Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          68RB6gOqPU54Ei2afYDknqoV16ESBwbT4q3i5jX0lRo=
Subject key identifier:   9D:4D:86:E0:44:6F:F2:96:12:CE:7E:D0:3C:1A:3F:34:8D:57:0A:53
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       019F17C3596A41F2E2091EA53548FAFD416F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          191A
Signing time:             Tue 30 Jun 2026 09:01:46 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:46 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:46 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: 4y2PdutSS87NnKM9TslZ6mUkAQb3BqP0L82MvMZcbsw=)
                          2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:59:6a:41:f2:e2:09:1e:a5:35:48:fa:fd:41:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Jun 30 09:01:46 2026 GMT
            Not After : Jul  1 09:01:46 2026 GMT
        Subject: CN=9d4d86e0446ff29612ce7ed03c1a3f348d570a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2d:85:3e:b1:f6:18:1e:d8:c9:de:a0:2b:2e:
                    75:e7:d9:17:68:75:25:26:4b:77:ba:4b:78:4c:d7:
                    bb:87:8e:42:c3:fb:60:46:df:ce:54:85:3e:c0:b1:
                    e2:72:88:ea:71:a8:56:15:63:6b:a3:04:96:76:0c:
                    bf:47:d6:ce:c9:07:b0:fd:1b:8e:3a:9c:dc:62:cc:
                    89:1a:d8:16:50:78:26:a8:c6:77:b8:9d:80:a3:bf:
                    ed:af:4d:40:3b:0a:51:1a:45:de:38:28:67:44:4c:
                    12:60:83:e0:6c:cd:2b:9a:c9:42:02:4b:b4:17:ce:
                    67:46:71:e7:33:43:5a:a4:de:a1:7e:7b:3b:f2:61:
                    91:25:94:67:e4:aa:ac:88:70:67:d5:df:00:ec:b0:
                    a9:ef:6b:c3:92:5a:b9:05:72:35:a8:7c:82:17:39:
                    eb:d3:d5:07:9e:c8:cc:8a:99:f8:35:85:43:f7:20:
                    89:a2:c4:cb:21:7a:d4:36:ca:31:1e:55:02:e2:a3:
                    da:72:db:2f:b5:c3:72:8a:ff:76:27:32:2c:a2:08:
                    8a:05:04:c4:94:e0:fd:5b:8a:d0:b6:bd:ea:8c:67:
                    ad:14:8e:cf:f6:c5:9c:a4:a7:8c:c7:9d:1c:37:67:
                    99:ea:69:3e:48:90:02:34:a8:3b:44:8c:27:8b:a5:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:86:E0:44:6F:F2:96:12:CE:7E:D0:3C:1A:3F:34:8D:57:0A:53
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:0f:d4:47:a5:a3:01:fd:5b:8c:5e:9f:7e:66:e1:e2:96:
         dd:7f:72:11:46:0e:81:16:cd:3d:8f:1e:11:63:80:a4:6b:f4:
         c8:a9:71:47:8e:ab:3c:a8:24:89:2e:6b:52:df:9e:5b:6d:99:
         38:7a:c9:08:9b:2c:90:14:26:b2:58:e0:40:9d:a1:40:ae:f3:
         4e:d6:05:e4:f5:c3:b8:69:05:36:3d:ea:ec:fd:8b:41:20:60:
         d1:c0:59:64:d5:0e:d9:cd:a0:c2:0e:e6:8a:c5:1d:07:96:4b:
         11:f5:f0:0f:2e:09:fe:11:f5:3d:6a:bf:3a:c1:78:01:88:c8:
         2d:43:30:93:f2:74:a4:53:0b:a3:5c:56:68:0c:90:6d:38:52:
         ab:c7:47:f6:3c:48:e7:a3:ae:85:cc:dd:c1:38:b3:e3:97:19:
         5d:89:a9:cd:9b:e3:91:1a:19:70:a5:ce:cb:37:e6:a1:d5:21:
         50:6c:42:31:39:1d:b6:fd:6e:2b:68:83:e9:9f:8e:5f:09:c1:
         dd:68:d4:49:58:e8:7d:5a:ab:65:74:62:bf:ff:9c:2e:ae:3f:
         0a:d0:c9:39:90:1b:06:f7:84:fd:49:27:a9:23:73:90:d5:e0:
         af:fe:6b:3c:83:17:b4:a7:00:0e:42:d7:0e:fa:34:92:41:87:
         f1:4b:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:58 2026 by rpki-client