Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File:                     DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier:          het3FEAxWRJ+k1JTLauXX0u8aa/niU32viashoacGp4=
Subject key identifier:   66:6D:13:61:69:46:C0:61:51:4C:F5:A3:05:4B:14:8B:C1:53:D3:D3
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer:       /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial:       019F189E5961E570DD00C26893D40C7F7361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number:          1984
Signing time:             Tue 30 Jun 2026 13:00:58 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:58 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:58 +0000
Files and hashes:         1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: JFP3PHifQkKNAyMrOOvQmWjKkaKQq8jqOpO3r+BH7FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:59:61:e5:70:dd:00:c2:68:93:d4:0c:7f:73:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
        Validity
            Not Before: Jun 30 13:00:58 2026 GMT
            Not After : Jul  1 13:00:58 2026 GMT
        Subject: CN=666d13616946c061514cf5a3054b148bc153d3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:47:e7:b6:a7:3f:ec:fe:bf:af:7a:ae:b1:
                    09:99:84:80:5d:45:6d:fb:14:64:2c:ce:1e:43:5d:
                    ec:91:57:12:ff:10:b0:df:14:57:f6:6b:e8:2f:93:
                    8a:46:59:5e:1b:bf:fc:f7:37:0e:6d:c7:dd:2f:e4:
                    be:e8:c2:91:ea:56:d3:c8:c7:7f:8b:56:ba:08:6d:
                    92:6d:49:b1:ba:c8:c0:88:31:ce:d1:42:71:d1:29:
                    72:cd:ac:d4:ce:bf:a8:6d:fe:d8:03:3c:29:f7:d5:
                    d5:10:e2:2b:4e:27:4c:f8:dd:ab:cf:4d:60:11:9d:
                    ad:37:07:a6:18:b7:c5:cb:25:a9:9d:36:ef:78:cb:
                    22:bf:d1:36:c1:f9:f5:96:e7:e9:10:d8:06:9b:d5:
                    5e:2d:cd:34:63:4f:cb:52:e0:ac:f7:d0:9d:90:d5:
                    2a:d2:4d:b5:47:36:bb:03:d7:3a:38:31:7f:f3:67:
                    77:ef:c6:83:74:c3:5e:2f:ef:bc:a6:8f:6b:59:8d:
                    34:02:ec:03:63:a6:42:cd:35:e6:fb:19:10:fa:1c:
                    72:da:05:3a:7c:b8:4f:02:04:ef:12:29:a5:95:14:
                    61:a3:3e:97:7f:cf:1e:bf:a7:26:49:53:b4:c6:25:
                    d1:56:d8:45:94:7c:87:24:20:be:30:c8:fa:d6:a1:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6D:13:61:69:46:C0:61:51:4C:F5:A3:05:4B:14:8B:C1:53:D3:D3
            X509v3 Authority Key Identifier:
                keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:6a:40:c7:53:52:5e:9a:82:cd:ae:31:d6:b4:96:79:82:
         c7:89:4f:b9:d4:10:60:24:4c:ac:0f:4c:18:4a:9d:1e:b6:bd:
         4b:59:1d:48:8d:3c:62:ff:3d:fe:1d:a1:9d:09:84:f2:6e:04:
         12:75:49:7a:1b:5b:71:b5:59:97:4f:56:ca:bd:27:1a:a4:42:
         39:2e:ea:76:11:5b:3d:62:f7:46:eb:f2:26:46:c8:94:90:05:
         cb:49:25:09:52:48:a2:9b:1a:86:f5:6c:dc:16:91:40:1d:e6:
         ce:80:f8:4f:d2:4a:72:46:39:d9:c5:b0:19:b8:49:00:67:8c:
         60:93:5b:1b:f6:5e:69:5e:e0:18:33:c3:10:d8:bd:13:16:91:
         8b:32:50:06:e2:22:95:6b:0a:e9:b9:0b:05:e0:51:be:23:0c:
         75:08:67:57:5e:09:be:be:84:65:b6:d0:88:b7:fe:32:29:8f:
         71:86:5c:c7:ba:4f:42:f1:f6:72:a0:c3:ea:1f:94:75:2d:10:
         e8:ab:32:b6:dc:81:3a:1a:7b:c3:61:a2:5c:06:92:03:4f:42:
         9e:15:3d:fd:88:2c:99:d7:a5:00:3e:fd:5d:80:40:1d:a4:65:
         d4:18:d4:24:02:59:5f:9e:b7:a9:dc:3c:fa:0b:1b:7a:bb:80:
         9c:b6:e2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:41 2026 by rpki-client