Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File:                     rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier:          2KysYKr1FdXkH+QhWmjgPKjMdFecVpiGT93krgkfTCE=
Subject key identifier:   2F:06:07:C2:EC:A9:BC:16:BD:3A:11:E1:41:B4:B9:A5:FF:1D:FF:EF
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer:       /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial:       019F126612C63F3026C1AC3AFA8EBCA0BA16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number:          08A3
Signing time:             Mon 29 Jun 2026 08:01:47 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:47 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:47 +0000
Files and hashes:         1: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: RjduR+swIo3AFUdsVCQdxXVKmWMa/dxOWkblxEuw7ns=)
                          2: y1Acn-nX2-7OFeDZEqyAj0HHUbI.roa (hash: Z/l1m2g2kzxvfaR8aMT4tSywwcoOw223UuXpwNiGyGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 08:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:66:12:c6:3f:30:26:c1:ac:3a:fa:8e:bc:a0:ba:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
        Validity
            Not Before: Jun 29 08:01:47 2026 GMT
            Not After : Jun 30 08:01:47 2026 GMT
        Subject: CN=2f0607c2eca9bc16bd3a11e141b4b9a5ff1dffef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:0a:d2:30:4e:55:06:75:ac:4f:fe:09:17:
                    16:dc:af:e2:28:12:51:2c:10:8b:4f:e4:06:b7:d4:
                    48:0f:b6:03:69:37:a7:48:a0:a2:01:37:bb:64:f2:
                    18:48:c6:4b:b8:dd:10:95:44:31:b4:95:a6:7c:95:
                    87:b5:aa:81:0b:4b:7c:e3:02:20:10:c7:ee:a5:67:
                    06:de:bd:1b:8f:8b:79:39:d7:88:46:2b:14:a1:45:
                    5f:1b:6f:ae:85:44:35:64:3b:7e:e8:52:ab:e8:dc:
                    0f:96:14:85:54:1c:36:93:ce:2e:60:be:a1:e3:27:
                    09:39:43:9d:0d:9f:aa:d7:c4:ef:4f:87:76:07:c2:
                    8e:ae:ed:e8:05:fa:5a:f7:94:01:fd:14:b9:cd:d3:
                    20:a3:5f:8d:c1:b4:82:7c:87:f0:53:a5:fa:97:c8:
                    a8:b4:a7:8f:36:a4:5d:27:d1:71:6e:62:c4:6c:1d:
                    e9:5e:2c:dd:93:e7:f3:31:3e:f2:a6:98:98:09:03:
                    64:b0:4f:ba:42:95:40:02:50:5f:93:3b:c8:fc:cd:
                    bc:70:af:d6:88:76:1b:75:09:f9:40:df:31:12:6f:
                    b0:80:d3:22:03:75:4a:69:71:85:4f:1f:bd:e1:a8:
                    d1:9b:41:b7:ae:64:ff:a0:a8:fb:53:c1:ac:20:2a:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:06:07:C2:EC:A9:BC:16:BD:3A:11:E1:41:B4:B9:A5:FF:1D:FF:EF
            X509v3 Authority Key Identifier:
                keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:cc:af:ce:e8:9a:a5:1f:49:b4:a4:89:ef:b2:ea:cc:60:b8:
         ea:a0:37:da:e9:06:06:31:86:49:4d:87:9d:81:ed:c3:f2:2a:
         93:cf:84:6b:f5:38:07:00:79:f1:79:2e:74:3b:97:4b:f8:08:
         72:94:89:89:29:23:55:88:5b:e0:33:1a:f3:f9:df:fb:49:6f:
         2a:b2:8d:e3:ac:15:fc:6e:d3:2c:f7:9e:af:6a:86:64:d4:26:
         ba:3e:6c:38:f7:05:3d:06:2f:95:22:70:96:29:ce:37:12:59:
         d7:ab:9f:6f:f7:23:94:2b:09:37:86:bf:35:47:9d:96:84:41:
         cf:23:5d:50:19:b8:14:dc:7a:db:93:79:eb:e5:f5:5b:2e:0d:
         30:7c:9e:c7:9c:36:ac:58:fa:28:cc:7d:37:51:f2:85:9f:7e:
         0a:75:ef:49:7e:e2:d0:58:b5:48:aa:9c:7f:4e:4b:df:84:45:
         c1:30:98:2c:5f:fa:8d:53:25:b4:61:bb:f2:80:e8:8c:50:6e:
         fe:b7:f3:60:3d:0a:67:7a:e3:7a:f5:1c:d4:9d:33:c1:cc:21:
         28:69:43:49:ce:f9:a0:c5:37:f5:02:80:1d:6f:b5:e7:f4:b3:
         39:f1:ed:3f:c4:46:d6:be:b4:4b:08:05:ca:ef:cb:8a:43:c2:
         19:8f:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:26:56 2026 by rpki-client