Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
File:                     6oPjDy1vznWmZqLQtja0bsmYocs.mft (raw, json)
Hash identifier:          qj8qVQLCxAiZ/WhfCcgu7xE5o0rTKHsNs4H8bZ8XxWI=
Subject key identifier:   C1:5A:D8:57:A8:E7:77:A0:F2:62:00:3A:82:70:C5:19:CD:E9:A0:02
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Certificate issuer:       /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial:       019F189E4A1C2BCC0EEDC79DD0E79AA462AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
Manifest number:          11A9
Signing time:             Tue 30 Jun 2026 13:00:54 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:54 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:54 +0000
Files and hashes:         1: 6oPjDy1vznWmZqLQtja0bsmYocs.crl (hash: Or245zUKrCGe9tUkRQJcy1kypoadwit65OZ09PHv7IM=)
                          2: aOsBrfXxC2i50OhW4Wv0Z8ynANo.roa (hash: 8KWuhZN2MwzTsWUN92o6fPQusuIkbhVe5Tp3v7UnNEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:4a:1c:2b:cc:0e:ed:c7:9d:d0:e7:9a:a4:62:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
        Validity
            Not Before: Jun 30 13:00:54 2026 GMT
            Not After : Jul  1 13:00:54 2026 GMT
        Subject: CN=c15ad857a8e777a0f262003a8270c519cde9a002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4c:01:07:f2:02:e2:64:d9:2e:1c:a6:e2:a7:
                    3d:6c:c6:fc:4d:5c:b3:32:ae:72:86:8f:94:6e:6f:
                    97:10:41:9f:ab:16:df:ba:2c:02:63:08:01:44:10:
                    d6:2e:95:1a:50:cf:7a:3b:a5:7e:c3:4b:0f:74:e7:
                    43:e2:95:91:1d:47:89:3f:f6:41:b3:a9:b5:8e:64:
                    de:da:b0:5f:c3:61:66:57:be:6d:34:ab:ca:08:d5:
                    32:10:60:00:d7:39:13:07:01:2b:fe:3c:11:2e:21:
                    bd:f9:8a:2f:59:2f:a4:ff:cc:88:52:78:40:09:9c:
                    b7:34:1e:d2:2d:13:c5:c5:5e:28:8c:21:86:23:a0:
                    e7:30:0f:3e:af:d5:61:de:60:52:7e:4d:6c:c5:81:
                    a1:70:56:63:84:b4:84:cf:80:20:00:d3:ca:49:fb:
                    43:a9:32:c8:f2:95:38:b7:fa:0b:73:18:a8:27:57:
                    22:e9:a5:4b:2e:ab:04:5b:a3:63:bb:cd:bf:d5:e5:
                    f8:57:89:09:10:75:80:ec:65:b7:f6:21:17:14:e5:
                    17:57:8b:39:3d:bb:8a:e0:20:09:52:9e:f4:6e:d5:
                    7f:c1:a8:4e:b1:96:5b:3e:83:47:5f:91:43:d8:dd:
                    e7:02:6d:6c:0e:ee:fe:df:88:86:5f:e1:09:c4:5b:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5A:D8:57:A8:E7:77:A0:F2:62:00:3A:82:70:C5:19:CD:E9:A0:02
            X509v3 Authority Key Identifier:
                keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:e0:58:ce:ff:2a:78:aa:ca:d1:13:f5:0d:64:2b:b1:dc:
         c2:7e:50:6c:9a:54:7c:5a:fd:a1:f6:02:1a:48:9a:5c:e0:cc:
         60:e5:5c:fe:bc:7b:e5:1c:c1:6a:01:6e:7a:de:5d:9a:a3:2d:
         41:d6:18:93:22:06:c8:32:99:ae:0b:f6:2b:ca:3c:95:e1:dc:
         98:af:74:9e:ac:c5:20:4f:25:80:a4:91:38:a0:1c:8e:21:ed:
         e2:56:79:85:a5:bf:34:b9:88:8e:16:f1:0d:40:67:a2:27:27:
         f6:7c:48:fd:28:93:76:51:74:db:eb:f7:af:88:60:5c:1e:1a:
         fe:58:7b:2d:ad:fa:a9:1b:8e:62:08:29:cb:87:c3:be:9b:11:
         c3:7b:85:62:62:63:5e:59:2a:40:10:4b:64:1a:42:7e:38:cd:
         ec:d3:45:5f:82:7f:b9:b2:84:af:60:16:b6:2a:34:47:15:6a:
         ee:be:f4:da:13:97:c3:c1:13:bc:8b:63:45:10:a3:7e:35:97:
         12:a2:a9:ac:cc:d7:13:ad:92:b0:f0:4b:a9:d2:89:d5:47:d1:
         91:5e:aa:b8:62:34:ac:76:80:61:d1:c5:ae:68:33:ea:ca:b8:
         90:4f:76:c3:a1:5c:75:3c:77:00:73:be:2b:43:38:31:49:ae:
         b2:d9:0a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:44 2026 by rpki-client