Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
File:                     McdRr8ueHJZqz3YmDJA6K7GvYC4.mft (raw, json)
Hash identifier:          A8iRcVfpop3SqP9x9ZAtY1g16Hu5JHmlwpj9YzybQbw=
Subject key identifier:   78:56:D4:A6:54:B3:AD:DE:9E:6A:64:6A:20:0D:BA:A0:FB:2F:95:FA
Authority key identifier: 31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E
Certificate issuer:       /CN=31c751afcb9e1c966acf76260c903a2bb1af602e
Certificate serial:       019EB7D79C2E68E22EA06E03E841CF9AE4C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
Manifest number:          2F
Signing time:             Thu 11 Jun 2026 18:00:21 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:21 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:21 +0000
Files and hashes:         1: McdRr8ueHJZqz3YmDJA6K7GvYC4.crl (hash: PNuzUnETvG+r/9qjOqIpdCq2/laMIbddnZzPnW6AARc=)
                          2: d-7Ne4WZes1wekph0cprs11cW_0.asa (hash: cBpioPZmstqTqXBIyQHOqca+O/OfR+4YIKoBZItPJDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:9c:2e:68:e2:2e:a0:6e:03:e8:41:cf:9a:e4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c751afcb9e1c966acf76260c903a2bb1af602e
        Validity
            Not Before: Jun 11 18:00:21 2026 GMT
            Not After : Jun 12 18:00:21 2026 GMT
        Subject: CN=7856d4a654b3adde9e6a646a200dbaa0fb2f95fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:f0:cf:24:45:32:ce:3d:94:bd:c6:61:1c:
                    89:03:87:9f:e0:ed:52:0c:0e:67:93:6f:86:37:a2:
                    62:03:a4:21:94:b1:78:93:ec:a7:80:8c:02:6d:96:
                    be:55:ea:3b:c5:8a:39:58:b0:18:0d:a1:d9:ac:14:
                    3e:0b:04:b9:3b:55:af:64:51:0d:92:e7:ad:a5:08:
                    e4:1f:05:31:97:a0:67:24:87:a1:3b:3e:fb:14:ba:
                    a2:b2:65:b4:30:51:ec:66:7b:60:44:0a:b6:d9:40:
                    88:c3:50:7a:84:f0:46:b4:77:fb:e4:ca:9c:69:27:
                    ef:38:27:7d:e5:d9:67:68:e8:fc:1b:f4:c9:af:52:
                    d8:63:0e:3d:e2:f7:63:13:86:a1:35:c1:23:c6:dc:
                    a8:2b:cc:da:d0:2d:a8:40:f0:18:cf:91:ec:8c:6f:
                    a2:80:5d:ff:0e:ff:6e:ec:3f:b4:3a:10:6f:d5:cd:
                    58:2c:ae:f7:37:d2:07:ea:67:f6:65:b8:24:7d:67:
                    06:58:47:3e:6a:0e:58:81:ef:54:7e:ef:a4:12:8a:
                    fc:ae:b3:94:f8:7f:77:1d:c2:a3:81:08:31:76:5e:
                    5d:ac:54:af:fd:2b:1c:31:c8:b6:ea:10:7d:3c:ef:
                    f2:14:03:45:c2:cc:9e:b2:87:1b:76:c4:64:fd:a3:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:56:D4:A6:54:B3:AD:DE:9E:6A:64:6A:20:0D:BA:A0:FB:2F:95:FA
            X509v3 Authority Key Identifier:
                keyid:31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:65:cb:f8:07:fa:24:93:60:10:c7:73:80:3f:4c:f5:06:76:
         d5:91:eb:1b:a5:cd:62:40:1e:65:10:30:04:3b:bd:de:e3:50:
         3f:34:27:01:a4:30:c7:a7:d8:4d:ac:36:b5:dc:e5:c0:9b:d9:
         85:8e:69:5b:89:6e:eb:9f:da:02:cb:44:4f:0b:a0:b7:8f:0c:
         1b:34:aa:65:3d:40:82:9e:b1:65:fc:bc:1c:ef:7f:46:c5:fd:
         22:0c:d4:17:17:a4:ee:90:a1:9b:4e:75:3e:a5:9f:f3:cf:f7:
         87:8e:0f:3a:40:e4:a8:b3:40:d6:7e:3e:e1:63:5a:70:38:5f:
         d9:f6:4f:32:3f:48:dd:63:34:27:8e:1e:8a:01:f5:98:7a:cd:
         40:63:35:0d:7a:67:79:60:06:11:fd:55:6b:54:e5:01:b6:78:
         be:a5:d8:3a:57:17:12:a9:43:83:bc:aa:47:64:34:09:67:ae:
         45:3c:3a:0a:42:1c:5e:39:60:67:58:04:ce:cc:13:20:5a:f8:
         cc:62:b4:ff:a8:7d:0d:dd:2b:c9:25:4c:69:ef:1e:f1:1a:ca:
         38:83:d3:5f:ca:21:b9:08:c9:93:ce:a5:1e:b4:e6:1f:de:0f:
         01:4d:0e:a8:2f:bc:3c:f3:0a:27:61:cc:d9:e7:29:af:c6:7f:
         be:b1:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:51:04 2026 by rpki-client