Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File:                     sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier:          Gz9JJRdX3Xxp3eTTbJVR/jXyaRFxGpe1t4GFG016hN0=
Subject key identifier:   17:27:60:CF:2D:BA:0D:C8:73:35:BD:7A:C6:B2:1D:A5:23:B7:33:5D
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer:       /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial:       019EB9C69029B2966DB354FAA2B0D04C784F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number:          12BD
Signing time:             Fri 12 Jun 2026 03:00:58 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:58 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:58 +0000
Files and hashes:         1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
                          2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: 8Q5imi8WA1z/IZa92IDo1uYFjGaHWGLX2EqSrOSopPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:90:29:b2:96:6d:b3:54:fa:a2:b0:d0:4c:78:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
        Validity
            Not Before: Jun 12 03:00:58 2026 GMT
            Not After : Jun 13 03:00:58 2026 GMT
        Subject: CN=172760cf2dba0dc87335bd7ac6b21da523b7335d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:58:52:ab:67:d2:5c:68:b6:ff:49:5b:58:
                    50:14:29:8f:bc:ef:39:8a:73:f4:98:5d:2f:87:45:
                    28:b3:ef:89:02:b4:e0:df:ef:c6:d7:c2:83:a2:1d:
                    6e:44:21:20:3d:74:ca:59:d0:fd:d8:6c:6d:0a:31:
                    f7:cf:45:73:23:03:d9:58:14:69:2f:20:ba:47:e8:
                    2e:7a:70:1c:d1:02:61:0d:9c:31:0c:58:0d:80:03:
                    6d:ae:b7:b8:8b:c5:33:42:d0:04:89:9d:5b:8d:bc:
                    73:a7:e5:54:b5:fb:83:3a:66:eb:10:c4:8d:55:b5:
                    2e:e9:23:01:2a:17:84:13:24:9b:c9:3d:83:91:ad:
                    91:0d:7c:c6:5e:f8:9b:fe:56:e9:f6:4e:29:63:b2:
                    b6:6e:ff:88:93:af:81:81:90:f8:4d:aa:1f:bc:02:
                    79:ae:a1:23:b4:40:eb:1c:ee:b8:65:57:03:08:1a:
                    8f:32:9a:b0:49:ce:ae:83:27:2c:fd:c3:9c:0b:33:
                    f8:9c:5b:e3:aa:fc:0c:ca:64:44:61:69:99:63:16:
                    ee:e1:52:3b:9b:bf:8e:53:4f:43:e0:6f:7e:ad:b1:
                    4e:51:b1:55:84:66:96:c0:09:95:b0:45:52:8e:5f:
                    c7:3b:10:f4:0d:e1:8a:79:05:fd:cd:9a:40:6d:2a:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:27:60:CF:2D:BA:0D:C8:73:35:BD:7A:C6:B2:1D:A5:23:B7:33:5D
            X509v3 Authority Key Identifier:
                keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:09:85:15:4e:d3:e3:1e:ed:6d:b8:8d:c6:83:01:d0:5c:e6:
         8f:ed:3e:23:f9:0b:26:7e:af:cf:33:e6:28:da:46:40:4f:d4:
         bf:9c:4c:e5:37:87:85:75:ae:19:ae:b5:6c:4e:c0:e2:cd:23:
         fa:4e:b1:df:9a:04:37:b6:12:32:69:4c:2a:3a:59:14:cb:e2:
         61:aa:aa:44:a9:f6:53:66:f3:ef:43:2d:1e:bc:67:54:da:fa:
         71:7a:13:80:66:02:e4:79:0c:93:3f:85:e6:32:cf:67:cd:9b:
         cd:1e:39:92:d1:25:50:25:26:69:1e:f6:88:d0:44:8d:f8:77:
         38:77:a6:76:08:b5:51:6b:4b:28:77:30:b7:f2:b9:6e:c1:e7:
         65:61:da:1a:5e:97:94:50:07:4d:a7:e7:d6:67:4c:81:9f:3b:
         7b:28:d8:c4:f5:c4:7c:2f:5b:56:a4:c5:0e:33:0f:c6:bc:ff:
         97:b3:28:f4:58:07:44:31:cf:13:86:40:aa:bc:ea:6b:85:37:
         b4:38:ba:2b:3a:8e:7d:44:f5:32:a9:7c:1e:1f:ff:8b:dc:4e:
         9a:e5:0f:a2:dc:06:fa:42:c0:e1:71:95:71:5a:18:ff:d9:39:
         f1:f4:bd:6f:d1:a9:88:31:4f:28:67:a0:10:c3:aa:4b:a0:e2:
         47:c3:2f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:59:40 2026 by rpki-client