Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File:                     12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier:          /ygAlm+pKm4/eaiKLwqqutym+fqnKqh3t2CrLVG/I+Y=
Subject key identifier:   1D:55:09:58:4A:25:68:11:25:3A:FF:02:E2:C1:FE:DB:D6:A6:C8:00
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer:       /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial:       019E1CB4B6DB02565D5C26799E6AC10E6CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number:          0602
Signing time:             Tue 12 May 2026 15:01:05 +0000
Manifest this update:     Tue 12 May 2026 15:01:05 +0000
Manifest next update:     Wed 13 May 2026 15:01:05 +0000
Files and hashes:         1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: KrnWJRmCqfx8C8zFqw8h+aDFA4EImmLk+KAVVgBxzjs=)
                          2: FoEw3sSBgl3t0ttG82J0ACX5bo8.roa (hash: MuH9TiWx0hlkjcPkeOxwnOHNyUeFkmZNNs45DwxLq/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:b6:db:02:56:5d:5c:26:79:9e:6a:c1:0e:6c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
        Validity
            Not Before: May 12 15:01:05 2026 GMT
            Not After : May 13 15:01:05 2026 GMT
        Subject: CN=1d5509584a256811253aff02e2c1fedbd6a6c800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:46:40:a0:43:3f:27:83:ff:d9:41:d3:43:
                    3d:ce:89:c3:95:cb:38:d7:d6:13:cc:1b:68:be:9e:
                    c9:09:36:bd:08:50:c4:f8:37:5e:50:e0:cc:a0:0f:
                    4c:9a:d4:9e:37:7f:56:a3:7e:d5:45:0a:fa:d2:95:
                    d4:cd:3b:eb:75:c6:47:12:c6:30:fe:6f:80:ed:f7:
                    c3:d9:25:a5:1f:54:17:c3:4d:b4:c0:e9:44:99:f4:
                    dc:ec:f9:7c:e1:69:e7:12:22:ec:71:81:d5:20:e0:
                    be:8b:4a:32:1a:c3:a5:86:cb:3c:c2:df:49:ac:49:
                    0a:c9:61:08:49:d9:5d:ad:59:55:02:68:22:8b:5f:
                    ec:4e:c1:37:d6:c8:ac:ec:44:37:30:ab:d2:6c:0b:
                    4e:20:49:3c:14:e5:90:15:d1:e1:cc:81:85:e3:85:
                    70:cd:5f:7f:d1:e9:32:29:8f:61:32:3a:50:84:94:
                    3b:26:eb:4a:e1:42:f3:a1:2d:62:7b:b2:09:6e:8b:
                    e5:8c:bf:51:50:9c:4d:d4:7d:8a:83:c5:a9:7e:ac:
                    da:94:3e:50:3f:4d:46:93:57:25:b5:22:d1:9b:e4:
                    f0:f7:7b:2c:b1:22:06:32:92:de:ea:cb:ad:8c:37:
                    76:58:b2:02:d7:21:9c:1a:f2:76:a6:6f:cb:da:e4:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:55:09:58:4A:25:68:11:25:3A:FF:02:E2:C1:FE:DB:D6:A6:C8:00
            X509v3 Authority Key Identifier:
                keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3f:d1:42:aa:55:17:b0:72:7d:e8:2b:f9:96:1d:a6:b5:68:
         79:92:71:74:d6:ce:bf:38:2a:60:2e:73:2b:8b:df:8f:2b:78:
         15:e0:cb:3e:bb:75:f3:ad:20:37:8c:d8:60:ca:f5:21:1c:1c:
         34:c0:46:33:ec:b8:6a:cc:c9:67:8e:21:bb:be:0c:15:25:68:
         5d:b8:7a:7a:77:7f:b1:2d:db:1b:b9:e1:d9:a9:79:6c:4f:f8:
         01:69:e8:3d:8f:ec:29:57:6e:ad:39:ac:0c:8b:19:a2:38:7c:
         83:ed:b8:9d:47:db:df:4f:df:0b:35:98:f8:12:d2:e5:01:51:
         86:21:ef:8f:73:34:f3:79:3e:e5:71:62:52:14:3c:7a:9e:04:
         12:af:81:3d:5a:c8:df:ea:7f:a8:78:69:6b:a3:68:4e:d4:ce:
         67:fa:2f:b1:c2:4d:64:6a:f3:ae:74:0e:6e:9e:c7:bf:d7:a9:
         2f:a5:57:81:43:bf:20:6b:fb:6f:b5:c3:af:91:8e:d5:55:e4:
         43:de:98:7a:6d:c6:47:8a:44:c9:0b:7d:ee:d4:c7:d8:19:60:
         42:98:9b:6a:f6:c5:9c:8a:3f:f4:3f:19:b5:ab:96:b3:4c:1e:
         79:25:92:55:06:db:10:fa:56:72:43:1b:42:e4:d8:4c:75:7d:
         64:c8:cd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:52 2026 by rpki-client