Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File:                     Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier:          bEMHrcpRoKcmItkWVoAfGgaqNoNIjscHrfLYiE+NN8c=
Subject key identifier:   85:D9:08:AE:AF:AA:74:F9:63:C3:BA:1B:1C:DB:2E:2B:15:9F:C6:E2
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer:       /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial:       019F190C789B0ED5FF81EE6C64751206A531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 15:01:15 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:15 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:15 +0000
Files and hashes:         1: 6LPLfXRjPfIhjODnqMp3dSMQhpE.roa (hash: SwmREtsfcX2USnXEaEXyt246LdWmwOC0/X0ED+RKl5c=)
                          2: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: LBVQD8m3ErpA30OY+/lGpCUFq4m+9JHVaVWg0uREywE=)
                          3: kvgue6TS--DcN7HG6o1wL6cSaEs.roa (hash: FoFeIWZgKjpGFpo+unUKSXljq5ce3QE7qtWREotLcT4=)
                          4: qLhFmr4T7lmhKT8keUmQGB3IPPk.roa (hash: 2UcGL5CSyZb5XFh4zJbKoqd+DUw15c/cw5GBlQgBwdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:78:9b:0e:d5:ff:81:ee:6c:64:75:12:06:a5:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
        Validity
            Not Before: Jun 30 15:01:15 2026 GMT
            Not After : Jul  1 15:01:15 2026 GMT
        Subject: CN=85d908aeafaa74f963c3ba1b1cdb2e2b159fc6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:a4:be:22:91:60:b0:82:7a:93:44:55:a4:
                    8a:c2:04:24:34:32:36:92:9e:23:a1:23:06:b8:3b:
                    24:e9:cc:ec:a1:48:41:6f:d1:98:cd:f9:9d:8c:00:
                    14:ee:b8:30:d4:ab:00:d1:8e:18:74:b0:22:85:56:
                    47:a2:32:11:9a:0a:a2:ee:df:ac:9d:1b:2a:77:bd:
                    ca:ff:40:da:46:89:6d:89:40:3b:2e:da:f4:32:8e:
                    71:86:76:7d:21:6d:78:6f:17:2b:03:dc:5a:40:80:
                    3d:fc:80:1e:03:be:0a:06:ca:22:77:08:09:59:42:
                    f6:01:e2:55:f0:cd:1b:5c:71:3a:68:df:64:b3:75:
                    73:66:48:b0:09:8b:1b:1e:26:c3:25:6a:37:e1:76:
                    ea:9d:e4:e1:b9:a9:8a:4a:26:04:6f:9f:d5:3b:9d:
                    d3:e0:c8:54:32:45:17:dc:7c:f4:c0:b9:4e:dd:e2:
                    ad:f3:4a:69:d6:e0:1c:c0:3d:f2:e7:3d:98:6a:0e:
                    64:f7:ce:f5:50:1f:71:55:36:a1:cf:3f:f7:99:bf:
                    e7:59:03:46:a5:12:d4:36:a2:f9:78:d8:20:41:89:
                    67:b6:51:31:77:53:ef:76:2c:73:3c:8c:81:52:a7:
                    9e:fc:f0:18:86:66:a6:48:5c:76:e2:19:77:73:69:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D9:08:AE:AF:AA:74:F9:63:C3:BA:1B:1C:DB:2E:2B:15:9F:C6:E2
            X509v3 Authority Key Identifier:
                keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1c:64:d1:3b:47:23:bb:47:dc:2d:50:3a:7a:cd:ea:0c:3c:
         e2:93:1f:80:14:4e:d7:79:d5:f4:8a:e8:28:2c:e7:38:33:0a:
         0c:fe:95:0d:4e:de:8d:09:b9:71:8d:e4:96:9a:9d:a1:b1:01:
         00:d5:e8:40:49:ed:ee:8b:36:28:dc:56:0f:e1:3f:38:90:6e:
         64:e7:7d:71:e5:a0:b7:05:ee:f9:81:e0:ce:8b:53:8e:96:ba:
         ea:4b:e0:77:1f:52:ab:2c:de:bd:26:fa:3b:c9:22:13:f2:7c:
         cb:59:a9:3a:d0:e6:21:bc:d2:fe:db:ef:cf:d2:79:57:36:c6:
         0f:03:5c:22:57:96:33:78:3a:db:81:a2:1b:c0:49:b2:74:aa:
         67:cc:23:52:dd:4e:31:71:64:47:8c:ed:17:8f:fe:e3:ba:21:
         4a:c3:7c:09:41:7e:f6:1e:9e:9d:a5:fd:59:de:d8:e1:40:55:
         e3:a7:9d:78:46:fc:bf:f2:bf:b0:09:8d:52:9a:65:a0:11:d4:
         92:93:75:e7:51:d4:fb:d4:af:70:9f:8d:6c:3f:19:b6:f1:6d:
         45:c0:b6:91:cd:3c:3e:93:3b:12:1a:9d:7a:7c:80:c2:0d:1a:
         21:16:b5:e6:b5:69:10:28:db:92:09:28:3b:3b:6c:b5:f0:8e:
         f8:18:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:42 2026 by rpki-client