Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
File:                     txU9FR23r-6-BDvkXy1v1Af8XdQ.mft (raw, json)
Hash identifier:          J69IuPOZqXrjDEis1Zi5/I9qqDDHTQJRhMUpp5Fx15A=
Subject key identifier:   73:70:FC:C6:01:AA:8E:28:90:CF:53:AE:7F:98:5D:E3:98:B9:32:BC
Authority key identifier: B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4
Certificate issuer:       /CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4
Certificate serial:       019E88A2E8E8D19843D731FA73A0D63832DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
Manifest number:          0235
Signing time:             Tue 02 Jun 2026 14:00:38 +0000
Manifest this update:     Tue 02 Jun 2026 14:00:38 +0000
Manifest next update:     Wed 03 Jun 2026 14:00:38 +0000
Files and hashes:         1: txU9FR23r-6-BDvkXy1v1Af8XdQ.crl (hash: uB7MElt//FpMJyyYhWZvKQiDrsrP+ucHMWWUHtgb87M=)
                          2: wV3RZHUZxTmDpkws_j0dB6wmvV0.roa (hash: 46jbtO1joeShuyzvvWhT+82K4uiYD5eZiKy/x8muQf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 14:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:a2:e8:e8:d1:98:43:d7:31:fa:73:a0:d6:38:32:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4
        Validity
            Not Before: Jun  2 14:00:38 2026 GMT
            Not After : Jun  3 14:00:38 2026 GMT
        Subject: CN=7370fcc601aa8e2890cf53ae7f985de398b932bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:39:a6:0b:70:62:18:ad:49:37:41:80:44:
                    d1:77:85:3e:6f:45:bf:27:77:93:24:4c:4f:5d:0b:
                    3f:38:d5:01:6c:4d:d2:d5:14:23:22:7e:ed:01:25:
                    44:59:09:02:08:f6:49:bd:af:5f:8f:f0:e9:04:29:
                    d5:3e:37:9c:27:c1:40:a3:35:6f:e1:ac:95:3a:2a:
                    45:ee:62:9b:61:76:6d:0b:88:ba:ca:b1:89:09:75:
                    53:9d:77:af:c6:38:c7:3e:93:26:be:57:b3:9c:2f:
                    5b:d9:18:9c:2f:1d:06:36:27:ed:14:76:b0:05:a7:
                    f5:c1:0e:91:46:e8:1b:e5:10:c9:6c:e9:dd:0f:be:
                    20:cc:16:ef:52:9d:39:1e:db:5d:a3:c0:6d:93:07:
                    8a:25:0a:16:42:cc:9d:a4:9d:cf:02:21:96:d8:ed:
                    1f:de:15:fe:bc:d6:a9:4d:e8:65:83:6b:45:d9:00:
                    d0:05:4c:f6:76:86:e8:be:3c:cc:f6:19:b8:55:95:
                    2d:31:1d:b2:92:cb:89:57:9e:1e:62:71:42:e6:55:
                    e1:52:cc:a8:a9:a9:09:73:10:6a:49:55:3d:16:eb:
                    0c:99:2c:80:a0:4f:ab:0c:a7:70:81:38:da:58:4b:
                    c9:63:04:25:0b:a5:e8:0f:9f:9e:e6:11:ad:1b:c9:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:70:FC:C6:01:AA:8E:28:90:CF:53:AE:7F:98:5D:E3:98:B9:32:BC
            X509v3 Authority Key Identifier:
                keyid:B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:92:dd:34:aa:36:39:a0:21:94:9a:8d:7a:18:c8:56:ba:
         8b:29:cf:a7:2f:2d:b0:ba:09:f0:6b:0e:57:35:b6:2f:51:2b:
         87:04:f1:f8:6a:34:d7:4f:07:de:33:7b:79:4f:96:a2:1a:e6:
         b8:09:18:bb:5e:95:86:c2:11:06:d7:b5:61:4f:8d:51:df:43:
         32:8f:74:88:1d:70:e9:3f:ad:f5:5a:b5:77:5c:6c:93:c2:31:
         57:9e:9f:b5:96:a7:dd:0d:8a:81:8b:41:4d:b6:ee:3b:4a:56:
         64:8a:9a:42:7e:48:f5:6f:5a:d5:86:7e:62:08:b8:7d:51:b8:
         6a:6c:0f:77:f8:06:0d:b1:8b:f0:ea:b4:77:86:a4:94:51:d3:
         01:43:e2:c8:17:95:24:58:d2:36:4b:b2:cd:ae:26:1a:0a:6c:
         34:4c:72:df:70:ed:d1:ae:38:51:f9:89:ea:1b:24:64:aa:b8:
         74:46:5d:dc:0c:45:a8:20:b3:1e:9e:b1:e3:21:60:54:bc:4e:
         b0:3e:a9:8a:4c:e8:3a:66:d0:01:2d:b8:1c:8c:4e:7f:c4:62:
         46:6d:ef:62:f0:b0:6f:bf:e0:f7:99:51:84:f0:fc:89:47:cc:
         b9:2d:bd:fb:ff:85:bd:d6:5f:80:40:f6:5a:1a:44:fc:13:0c:
         80:7f:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:59:32 2026 by rpki-client