Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          URzh1XXXQJi+2GRZr+YAv4Po2H5HHrzbbV6t+HytEbE=
Subject key identifier:   36:E7:D5:DC:E7:AE:B4:1C:36:DB:1B:71:A0:0F:F8:6D:01:71:B3:2A
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       019ECDBB3A480C571CF53C92634D520C26BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          10F7
Signing time:             Tue 16 Jun 2026 00:00:59 +0000
Manifest this update:     Tue 16 Jun 2026 00:00:59 +0000
Manifest next update:     Wed 17 Jun 2026 00:00:59 +0000
Files and hashes:         1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: cgqAdWMkv0GXGjvTQ3/JpnU9mVqu8ZyE83l7yO8cZ+0=)
                          2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:cd:bb:3a:48:0c:57:1c:f5:3c:92:63:4d:52:0c:26:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Jun 16 00:00:59 2026 GMT
            Not After : Jun 17 00:00:59 2026 GMT
        Subject: CN=36e7d5dce7aeb41c36db1b71a00ff86d0171b32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cb:8f:db:38:73:6c:a6:2d:6f:c3:ea:7d:9d:
                    07:5c:a2:e4:5c:9d:d7:f5:85:b4:1c:09:61:ee:1b:
                    a5:10:89:ca:d3:a2:5f:eb:4b:99:f6:37:27:ea:30:
                    d9:56:0b:42:f5:03:88:a9:e4:41:a4:3d:68:96:59:
                    94:51:43:eb:bc:30:f4:6b:97:d9:cf:8c:ef:63:a7:
                    73:fa:ee:a5:96:80:23:9b:f2:2f:00:93:4e:59:a4:
                    63:4a:8b:50:7c:2f:84:0f:8b:67:8c:4d:4d:50:9e:
                    c3:2d:c1:88:4e:d6:27:3a:48:58:66:1d:f8:a3:37:
                    ca:f8:48:93:24:ce:87:84:38:2f:7b:1a:d2:e5:e0:
                    a3:64:c7:ed:d4:ec:a7:00:38:e5:5f:eb:c0:d8:49:
                    9a:14:41:2f:8e:27:1e:96:73:ac:de:f3:81:6e:4c:
                    e7:a8:77:a6:71:ed:d5:59:7c:25:e8:3c:54:95:6b:
                    da:c3:f8:16:37:ed:e5:18:c4:0c:dd:78:4e:8d:bd:
                    18:0d:a0:f4:39:11:49:c9:6a:2f:55:17:b5:30:ae:
                    a7:8e:54:f5:6c:77:0f:df:76:4d:cd:8f:98:df:23:
                    d4:97:92:46:64:20:53:b9:7c:90:10:3c:52:ed:08:
                    63:08:ac:28:75:72:80:93:ac:30:6d:00:5f:3c:ac:
                    99:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:D5:DC:E7:AE:B4:1C:36:DB:1B:71:A0:0F:F8:6D:01:71:B3:2A
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:48:a7:26:2b:e6:a3:1d:ee:ad:6c:a1:21:58:70:32:b4:20:
         b1:a4:d3:2b:64:c3:e3:43:ef:cc:8b:76:30:86:7d:c5:97:19:
         1b:de:9b:12:d5:f6:05:70:d7:c0:72:53:86:52:ee:0b:4d:a3:
         c8:87:13:fd:c1:02:74:e7:f3:62:1b:b3:33:a9:7e:69:23:47:
         d1:b3:0f:e4:39:ff:98:d9:4c:9b:2d:95:80:e4:e9:7c:dd:33:
         26:3a:7a:24:0c:be:05:c6:b8:b8:7a:b6:71:fb:f2:4d:10:62:
         50:e8:ef:ec:44:43:22:07:74:d9:8a:d9:64:35:fc:57:b5:38:
         34:9a:fb:eb:7a:ca:c6:fe:df:07:a3:db:0d:fa:51:7a:5e:eb:
         53:ee:16:af:73:e7:c8:2d:e0:c8:b2:2a:be:f9:78:e6:2a:04:
         97:17:80:8e:f2:5d:7a:f5:70:49:be:8d:c6:22:f4:f2:8f:3d:
         80:66:9c:0e:1f:51:97:65:85:c4:34:61:02:be:cc:5f:67:f1:
         a1:8a:5b:71:a6:ac:f6:93:26:e3:36:ed:f1:0e:6b:3b:9a:24:
         9c:8b:43:e5:57:c8:39:a9:54:a1:39:00:ad:39:bd:7b:60:db:
         6e:67:13:28:4f:b9:1b:89:47:cb:3a:d7:27:8d:73:ed:18:d0:
         05:3d:82:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 08:01:06 2026 by rpki-client