Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File:                     rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier:          jCd9Hb4ErosR1+I3uCsuvootBBP/kXwepQbWZBO3GHk=
Subject key identifier:   7B:3F:62:9A:56:F4:0D:63:76:0B:EB:2D:50:19:E9:19:5C:0E:44:23
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer:       /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial:       019F118A503FC310EC99DFE85B90B95BD0F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number:          1382
Signing time:             Mon 29 Jun 2026 04:01:44 +0000
Manifest this update:     Mon 29 Jun 2026 04:01:44 +0000
Manifest next update:     Tue 30 Jun 2026 04:01:44 +0000
Files and hashes:         1: CEaoQwoKe32gXLS8xrDkZN95-LU.roa (hash: 3B+1jOz57ND8z/Cc76ODdU/PdomfAHvLxw8vMmK0i5M=)
                          2: D-eIJMBlUgsV2EKXzikcwUfJ8a4.roa (hash: uzfe0JHrQ3H4xrAH5ZMRf3GDL4lVYto1KjiBlRbDnQQ=)
                          3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: XfO/WE9OihY1l0u7LhfCt/8ixIJDDeOz0mxzgu74Cng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:8a:50:3f:c3:10:ec:99:df:e8:5b:90:b9:5b:d0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
        Validity
            Not Before: Jun 29 04:01:44 2026 GMT
            Not After : Jun 30 04:01:44 2026 GMT
        Subject: CN=7b3f629a56f40d63760beb2d5019e9195c0e4423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:21:a8:d4:38:4c:58:9b:98:ec:cb:3e:75:
                    61:aa:88:26:ec:77:aa:e0:d6:24:c1:d0:84:5b:f1:
                    db:56:d3:12:65:a3:2d:ed:7d:58:ab:ee:a2:be:ba:
                    21:1c:e0:02:d2:bc:71:73:15:4d:b6:bd:f6:25:e4:
                    ab:9d:bf:bb:2a:cd:47:f2:0e:f8:3f:7a:99:15:35:
                    3b:88:f8:41:8a:ae:b3:38:69:94:ac:b6:67:d7:b7:
                    00:be:bf:74:79:69:4d:35:06:d2:1a:42:d4:ec:58:
                    be:0f:9f:60:6b:3b:5b:df:b0:4c:e6:11:14:49:f9:
                    84:f7:dd:6d:48:a5:5e:b9:5a:49:24:7f:3a:44:87:
                    62:43:2b:c0:67:d6:0b:54:53:b1:d9:4d:19:78:12:
                    7f:c5:21:03:b0:8d:8b:3a:8d:84:1f:19:fd:cc:05:
                    51:7f:14:ce:2c:e2:6b:9a:a6:29:71:b7:e8:dd:1a:
                    3c:50:0b:9a:05:02:16:8a:67:8c:5b:d9:ff:d2:71:
                    b3:4a:6c:c6:69:b3:27:0e:8f:75:e5:67:40:e5:34:
                    e9:19:70:ec:22:c7:2a:9a:31:24:05:75:30:1b:43:
                    04:b4:60:7c:8f:77:be:98:4e:95:1a:ce:2b:f1:73:
                    df:75:3e:e8:8c:ad:21:bd:1a:68:56:26:4c:1d:15:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3F:62:9A:56:F4:0D:63:76:0B:EB:2D:50:19:E9:19:5C:0E:44:23
            X509v3 Authority Key Identifier:
                keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3b:7f:41:a5:c2:d9:a6:f0:4c:c9:98:3b:07:88:d8:97:59:
         30:33:60:10:ca:e1:9a:3a:85:a3:e7:10:67:e6:b2:39:f6:74:
         06:c8:64:19:98:6b:dd:67:5a:ff:f8:25:9e:bd:8a:2a:11:b5:
         81:52:fd:fd:b4:25:3e:3b:df:c1:2f:ef:28:e8:5b:33:eb:50:
         85:98:90:b2:c8:8f:8a:a7:44:89:01:de:14:55:e8:57:54:03:
         11:49:91:be:7e:7a:44:96:87:97:bd:b7:48:6e:22:ea:b0:46:
         06:23:74:07:1f:30:e2:3d:e3:ed:8b:cf:16:71:71:93:50:32:
         a3:11:f9:12:71:29:cc:5c:e4:df:3f:c4:2c:64:f1:63:b1:dc:
         3d:c2:4a:49:61:49:76:c2:45:b7:3f:c4:a2:3f:8a:8a:22:f2:
         53:38:14:39:f3:6f:25:67:6a:36:2d:35:14:75:81:ec:1f:9c:
         9b:fc:39:ec:18:30:b0:33:ab:7f:3a:a0:5b:36:40:05:84:47:
         fc:0e:b8:fa:75:21:41:3e:40:92:91:90:1d:3b:3f:44:73:41:
         1a:7a:48:cf:88:26:e7:cc:ca:ae:7c:b3:86:03:73:b6:fa:10:
         90:42:c6:78:0b:ad:66:a3:3a:8d:ad:5c:d7:62:ea:cf:26:2f:
         a4:07:f9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:40:35 2026 by rpki-client