Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
File:                     cMuWVD9-GVcj5tEiwpR4v92gPsw.mft (raw, json)
Hash identifier:          VlmnaCH2eFgiobv7AvAhlwM6Qq/4sga7+6YngzlMia0=
Subject key identifier:   CD:E9:44:1B:3A:EF:3E:50:FD:5B:19:07:17:D0:30:64:A7:C6:D9:4C
Authority key identifier: 70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC
Certificate issuer:       /CN=70cb96543f7e195723e6d122c29478bfdda03ecc
Certificate serial:       019F1979EC834279EC8BDD0771148FE407DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
Manifest number:          0E1D
Signing time:             Tue 30 Jun 2026 17:00:48 +0000
Manifest this update:     Tue 30 Jun 2026 17:00:48 +0000
Manifest next update:     Wed 01 Jul 2026 17:00:48 +0000
Files and hashes:         1: 5U0lt8-7U6Bnh1gjv-dlcNeKeTY.roa (hash: UBIs7KWUwprkJo3madxcKdCqiT7JAPNDlFNCNOeuufY=)
                          2: cMuWVD9-GVcj5tEiwpR4v92gPsw.crl (hash: dLIONI+kqNL6mgLzQicT8a2daxmpH12QZbk1+E6InJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:79:ec:83:42:79:ec:8b:dd:07:71:14:8f:e4:07:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cb96543f7e195723e6d122c29478bfdda03ecc
        Validity
            Not Before: Jun 30 17:00:48 2026 GMT
            Not After : Jul  1 17:00:48 2026 GMT
        Subject: CN=cde9441b3aef3e50fd5b190717d03064a7c6d94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:29:27:69:a0:c9:3d:f6:f9:7e:7f:2f:53:0a:
                    09:a3:a2:d6:5c:c4:b2:08:5d:b0:95:93:18:37:77:
                    cf:e9:51:4e:4d:fe:cf:48:51:eb:0e:ab:83:80:c5:
                    75:bf:ec:cd:b9:54:d4:a3:92:c5:83:07:f0:b5:d6:
                    84:83:a7:9e:98:7b:01:45:9e:91:7d:ff:8b:e8:4b:
                    53:2d:b0:83:bc:28:66:65:e6:54:43:eb:e3:bd:20:
                    e3:2e:d8:24:76:4b:47:66:ec:c4:5e:b3:0c:b6:bb:
                    2c:de:0c:70:ef:cf:b6:53:d2:a9:5f:c6:12:f9:fc:
                    63:8d:c3:c1:e4:a8:c0:eb:64:ea:de:89:25:c1:cd:
                    7c:d1:0e:94:79:48:51:a0:5c:a6:c4:12:9f:a8:0f:
                    b2:54:d5:60:ed:0d:28:c3:88:a8:85:7c:b2:5c:4e:
                    6e:fb:dc:58:b0:78:20:a9:74:16:d2:3a:da:ed:48:
                    87:08:5c:a8:d3:be:8c:9e:73:b4:d1:ae:77:fd:1e:
                    36:a7:aa:fb:66:ad:c5:f4:d7:66:d8:04:e3:44:a0:
                    9a:2d:fc:7e:02:af:7a:7c:1c:3b:01:91:07:90:5d:
                    94:e9:b0:77:8b:8b:42:31:c5:2b:f6:8e:05:d8:3d:
                    88:f3:3f:a6:1a:3e:6d:1b:cb:6b:10:67:11:8b:0d:
                    86:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E9:44:1B:3A:EF:3E:50:FD:5B:19:07:17:D0:30:64:A7:C6:D9:4C
            X509v3 Authority Key Identifier:
                keyid:70:CB:96:54:3F:7E:19:57:23:E6:D1:22:C2:94:78:BF:DD:A0:3E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMuWVD9-GVcj5tEiwpR4v92gPsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b7e4ac-8508-4d6b-a2bc-274cd6caa3f3/1/cMuWVD9-GVcj5tEiwpR4v92gPsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f9:49:ff:ab:f4:4f:70:c9:27:e5:9d:13:66:fa:f4:6b:63:
         03:4b:c6:28:0d:72:66:8f:db:c6:34:85:cf:18:42:1f:90:8a:
         64:1c:ea:bd:31:a7:a8:a3:31:80:d8:77:98:29:52:c7:ae:94:
         7c:00:40:22:e2:cf:2e:37:53:b6:2a:ed:dd:1a:80:5b:f1:79:
         00:b5:7a:d5:40:6a:6c:c6:d0:9b:3f:e6:78:72:0a:7a:3b:8e:
         0a:7c:b4:51:f7:d9:26:5e:1f:82:d8:cf:2d:c1:2b:c8:d4:be:
         c9:40:1a:d3:38:db:83:99:ad:07:0a:8c:36:1b:39:c9:2d:73:
         35:cd:95:13:9d:c4:d6:b0:04:8e:05:23:bc:3c:63:be:15:dc:
         67:d4:43:a5:d0:46:d9:04:9e:46:f1:c8:7d:cf:c9:0c:0c:df:
         62:55:72:45:43:27:c0:49:14:fb:9c:3a:76:e6:38:f4:42:19:
         ac:01:05:61:b6:5a:1c:16:ea:b4:52:3c:e8:a0:97:2a:6b:1e:
         dc:da:82:93:3a:1f:8c:aa:66:9c:a5:d6:50:c9:8b:f3:6a:ad:
         52:c7:53:25:77:58:e6:07:6f:69:c6:13:2a:8f:0d:5a:1f:9f:
         40:e0:fe:a7:ee:76:49:ce:4e:4f:c0:27:f7:19:e1:e0:63:b6:
         b0:95:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:27 2026 by rpki-client