Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
File:                     E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json)
Hash identifier:          r5cTnZdBGK//53nxFv3JkfjC3ojqdYykJndB9jAzAiM=
Subject key identifier:   12:C2:27:05:E5:03:E0:E3:E1:FE:8A:92:E2:C2:DE:25:0B:A8:34:72
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Certificate issuer:       /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial:       019F17F954BCDF036C48371183217AB55E87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
Manifest number:          0ABC
Signing time:             Tue 30 Jun 2026 10:00:43 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:43 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:43 +0000
Files and hashes:         1: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: zQiFfs+3tvawVUmHuJNSCOMc/st2nUrPCe4H7aph0E4=)
                          2: nBaSbmtZu4NrFhfgsgrmwUZYBbg.roa (hash: TGjV+Bn0STBLHDURzdnH0m2eTzhKRI7/ugPawErQAOk=)
                          3: xJgVtdXjTRsXhcsLNoQEOd3WPUw.roa (hash: PbrwVhyr9VwnsYtmcA/Kxh412q3DSawxivXz8EKb0kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:54:bc:df:03:6c:48:37:11:83:21:7a:b5:5e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
        Validity
            Not Before: Jun 30 10:00:43 2026 GMT
            Not After : Jul  1 10:00:43 2026 GMT
        Subject: CN=12c22705e503e0e3e1fe8a92e2c2de250ba83472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:08:3f:98:78:fe:b8:72:dc:9f:11:d2:f9:
                    04:60:fb:94:32:0b:6f:7e:50:d9:39:49:76:95:85:
                    01:10:c8:18:fb:90:d6:91:9e:48:48:4e:89:ad:cb:
                    7f:1f:7a:5c:92:00:3b:72:79:a3:92:e7:1e:6f:e9:
                    c1:ce:21:7c:16:d7:f7:60:53:63:52:b0:df:77:57:
                    13:87:9f:f9:74:49:00:ce:18:db:ad:b2:ae:6e:7c:
                    59:52:d4:2f:0e:aa:4a:89:c6:92:e8:b7:4f:74:8a:
                    d5:dc:56:01:15:7a:b1:1a:9d:c1:ab:78:54:36:53:
                    3b:c1:00:e0:44:a1:66:1c:e8:43:52:e6:2d:9c:83:
                    93:a2:4a:b8:fd:d0:5e:7f:22:d2:5a:40:c4:c1:05:
                    52:41:ca:49:03:b1:02:a8:a1:b9:7f:98:71:53:a5:
                    e7:40:42:2d:19:24:c0:61:6d:af:f4:13:c2:13:1c:
                    1c:60:7d:79:16:33:0f:a8:53:d9:a6:5b:c7:4b:62:
                    de:af:f2:a5:e6:ce:d7:53:c9:3f:53:eb:e4:4b:c8:
                    4b:79:96:e0:90:1b:f8:5a:04:6d:27:0f:a1:1d:11:
                    4a:1f:0e:42:26:6b:3a:f5:b4:4b:a0:38:6b:d3:ff:
                    c3:87:fd:c8:e4:be:3a:88:e7:cc:80:d7:a4:66:c0:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C2:27:05:E5:03:E0:E3:E1:FE:8A:92:E2:C2:DE:25:0B:A8:34:72
            X509v3 Authority Key Identifier:
                keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:5e:88:c2:68:2f:1a:43:89:67:3e:66:ee:7f:3d:b6:83:
         e6:0a:7f:3a:a5:71:93:71:bf:f5:24:6b:4a:c8:c6:9f:21:56:
         1b:88:1b:25:42:08:5e:ee:d5:8b:5c:56:50:58:8a:d3:5e:01:
         fd:63:c4:fc:10:77:11:a1:50:9b:9e:ed:0c:3f:21:f6:37:3c:
         47:32:dd:3c:4e:77:03:60:33:57:73:98:6b:e7:84:58:46:7c:
         da:14:90:f3:ee:90:f4:33:c7:48:c7:51:fe:46:27:a3:b1:2d:
         a7:04:de:ac:12:5d:cc:8a:66:6c:96:33:73:5d:a8:36:d3:74:
         38:ec:15:e4:f7:fd:0a:14:09:8d:ec:6b:99:c8:d0:a5:2b:55:
         0c:d1:3a:51:d4:bb:e0:1f:55:eb:59:1a:18:90:16:57:86:e9:
         c2:9b:67:e1:ba:fb:29:dd:32:e0:35:91:83:8b:6b:52:9d:e7:
         f5:ca:eb:a4:40:b8:a1:05:29:15:73:00:13:a6:aa:b4:b6:41:
         de:d7:44:d7:43:57:4b:58:c0:db:07:16:f2:e0:1e:26:7e:34:
         60:6c:27:57:d4:68:2c:1b:0b:6e:f0:76:44:e1:1c:1c:57:db:
         c7:87:d9:5a:ce:9b:53:e5:5c:8d:7d:31:3d:85:fe:86:cc:48:
         8c:38:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:12 2026 by rpki-client