Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File:                     y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier:          3x0O0xnYWoouJWZaodp5ynWp0PDQtyE6OKvElRK4JnA=
Subject key identifier:   AF:5E:3E:36:70:13:83:66:62:4D:89:07:A7:F7:0B:6D:B5:DC:31:66
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer:       /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial:       019EFACBB6E598F008C40FA29768187BE8EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number:          0367
Signing time:             Wed 24 Jun 2026 18:01:55 +0000
Manifest this update:     Wed 24 Jun 2026 18:01:55 +0000
Manifest next update:     Thu 25 Jun 2026 18:01:55 +0000
Files and hashes:         1: 8MxTJlqau9S1ZV5fA_n_hiU2OjQ.roa (hash: ZFi66z5+x2HZHjEf8Mnf2qe4zKNsSEknPsHvSK6VhIc=)
                          2: DNbiYi8RnmHbs53ufR4Wo4EOQD4.roa (hash: 1O4zlMEhLqsXNNh16SOVPGWJLESJzqVd3J7KSAE8smE=)
                          3: EBV1N0nyc3uDjy8VuxK9uZr58ys.roa (hash: Ua/lKqQMivBauR1brwmNmnYyYEQG+PCmKakmmH7OZoQ=)
                          4: wgW5ViWtyw-hcjNoVsfmKE4EIG8.roa (hash: HhTkFaNAcVHstP72WGd6nJS+mIOkBQF6lfIRGmZJYHI=)
                          5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: 6TmfD6OBO7bexnJYzMrXk040T3xcA7jPoeaqOY5CUhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 14:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fa:cb:b6:e5:98:f0:08:c4:0f:a2:97:68:18:7b:e8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
        Validity
            Not Before: Jun 24 18:01:55 2026 GMT
            Not After : Jun 25 18:01:55 2026 GMT
        Subject: CN=af5e3e3670138366624d8907a7f70b6db5dc3166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:25:5e:c9:22:a8:3c:16:e1:e7:00:35:e6:bb:
                    ee:af:7c:51:ec:ed:58:1b:ed:65:ee:2a:38:02:7a:
                    aa:65:57:22:6c:ee:3f:ab:6e:6d:78:83:89:1b:8f:
                    6f:ca:8c:5a:4d:c6:c9:1b:ac:ad:c1:52:50:00:d8:
                    9e:31:a5:ce:f2:ac:35:ee:d6:2f:44:0b:23:15:a4:
                    5a:9f:f0:76:ed:90:53:1c:7c:97:f2:c8:f5:7c:fd:
                    22:20:bc:25:f9:67:d5:8b:63:1e:86:a9:3a:2c:6f:
                    b7:45:0b:1d:fa:30:43:b2:12:82:c8:fb:6b:31:5e:
                    35:0c:8d:63:86:96:bf:06:1f:78:1d:97:4d:56:13:
                    e4:cf:6f:df:2b:4b:af:e9:02:00:bb:89:45:a1:b9:
                    c0:f3:a4:44:a7:fd:ff:21:40:16:66:0e:cc:c0:da:
                    e5:c7:d6:40:a0:81:b8:e5:0d:00:d5:10:f5:a1:b8:
                    bc:10:a0:2b:03:9e:bc:2b:e1:b2:5c:98:78:76:1c:
                    d8:ee:84:a0:48:76:17:9f:3d:5a:38:d8:55:28:3d:
                    0e:0e:22:6c:bd:d1:66:30:7f:f9:e3:91:78:c9:69:
                    55:61:39:89:56:58:69:be:18:76:f8:e8:54:d5:92:
                    23:2f:13:3c:17:e6:86:2a:bd:75:d4:e1:44:be:e0:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5E:3E:36:70:13:83:66:62:4D:89:07:A7:F7:0B:6D:B5:DC:31:66
            X509v3 Authority Key Identifier:
                keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:67:4f:58:35:a4:55:b2:27:3c:c3:b1:50:77:7a:b7:55:b1:
         ad:bc:19:d3:88:96:77:b0:82:53:dc:52:75:97:4b:2c:e9:a8:
         1c:65:af:6e:3f:7e:b8:60:66:ea:d8:ea:06:e7:61:a5:60:df:
         74:dc:1f:be:f7:06:df:f3:f0:d0:25:66:8e:e9:9e:ca:83:38:
         8f:f4:90:b5:38:ac:1b:e6:26:e4:f9:d8:39:db:2e:27:08:4f:
         ee:c6:a8:0e:f0:85:9a:0a:83:d2:94:90:85:fd:7f:d7:e2:f4:
         31:91:43:de:2f:64:b7:78:64:99:77:2e:2e:6c:c3:98:6c:6e:
         b6:2d:62:2d:80:62:35:e3:2a:3d:51:bd:cd:cd:a2:d0:1b:11:
         e1:47:1c:5a:46:c8:61:53:d4:70:6d:fb:6f:e4:8e:07:78:d5:
         a9:18:c1:0a:0a:6b:97:e7:a8:32:d0:77:56:2d:e9:c4:91:58:
         c6:4a:33:b6:04:da:cd:5c:b1:97:1c:ec:69:8b:d4:35:8b:b3:
         58:ff:f1:30:ff:88:b1:b3:e2:9d:b6:ca:6e:92:c4:67:d3:96:
         ad:c6:ea:ba:d1:49:a9:79:7c:a0:27:1c:c8:2a:42:55:58:76:
         8c:dd:e3:1f:df:f1:08:56:7e:c2:ec:3e:6c:b2:1b:7c:93:e0:
         a8:84:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:56 2026 by rpki-client