Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
File:                     E34RA3dXhdAS_I3atMAqwDeRudQ.mft (raw, json)
Hash identifier:          bWnLPKJJVqVhpjhI6oJZP/xq3mIkEhnfbxQby0abaDA=
Subject key identifier:   D6:A2:F7:68:05:9C:2B:34:58:16:85:88:84:1D:1B:DD:99:27:3B:CE
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Certificate issuer:       /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial:       019F190C932A734B3515E0F7DF7B2ECC4777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 15:01:22 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:22 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:22 +0000
Files and hashes:         1: E34RA3dXhdAS_I3atMAqwDeRudQ.crl (hash: M8tHjZJMpRzQjilDIDRRNz+KECS6f+IpZBw/DLQb4V8=)
                          2: Oc83xjl3O0pNHEvrLPV5RfHxTMo.roa (hash: riBhCRYBSK/hU06s7Utiuh3DGPbPNRVt2NaABQjgoC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:93:2a:73:4b:35:15:e0:f7:df:7b:2e:cc:47:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
        Validity
            Not Before: Jun 30 15:01:22 2026 GMT
            Not After : Jul  1 15:01:22 2026 GMT
        Subject: CN=d6a2f768059c2b3458168588841d1bdd99273bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:42:e9:ef:86:fd:dd:67:44:47:85:02:ac:
                    fd:6d:a4:b4:18:c0:8f:33:17:3f:fe:f9:7d:95:e7:
                    76:75:bb:f3:9e:b1:26:11:1c:3c:cc:d7:eb:a6:e0:
                    b8:6d:b5:cc:2d:2c:fa:5e:ac:33:fa:03:ee:d0:38:
                    0f:f2:e2:c2:c3:9b:8d:5d:54:f6:95:13:76:cb:50:
                    4c:86:fa:05:3e:4e:25:19:4d:c8:dc:32:91:8a:ea:
                    aa:9c:8a:4f:7c:d6:21:f3:a3:e0:21:d9:95:9b:16:
                    4f:d2:a4:0b:c6:a3:10:b0:6b:72:24:c6:c1:70:cd:
                    d8:4d:5a:5e:6a:f1:8e:dc:a1:e9:21:3a:0f:01:8e:
                    44:18:6f:e1:e4:02:ff:77:ce:e2:88:93:bd:99:f8:
                    6b:ae:4e:4d:dd:ed:cb:a9:22:79:48:a7:5e:53:e1:
                    3f:ff:22:31:e0:12:7e:7a:b8:ca:72:67:21:d3:69:
                    6a:98:1d:1f:0b:f5:bb:3f:c3:1e:57:6a:74:1a:28:
                    5f:30:d1:b4:1e:89:35:2e:84:aa:57:34:13:85:c2:
                    fa:32:b9:42:4c:b3:17:de:90:8e:33:e0:22:26:af:
                    3f:75:f2:0e:08:06:ea:9b:09:9d:57:ba:a2:5f:53:
                    e1:d1:cc:a3:6c:c0:d5:d4:81:0c:eb:50:9a:29:ce:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A2:F7:68:05:9C:2B:34:58:16:85:88:84:1D:1B:DD:99:27:3B:CE
            X509v3 Authority Key Identifier:
                keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:7e:e4:97:4c:96:5b:c1:64:13:c5:28:db:65:ae:5f:d8:
         6e:5e:14:06:44:82:1f:52:63:68:4d:d6:5a:2e:80:14:c2:ab:
         3c:07:4f:40:31:60:0d:4a:fa:ab:9c:b7:ae:6a:98:3b:e5:33:
         3b:94:fd:9a:5c:ae:c0:f1:b6:3d:e2:f3:ad:c8:c8:c8:7c:76:
         70:e3:99:17:1b:ea:16:f2:c6:4f:6f:aa:ed:34:66:9d:7d:bf:
         71:5f:62:2c:3b:85:ca:d3:05:29:a7:f4:84:3d:8f:37:4d:a7:
         8f:f7:cf:a3:4a:14:84:b7:9a:7e:4b:e5:91:b1:86:d8:2a:2b:
         ec:db:e8:16:4e:ea:77:85:f6:00:ea:27:a7:be:25:de:7d:d6:
         b5:85:1d:5c:3e:31:9c:ac:8b:0e:3b:e5:59:0c:52:2a:af:be:
         bb:f0:7c:75:b7:3b:7a:35:b8:4f:93:c7:f0:ad:4d:ab:72:2e:
         f0:18:f7:b1:4b:2d:6e:c2:76:af:cd:00:12:91:b2:f6:af:d0:
         30:76:38:05:a0:5a:a3:09:ad:86:a9:8c:84:38:5b:98:60:e0:
         ae:64:bd:cd:e0:04:45:f3:ba:e7:c1:14:df:a9:e1:88:3a:15:
         e7:21:ab:38:46:11:2b:22:7a:e9:89:9c:a1:c0:38:de:eb:33:
         30:57:a5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:03 2026 by rpki-client