fe:53:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:AC:27:45:33:90:A4:1E:DD:BC:AD:6E:B5:4A:77:C6:04:01:AE
            X509v3 Authority Key Identifier:
                keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:96:8d:9f:19:8e:70:f0:53:e5:cb:33:ea:4b:62:bc:c6:d1:
         9d:d1:c4:cb:2f:3c:d3:ab:aa:30:d9:32:7b:b7:4a:fe:e7:08:
         17:c1:45:74:8d:93:39:00:c6:a9:a4:6d:f2:8c:97:27:e8:8f:
         79:4f:c1:a1:11:a9:07:51:70:46:36:38:38:f6:48:b1:c6:a4:
         aa:3d:98:b1:7e:5e:74:da:15:3d:ba:86:82:f0:b7:8d:3c:66:
         78:3b:88:fe:55:b6:ed:7e:64:9a:5a:16:31:c2:48:80:84:12:
         4a:d9:e3:17:9d:59:3c:ce:4d:9a:7f:56:80:0e:bd:d1:72:90:
         a3:a1:48:c8:9c:61:87:b5:2d:64:54:1b:92:0a:34:36:1a:88:
         2a:16:7d:ff:3c:f7:c0:26:51:47:b7:33:5f:c1:34:d5:5a:26:
         3d:c0:8c:58:41:61:da:96:29:cb:a4:e7:4d:48:46:f8:b7:74:
         1a:c3:09:f1:31:32:b8:5b:35:6b:10:32:d1:1e:dc:50:9d:61:
         d6:d8:44:2f:17:bb:e7:fb:41:9d:ea:ac:f3:21:f7:ae:51:1e:
         79:29:92:ae:82:de:e3:d0:42:24:e5:ec:90:42:96:24:bf:ba:
         7e:8b:48:e7:87:fd:74:1c:97:c2:7d:ec:09:53:4f:ad:88:22:
         90:7d:0e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:15 2026 by rpki-client