Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
File:                     E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft (raw, json)
Hash identifier:          /2RuHc3Ob3Cw6tW5FfwoXrrOoTTf2d0YHER6uoWYCEg=
Subject key identifier:   2D:40:74:A6:68:AA:EB:8C:C0:CA:8D:17:82:43:A9:31:81:D6:20:40
Authority key identifier: 13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8
Certificate issuer:       /CN=134010e4398dfd6e19f45b513c22c1eca33311f8
Certificate serial:       019F18680722B0909F2D9C1B2D306785CA82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
Manifest number:          0DD8
Signing time:             Tue 30 Jun 2026 12:01:38 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:38 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:38 +0000
Files and hashes:         1: E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl (hash: vjalPEKqDQ5MkD/TTrYkB8NwBqH/Cchmy9dBUmfpwW8=)
                          2: M5rLBovi9FegD_6XfZI0UvOLj9A.roa (hash: Ncj1lwYIIUnFe3TFAOPydLTK9RtxEBu7QwiwQw7cVtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:68:07:22:b0:90:9f:2d:9c:1b:2d:30:67:85:ca:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134010e4398dfd6e19f45b513c22c1eca33311f8
        Validity
            Not Before: Jun 30 12:01:38 2026 GMT
            Not After : Jul  1 12:01:38 2026 GMT
        Subject: CN=2d4074a668aaeb8cc0ca8d178243a93181d62040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cc:3e:74:3d:0b:de:c6:37:58:35:8b:99:ad:
                    f4:3b:fd:37:5a:1e:06:b7:17:86:08:95:02:f7:bd:
                    1a:bc:3d:19:99:19:74:0d:39:90:e6:b8:7f:45:d9:
                    92:24:98:27:a3:58:fc:3a:92:66:06:08:08:c8:ca:
                    b9:86:75:39:c5:4a:f6:b7:d7:a5:41:f7:4b:fa:3f:
                    c7:ae:a6:db:70:59:49:73:18:b2:fd:0a:d4:a9:94:
                    9d:94:63:37:0a:a7:31:fc:c8:ed:69:04:df:f7:65:
                    e0:11:3f:8b:e2:a7:92:bf:b0:a5:7a:bb:20:60:bf:
                    42:cb:68:7d:6a:4a:70:b6:cb:5a:c6:0d:34:cb:4f:
                    63:ff:f5:12:24:a1:2e:12:49:10:27:e1:f0:68:f7:
                    5d:db:81:89:91:83:0a:62:69:14:0d:ed:8a:ae:33:
                    2d:21:2f:5e:6a:2f:d5:3c:9d:ff:bc:75:9c:ad:63:
                    39:3d:74:67:6f:de:c4:11:ba:3e:69:66:2b:40:6d:
                    68:8a:42:4b:29:2e:ee:c3:c7:63:15:b6:5a:ae:03:
                    47:c1:1f:f7:f4:17:29:e4:b4:3b:46:c7:ac:2a:2f:
                    de:24:9f:dd:0e:94:90:7a:01:25:36:3c:36:59:f3:
                    c8:98:df:05:8d:05:a7:ea:c4:1f:93:bb:c0:01:e2:
                    31:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:40:74:A6:68:AA:EB:8C:C0:CA:8D:17:82:43:A9:31:81:D6:20:40
            X509v3 Authority Key Identifier:
                keyid:13:40:10:E4:39:8D:FD:6E:19:F4:5B:51:3C:22:C1:EC:A3:33:11:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/253f41-f62b-492c-9e18-162df08b39e5/1/E0AQ5DmN_W4Z9FtRPCLB7KMzEfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:c6:48:0e:ce:a7:3e:a1:ee:c5:e4:63:ca:e5:25:b5:11:
         1b:43:af:bb:28:39:ab:32:33:f7:52:86:7b:4c:ac:83:56:83:
         5c:2b:2f:01:a2:5d:84:7b:3d:09:82:b8:cb:60:04:99:c6:e5:
         4e:c2:de:a2:81:2a:67:1e:44:17:66:9e:5d:89:2b:2e:0a:8b:
         cc:0c:fd:62:c9:ec:3f:55:3b:9a:c9:20:14:4a:50:21:d8:47:
         4e:89:9c:ef:2f:3a:39:10:36:f3:1e:23:42:4e:8a:58:48:e5:
         e5:1e:27:a6:9a:ae:cf:e9:40:e4:07:a9:0d:13:2d:83:be:55:
         66:7f:56:88:7e:49:0d:c0:86:2e:90:8c:71:1d:1a:db:b6:e0:
         1c:79:29:e0:45:ff:5c:b4:63:31:e4:a0:54:8f:e7:38:07:ec:
         1d:2b:31:99:6d:fe:d8:90:53:2c:4d:b0:6d:0c:c4:29:85:b1:
         f7:7e:ab:1f:bd:ed:a0:d2:77:8f:31:f5:80:0f:ea:10:6d:d0:
         ee:20:9c:83:bd:f7:59:88:e5:6e:ec:58:72:a5:53:85:ee:c0:
         75:2d:b2:b3:d1:7b:83:91:f6:6e:6d:c6:2d:9a:f6:4e:53:19:
         b2:72:7d:8e:4b:73:e5:56:59:3f:3b:e5:23:56:ff:06:eb:61:
         69:88:03:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:14 2026 by rpki-client