Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File:                     1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier:          UI5+xrWhB/oonUbeT+mQrs1ABQgjbqiamc1kB65aXRc=
Subject key identifier:   6B:53:22:4B:94:AE:20:33:06:BE:C4:27:69:0D:A0:78:A3:14:91:FA
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer:       /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial:       019F17C39E17B7DD75CABBFCE5B4F92B13BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number:          0581
Signing time:             Tue 30 Jun 2026 09:02:03 +0000
Manifest this update:     Tue 30 Jun 2026 09:02:03 +0000
Manifest next update:     Wed 01 Jul 2026 09:02:03 +0000
Files and hashes:         1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: HDS+CATqsM6oRekEXcm2HS3xt5X6u4cdLj1dvg0JGAE=)
                          2: xzZmjyBgUA5PVhf5CC_hJNwcVzY.roa (hash: NZxy7sLP8vd+st6fA6TY6gFnYnOKj2RudHOzgNs7jsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:9e:17:b7:dd:75:ca:bb:fc:e5:b4:f9:2b:13:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
        Validity
            Not Before: Jun 30 09:02:03 2026 GMT
            Not After : Jul  1 09:02:03 2026 GMT
        Subject: CN=6b53224b94ae203306bec427690da078a31491fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:bc:27:a4:4a:11:40:c8:d8:0d:9e:93:98:
                    95:1e:4c:86:da:6a:17:4e:40:b1:74:9b:f2:69:4a:
                    be:6f:a5:88:bf:5c:df:39:ce:25:90:a8:1a:52:c0:
                    b7:66:4c:97:9e:69:14:18:b4:8e:3b:64:b3:63:11:
                    a0:9e:2a:29:ca:43:39:44:29:1d:3b:19:0d:f7:d6:
                    3a:75:95:b4:b3:7a:08:6e:d2:ae:00:42:7d:03:50:
                    5d:f2:00:54:c5:af:a6:b9:25:04:5b:9b:a6:e2:ca:
                    0a:b8:b5:9a:ad:7b:2f:af:64:d1:7b:4e:dc:db:26:
                    b7:82:5e:9f:36:b0:34:d7:91:51:84:1c:75:99:2e:
                    67:61:55:ed:16:1f:0a:74:59:d3:14:f1:c2:98:d5:
                    dd:61:01:1a:06:0c:2a:40:cf:cb:74:fd:ed:fe:da:
                    51:b6:c2:c0:f2:d0:a6:2b:83:e0:48:16:9e:a0:57:
                    d2:d6:d7:78:99:05:4b:30:dc:51:7b:bd:28:e3:37:
                    35:50:05:c8:63:ad:0a:85:ce:eb:ed:7a:61:89:39:
                    06:41:20:f8:81:fb:3a:8b:b1:35:63:67:f3:01:71:
                    db:2d:6b:be:01:60:c6:e9:8e:00:48:cc:6e:45:2b:
                    c2:10:4c:76:b6:43:9a:85:f1:df:0a:77:08:8f:a2:
                    9e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:53:22:4B:94:AE:20:33:06:BE:C4:27:69:0D:A0:78:A3:14:91:FA
            X509v3 Authority Key Identifier:
                keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:30:5d:5c:05:11:8d:66:98:b9:b4:29:a5:23:53:4f:04:
         d5:cc:24:75:25:b4:69:31:ff:2e:dd:36:1a:b9:48:7a:6c:36:
         c5:28:f2:6d:5a:1a:b9:f1:bd:18:6b:d4:cf:af:3c:3e:13:4d:
         a8:43:7c:6f:fc:22:24:b4:05:6d:33:fb:56:d5:40:b2:8d:0f:
         82:63:bc:0b:b7:af:b7:e9:e5:20:d2:55:7c:f8:42:0e:e7:a0:
         cb:fa:18:5f:79:c7:70:e1:52:c6:9b:e2:a8:e4:f0:05:8f:7e:
         17:69:cf:02:5c:e1:1b:46:8c:98:ed:2d:9a:a0:dc:53:2e:fc:
         5d:ad:61:8b:c3:1d:bf:63:94:74:cc:dd:25:10:cb:cc:3c:10:
         3b:cc:e9:93:06:f0:0d:cb:e4:5d:e3:78:84:d1:5b:35:8e:6b:
         a4:32:de:70:a5:ac:cb:35:1d:89:72:72:98:e4:d2:a8:6f:1d:
         61:90:80:2d:74:40:f5:6d:86:ae:25:74:18:d1:a5:ba:29:06:
         b7:a5:c8:eb:53:75:78:bd:59:13:53:9f:8e:b8:77:96:e7:2e:
         56:28:35:35:f6:4a:3e:23:c2:03:1b:1a:a7:49:24:1a:b5:ca:
         a3:c1:b1:94:9a:81:45:9b:d8:cd:38:f8:bd:cd:74:9c:40:eb:
         dc:31:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:02 2026 by rpki-client