Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File:                     03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier:          5mSg1o3VagYXEvS0Z6hHK+pmZivsCvMYFmHHq0ZEfkE=
Subject key identifier:   8E:F4:88:1C:EF:05:14:C9:0F:C7:D6:2F:2F:E0:46:70:71:B0:C7:A7
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer:       /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial:       019F190C891C62ACACA9BF46293FD00CBFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number:          07D3
Signing time:             Tue 30 Jun 2026 15:01:19 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:19 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:19 +0000
Files and hashes:         1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: HrhBpC8KzJtnWZoj+cjnsHwvZGoyFqPXS//NfEdFYRc=)
                          2: H20JQocMFrDfWdVutaPCrCC7li4.roa (hash: gZcsKxQMJ6dZalTlYBUSf2/QY+Hj8zaB/GmOyCIp1vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:89:1c:62:ac:ac:a9:bf:46:29:3f:d0:0c:bf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
        Validity
            Not Before: Jun 30 15:01:19 2026 GMT
            Not After : Jul  1 15:01:19 2026 GMT
        Subject: CN=8ef4881cef0514c90fc7d62f2fe0467071b0c7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:68:ea:45:fe:cc:32:75:65:c0:f1:82:e3:
                    2b:d4:31:95:67:2f:4e:8c:2b:89:aa:f6:7f:e9:b5:
                    d4:15:e4:b7:b8:b3:db:c4:d5:0e:cc:cf:a3:f5:63:
                    7f:73:66:c5:56:91:d4:44:d2:c0:d5:7b:75:18:dc:
                    13:50:52:be:f4:22:48:1a:2d:e2:a8:63:49:8b:05:
                    8b:7a:4a:5e:9f:86:29:71:14:46:5c:5d:a4:45:73:
                    c3:fc:92:73:9d:50:25:8f:44:cf:1b:99:13:7b:c8:
                    34:d0:78:3a:5c:02:a5:b7:52:84:7c:0e:0d:9a:60:
                    4e:52:49:e5:02:f1:e1:9f:5d:3f:65:45:53:26:c9:
                    02:70:7c:b0:60:80:4f:ae:19:85:b8:42:11:f5:34:
                    94:39:5a:60:5d:d7:a5:8f:71:c6:5e:ec:2c:97:81:
                    0f:85:e3:d4:3a:95:37:1d:84:fa:77:eb:20:81:6a:
                    f7:e9:d8:40:ae:31:0f:0a:ae:19:03:bb:b9:31:2d:
                    cf:e8:78:11:b2:9a:56:67:42:cc:59:4a:2c:be:5d:
                    bf:b5:47:c2:7b:31:2d:4d:9d:2c:31:2c:52:86:58:
                    cf:e6:f4:d7:57:7c:21:9f:e7:9e:3d:12:eb:84:2b:
                    57:7a:0c:e7:0d:60:d9:15:8b:fb:7c:ad:97:2f:a9:
                    87:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F4:88:1C:EF:05:14:C9:0F:C7:D6:2F:2F:E0:46:70:71:B0:C7:A7
            X509v3 Authority Key Identifier:
                keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:12:94:9b:77:59:8f:d4:36:8b:67:cc:5d:f4:36:dc:e4:fa:
         3a:55:bf:28:6b:e4:32:04:f7:6a:6b:3b:7d:23:4d:85:f0:25:
         39:79:57:23:56:83:41:0f:84:62:1e:64:f8:24:37:8e:bc:8a:
         b3:6b:9f:cf:b3:a8:07:d8:d6:0f:b4:1c:a2:a1:a1:57:f9:36:
         2b:0b:7a:2d:75:2f:22:2a:b9:26:e2:4a:4e:50:73:04:6a:ec:
         8a:27:bc:16:e9:92:16:8e:cb:ef:32:4b:00:e6:9b:37:03:aa:
         fb:ab:68:a8:59:ce:56:0d:a6:f4:d4:b3:b0:04:6d:91:b9:6c:
         56:5b:17:9a:e0:cc:8e:76:41:5b:73:5a:67:7b:d1:7a:89:f1:
         6e:5b:80:ef:7a:bd:a8:e6:ff:dd:6f:3b:d2:d3:56:a0:4e:45:
         d5:56:4c:20:5d:7e:40:65:7f:8a:2d:46:71:a0:28:b3:df:f4:
         a5:3f:aa:7c:d3:c5:f3:c4:fd:5c:46:43:53:99:6d:ed:3f:88:
         8a:7f:84:c8:07:0b:ae:74:9a:21:63:0e:36:f6:84:82:ef:ed:
         87:e9:27:2b:c6:51:34:62:2e:82:d4:c4:ca:f9:06:8e:f0:65:
         5f:53:c5:27:f3:ca:f9:a3:f7:ca:5b:7d:69:c4:71:bd:c7:b1:
         34:bb:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:58 2026 by rpki-client