Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File:                     XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier:          S/2/y/wBI/fsPDiPUulb/Aq+VxNSR5fQK71YSIZnbBk=
Subject key identifier:   8D:5A:4F:EC:DB:E4:EC:58:24:22:5B:2B:57:9A:51:8C:D1:DE:7D:5B
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer:       /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial:       019EB7A0E73F9DE54390E5AC9AA7C6A79001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number:          0F08
Signing time:             Thu 11 Jun 2026 17:00:35 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:35 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:35 +0000
Files and hashes:         1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: U58AyPykHnH3nJD88VHG9wv2t7AaniRQHiXo2e6CDAc=)
                          2: cdVP4VMQTXg2CT86yVWAypk62nQ.roa (hash: LC40P/qPiuezV8f6FpcmDk2skf+yITxCG3dFo+ERAAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:e7:3f:9d:e5:43:90:e5:ac:9a:a7:c6:a7:90:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
        Validity
            Not Before: Jun 11 17:00:35 2026 GMT
            Not After : Jun 12 17:00:35 2026 GMT
        Subject: CN=8d5a4fecdbe4ec5824225b2b579a518cd1de7d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:46:09:d8:3f:3f:52:e4:c8:f5:60:11:fd:66:
                    0a:e2:1c:e0:d6:b7:8a:72:d2:5f:71:ae:96:20:c0:
                    d4:08:12:54:0e:54:55:a2:30:fc:4b:f5:27:63:bf:
                    72:87:07:b2:5f:ea:d5:86:5b:47:07:70:92:ac:cf:
                    54:a1:35:bb:38:c7:39:88:c4:41:0b:30:a8:95:f7:
                    c7:7b:00:ca:61:b5:0b:4f:1b:fc:61:e7:48:a5:ee:
                    61:32:0c:23:99:b4:36:b1:da:cb:70:3b:fe:fe:77:
                    7d:bb:4d:56:3c:e1:ca:d7:fa:17:bb:8b:c3:95:4a:
                    dd:49:37:63:19:a8:e2:97:6c:ae:77:6e:aa:29:e6:
                    e1:f9:a2:4d:5f:9e:f8:dd:cc:8c:22:c4:67:98:e5:
                    14:ed:db:47:92:a4:71:a5:e5:61:88:3f:00:1a:81:
                    f7:0f:46:cc:e0:39:8d:c3:08:53:06:a7:ff:20:a2:
                    71:44:2a:e5:fc:d3:e3:27:7a:38:69:e6:ba:7b:61:
                    2c:a5:88:a8:ed:78:c4:7b:f8:6c:fb:5b:64:17:c1:
                    31:97:da:3c:b2:9a:62:89:44:ab:a1:ac:2b:50:90:
                    5e:4a:17:6d:f3:cd:f5:fd:a6:9e:6f:da:ea:e0:38:
                    30:6e:44:d8:04:4c:35:1b:4c:4d:b6:c4:c1:3e:f0:
                    6a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5A:4F:EC:DB:E4:EC:58:24:22:5B:2B:57:9A:51:8C:D1:DE:7D:5B
            X509v3 Authority Key Identifier:
                keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a7:b1:76:51:f3:fb:69:c0:3e:9b:f7:16:8b:51:dd:6d:92:
         8e:5e:d5:00:46:41:99:6d:62:5e:fe:be:42:c6:65:85:d7:b7:
         4f:d8:0b:a8:08:86:ee:f1:74:7b:8f:9f:75:03:d3:be:7e:0d:
         36:2b:7d:c0:a1:7d:c8:de:fd:4f:19:91:25:9d:62:bd:30:b2:
         e5:54:d9:d7:0b:f9:1e:a8:74:2d:a5:ce:9e:da:f4:3d:bb:25:
         70:3b:86:20:4a:5a:36:82:c4:94:a1:0f:f3:07:ad:a0:d3:a0:
         6e:f6:9c:c4:cc:62:da:cc:8f:a2:b9:ba:5c:33:b2:27:1c:a2:
         7a:2f:a3:da:89:c6:9d:95:f5:52:fe:7c:3b:31:da:07:54:5b:
         13:24:1f:9e:a3:92:c9:a2:08:9a:63:bf:2e:dd:20:96:64:1b:
         3f:46:c1:74:ef:21:83:02:b7:29:83:ba:10:da:17:23:7a:e0:
         07:03:d6:ea:77:50:a5:9c:cc:1d:30:29:d7:d7:19:9a:d1:92:
         a1:27:56:72:e1:23:08:81:6a:60:4a:ca:4b:97:7e:bd:ac:30:
         dc:5f:5f:c7:9b:b6:22:08:33:54:57:59:47:e4:71:db:ca:a4:
         7a:fc:26:4a:2d:a8:a8:63:0a:75:29:00:b7:f2:c8:ea:f6:35:
         46:b8:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:46:21 2026 by rpki-client