Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File:                     D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier:          ooBL4e1Xm6mipTBViHbcs8aZ99dpVo5Enxk9sd+3/zg=
Subject key identifier:   D1:3F:96:F9:7A:B2:A5:7A:43:F5:46:55:35:A9:23:52:E3:74:3A:64
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer:       /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial:       019EB9215D47C16113C2E1B19E8809533522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number:          1856
Signing time:             Fri 12 Jun 2026 00:00:31 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:31 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:31 +0000
Files and hashes:         1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: wZtR3OegIvCnFu2fCyRmnPAgsGQiZUyvEaaTz0cC7vw=)
                          2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:5d:47:c1:61:13:c2:e1:b1:9e:88:09:53:35:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
        Validity
            Not Before: Jun 12 00:00:31 2026 GMT
            Not After : Jun 13 00:00:31 2026 GMT
        Subject: CN=d13f96f97ab2a57a43f5465535a92352e3743a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0e:8d:ce:ed:76:36:c7:95:01:a1:a6:80:79:
                    c8:85:f2:37:0a:aa:d3:3f:19:19:94:ee:36:f0:ec:
                    9e:68:d0:de:03:a1:3f:cf:e5:51:66:8e:11:64:96:
                    e1:0e:ff:f2:e5:97:e5:2a:ce:93:3e:1e:0c:fa:cb:
                    8e:cd:4a:ff:75:ab:cd:7c:93:87:08:ff:c5:32:2b:
                    24:dd:d0:79:c0:55:5a:78:1d:a6:f2:e0:d9:d6:db:
                    a3:cc:a9:d1:7b:a3:90:31:29:a3:4c:3c:6a:5d:d2:
                    d9:2a:2a:1b:bc:cc:bb:dc:13:02:f4:f5:52:76:96:
                    89:58:5f:f7:1b:72:05:9b:8a:9b:72:7f:aa:5b:eb:
                    ad:c4:1e:56:05:d0:7e:e6:f4:2b:5d:56:79:81:bc:
                    58:cf:20:dd:86:49:17:12:07:71:02:04:44:f4:c4:
                    12:5f:18:79:66:24:06:64:9d:7e:ff:92:05:6f:5a:
                    9e:69:96:83:10:6d:fc:34:23:5c:53:03:94:e7:a5:
                    a6:5d:27:f2:f9:cd:cc:0e:7b:64:04:c2:1f:f3:86:
                    4d:e5:6e:a6:5c:41:61:f0:b2:f1:57:1a:60:3a:d6:
                    c3:aa:43:7b:60:bf:67:7e:7d:9d:86:cc:f5:9c:a9:
                    2e:1a:64:c2:47:2d:4d:db:64:92:2b:1e:f9:c7:ef:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3F:96:F9:7A:B2:A5:7A:43:F5:46:55:35:A9:23:52:E3:74:3A:64
            X509v3 Authority Key Identifier:
                keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b3:e3:46:5b:5c:ab:7d:ab:bb:26:3a:b6:63:06:72:f9:2b:
         fb:ef:9b:08:3e:64:d6:61:83:39:04:03:c2:7d:28:0d:59:58:
         92:2c:a6:ae:85:ad:8c:60:16:d2:3c:ee:f4:3f:ac:9a:73:d6:
         19:73:d1:68:2c:9c:57:a3:47:c2:a2:47:60:d5:ab:8b:a9:75:
         80:49:58:c6:3d:af:af:7e:7b:fc:28:a7:17:9b:80:d0:3f:14:
         d6:1c:00:ba:26:67:e8:a9:e6:f1:18:92:cf:76:8b:86:e3:96:
         b0:04:6c:40:d3:13:2e:5b:92:16:2f:50:b8:77:d9:43:03:24:
         d8:ff:88:c4:6e:9d:95:11:8f:f1:11:3f:09:a7:1a:45:c5:20:
         44:a9:fa:bf:b9:50:57:65:0c:d2:cf:c6:01:f6:80:2c:94:d2:
         a8:d0:47:ec:9c:91:72:6f:c0:4f:5a:8c:f4:62:7f:6f:4f:b3:
         76:97:f6:08:f8:f4:58:e4:28:d6:65:5c:43:28:4c:df:d2:75:
         a3:09:71:1e:0e:d0:ae:b0:73:51:dd:d1:6e:77:6b:26:0d:c3:
         c2:63:92:e6:0f:de:db:70:88:f7:a1:07:f8:a7:cd:0b:f0:31:
         40:87:9d:b8:80:c4:b2:6b:ca:ff:43:e2:3a:c6:c1:e7:f0:2f:
         39:c3:c0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:36:07 2026 by rpki-client