Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
File:                     _3EQVKiURqdvSTziwSepSOukqP8.mft (raw, json)
Hash identifier:          LS/XHqRkX6CUeNauoRTB8AEfnd2xhi9HbCNAk1IJK40=
Subject key identifier:   C2:3E:FD:28:AF:73:AC:B4:33:C8:9D:7F:B9:7E:38:C8:3D:A1:34:B4
Authority key identifier: FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF
Certificate issuer:       /CN=ff711054a89446a76f493ce2c127a948eba4a8ff
Certificate serial:       019EE28C38DB22DC69D2B43000E61547FDE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
Manifest number:          0721
Signing time:             Sat 20 Jun 2026 01:01:40 +0000
Manifest this update:     Sat 20 Jun 2026 01:01:40 +0000
Manifest next update:     Sun 21 Jun 2026 01:01:40 +0000
Files and hashes:         1: _3EQVKiURqdvSTziwSepSOukqP8.crl (hash: TirCLhiRjRKsN4WUCC5QOpWcAeu67NxHMe6TI3YExtY=)
                          2: p_zj4OSdAqCR4867NhK0flKlx14.roa (hash: hGOuLTSiLd6M1yp0vU60mwegnSaS4NS/nPDY8Bf3UTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 19:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:8c:38:db:22:dc:69:d2:b4:30:00:e6:15:47:fd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff711054a89446a76f493ce2c127a948eba4a8ff
        Validity
            Not Before: Jun 20 01:01:40 2026 GMT
            Not After : Jun 21 01:01:40 2026 GMT
        Subject: CN=c23efd28af73acb433c89d7fb97e38c83da134b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:52:9b:30:c7:07:aa:a1:4a:68:13:93:86:d8:
                    f2:4c:f0:4d:81:89:18:76:93:0f:f2:27:ea:38:53:
                    c2:7d:82:9e:fa:be:f0:a7:fc:75:3f:07:8a:98:a9:
                    df:e2:71:a7:d7:34:81:64:57:1a:86:44:76:29:84:
                    1e:07:cb:f3:5d:02:6c:12:f1:db:ca:2a:17:0d:21:
                    63:b8:7b:e8:51:fd:39:15:d1:84:f6:05:ad:67:95:
                    65:d4:1f:a2:d8:62:8c:c9:03:4f:17:ea:8a:9a:c7:
                    30:be:72:ca:68:ae:f0:69:3d:36:5e:1e:ff:de:58:
                    08:f1:fe:84:7d:1c:c4:4d:70:19:76:11:be:bf:31:
                    e9:fc:09:08:c9:4b:57:3d:42:b4:ca:de:cf:7d:2a:
                    83:1b:0d:f9:0d:d9:d9:b7:74:6d:2f:86:90:88:96:
                    6c:64:68:3d:e8:89:dd:11:0d:ab:5e:a1:09:4e:d9:
                    30:49:50:1d:e7:51:42:82:46:ac:0a:ee:ce:b4:b5:
                    36:5c:fc:a6:9b:5a:59:40:16:17:c6:39:04:87:81:
                    5f:d2:af:74:92:e7:de:4b:b7:82:63:85:ce:3f:ed:
                    ae:9c:a3:85:ab:a2:9d:c6:e3:8c:32:56:a7:bd:bc:
                    c0:64:97:90:c6:98:c6:69:d0:28:b9:56:9f:2f:03:
                    eb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3E:FD:28:AF:73:AC:B4:33:C8:9D:7F:B9:7E:38:C8:3D:A1:34:B4
            X509v3 Authority Key Identifier:
                keyid:FF:71:10:54:A8:94:46:A7:6F:49:3C:E2:C1:27:A9:48:EB:A4:A8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3EQVKiURqdvSTziwSepSOukqP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b8fc55-b4cd-4d1f-9990-47ac389d3261/1/_3EQVKiURqdvSTziwSepSOukqP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:b2:30:5c:db:f8:b2:e5:16:4f:d1:2c:43:68:f6:b4:29:64:
         74:1b:53:1e:ce:2d:2a:d3:85:0e:1f:fd:06:b9:af:66:41:5c:
         fd:71:7b:b4:67:15:56:52:55:32:ac:f3:db:a1:d8:f6:21:25:
         93:b7:6a:bd:4d:7e:53:4a:6f:89:77:cd:36:bb:0f:36:6a:24:
         95:a5:96:a9:c3:61:95:4e:8f:fd:cd:46:fd:1b:e7:db:d2:42:
         87:69:8e:c7:4c:d1:a0:e9:82:cf:c0:0e:db:3c:01:ca:b2:f1:
         b6:0a:3d:7c:57:26:1a:1e:0c:2a:d2:be:55:f7:03:76:28:ad:
         91:77:3a:51:b9:1d:52:12:2a:2f:5a:d1:6b:d3:4b:d2:ab:ed:
         9f:4e:ff:1c:21:7c:ec:c0:5a:7a:77:fc:dc:e5:62:4f:ae:fc:
         60:b2:29:50:2d:16:dc:4d:5c:4f:89:c5:65:be:4a:fb:fa:f8:
         63:a5:bc:aa:fd:8f:fb:b9:31:c5:28:07:19:cb:91:85:4f:84:
         f7:5f:4b:68:5e:95:f5:85:bf:08:9b:9a:4f:32:81:e7:61:0a:
         59:f2:f0:9b:6a:16:f9:92:34:77:83:c9:85:57:71:50:02:e3:
         9a:63:e9:44:be:cf:4c:0f:fa:88:b0:af:b3:ae:b6:b5:04:9b:
         1e:26:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 04:02:17 2026 by rpki-client