Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File:                     CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier:          AIkol8gI2jQpc06imX2HzBN3WNfvHkeatoFhBegi55Q=
Subject key identifier:   15:31:CC:69:AA:9A:FD:C9:2B:8D:32:70:00:26:28:85:F1:90:05:33
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer:       /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial:       019F189E5567FF8508291DA4776DBC20430F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number:          105A
Signing time:             Tue 30 Jun 2026 13:00:57 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:57 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:57 +0000
Files and hashes:         1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: pWTGrmp4Gg1YHpapZ7nFs1mJI3ZPyuYV97QngdqXmkY=)
                          2: ECXIzFT9fepBNclb1K3f0soMTMI.roa (hash: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:55:67:ff:85:08:29:1d:a4:77:6d:bc:20:43:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
        Validity
            Not Before: Jun 30 13:00:57 2026 GMT
            Not After : Jul  1 13:00:57 2026 GMT
        Subject: CN=1531cc69aa9afdc92b8d327000262885f1900533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:48:23:86:6f:9f:f7:ab:a6:71:52:f5:aa:5d:
                    88:b0:8d:b0:f5:03:a5:7f:f3:6b:be:ee:95:b6:56:
                    b9:dd:ba:41:63:c2:0c:2c:a1:4d:23:fa:48:6d:ba:
                    59:22:26:89:ed:0c:3f:ac:f8:29:1c:5c:dd:c8:47:
                    55:84:52:9a:b8:8a:b4:26:41:c1:b9:ac:82:ef:61:
                    67:82:60:ec:26:61:01:cf:ee:a5:3b:a1:53:d4:1c:
                    b1:cf:1e:ed:8b:44:1f:9e:7f:0b:02:10:f6:26:ea:
                    51:1e:c3:d7:24:03:1c:9b:a5:c8:8e:7a:8a:cc:60:
                    5a:04:eb:b1:24:a0:28:5c:81:a1:5d:6b:59:59:13:
                    9f:b8:d6:6a:7e:23:4b:99:d7:89:28:a2:82:d6:95:
                    b3:55:0a:b6:2c:66:74:93:e2:b1:a9:ca:ac:79:d2:
                    69:64:2f:18:c6:2a:d8:78:9f:d1:9c:45:07:b5:95:
                    da:35:eb:ba:0d:74:a0:a1:18:aa:85:2c:0a:a4:00:
                    5f:a2:7c:e0:64:e2:25:3f:cf:aa:0d:50:e1:4f:7d:
                    fc:fc:d7:80:2c:01:bf:6f:f0:43:51:ca:00:cb:35:
                    07:1d:41:82:ba:0f:46:78:0a:2d:37:56:db:21:a4:
                    6f:6f:b3:00:bd:2f:97:03:26:b3:b5:3b:55:72:b0:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:CC:69:AA:9A:FD:C9:2B:8D:32:70:00:26:28:85:F1:90:05:33
            X509v3 Authority Key Identifier:
                keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:94:c3:64:9e:47:61:d3:0a:cf:57:32:0a:74:5d:0e:f8:14:
         19:77:4d:58:c6:9a:9b:d4:43:2a:6d:94:09:bf:f8:ff:32:7d:
         f0:05:33:c9:75:6e:e5:60:1d:74:c5:c0:c4:ca:44:95:f5:1f:
         4c:3b:68:fb:d8:a9:8a:d5:00:4b:b3:ea:a2:d7:2c:cf:bf:c3:
         47:b8:5d:2a:a0:5f:14:4d:88:fb:68:8d:b8:a3:89:b7:49:62:
         fb:26:ef:e4:33:16:fb:5a:30:c1:59:1a:a1:36:1f:5e:f3:59:
         fe:53:52:e1:d1:88:5d:a0:71:c0:95:24:23:40:ff:5b:44:35:
         ec:21:c7:a1:9f:d2:17:55:78:b3:86:1c:d9:6c:ec:1e:cc:16:
         d5:42:6e:ae:ec:a3:07:0e:48:6b:30:b9:2f:f5:d2:72:40:23:
         c4:b5:29:83:f6:48:c7:f0:03:49:9a:7c:24:67:9f:90:50:5a:
         ea:c7:c1:e7:1a:87:6c:08:bf:bd:68:50:78:24:30:68:c2:17:
         46:8b:96:17:02:3a:67:80:53:b8:47:cc:7e:b5:ae:6c:fd:2c:
         51:f6:ec:5a:f3:e0:c5:a8:df:47:59:c7:fc:ca:33:bc:13:20:
         ca:76:94:9c:39:a6:7b:7f:27:2e:4d:3a:fc:2f:30:ca:b5:4d:
         ff:37:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:57 2026 by rpki-client