Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File:                     S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier:          sB6Gq+ja19mFtKVmuSOWDUJ39h+VfdRM2vXUW5YXNKs=
Subject key identifier:   C3:8D:BE:F5:22:4C:47:14:A9:58:E1:51:0E:5B:6F:37:F4:04:03:8F
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer:       /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial:       019EB80F2574B21A293EBB77E8A02FF7F521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number:          0C14
Signing time:             Thu 11 Jun 2026 19:01:00 +0000
Manifest this update:     Thu 11 Jun 2026 19:01:00 +0000
Manifest next update:     Fri 12 Jun 2026 19:01:00 +0000
Files and hashes:         1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: A4nVu9rxVyKD/xaYh5CduwUfjZBjs16ZcHwO0Xm89es=)
                          2: hOCqHr0-rwjOn6wU8z8C-ggKXAo.roa (hash: aczilg5expuAqkln7fFu+xj4eV4HRQvyQA+wDQF1/60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0f:25:74:b2:1a:29:3e:bb:77:e8:a0:2f:f7:f5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
        Validity
            Not Before: Jun 11 19:01:00 2026 GMT
            Not After : Jun 12 19:01:00 2026 GMT
        Subject: CN=c38dbef5224c4714a958e1510e5b6f37f404038f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:66:d9:01:fd:a0:92:df:23:ae:56:2e:66:b6:
                    1a:8e:77:21:57:66:25:3c:fb:2e:5a:64:20:b5:b4:
                    e0:d8:8b:6b:76:03:73:c4:e2:e2:6e:c8:0a:8c:45:
                    36:3b:22:d6:40:23:59:99:12:fd:5f:58:c5:7b:dc:
                    f5:96:0a:5c:23:6a:fb:61:92:a8:4d:fa:a1:ee:65:
                    78:48:98:66:5b:40:bf:97:7e:cd:6a:80:d1:6e:12:
                    80:ec:85:69:64:91:d1:7f:47:85:99:9b:ec:06:30:
                    19:54:a9:c3:1a:74:c1:d2:55:46:27:ef:0a:8c:26:
                    f9:16:f0:84:7e:ec:f2:4a:9f:c2:97:ab:81:e4:3b:
                    95:18:ff:41:24:0a:16:62:8d:eb:82:0d:44:49:0e:
                    95:ae:e5:82:0f:d8:8e:86:b7:63:36:30:d9:29:7a:
                    ff:bc:bb:be:7a:8c:97:bc:46:b7:4f:18:39:a7:e4:
                    9d:b6:de:96:30:fd:a6:a3:83:a1:91:42:1c:e7:d1:
                    91:5d:65:7b:ba:55:b5:ab:54:ab:76:40:7a:c6:38:
                    73:92:da:36:f1:2d:d9:9e:64:f3:4a:fd:3f:6f:3f:
                    d0:43:06:1f:80:bf:6a:6d:af:b4:bc:94:2a:bb:d9:
                    cd:9f:8c:e0:3c:f0:ad:16:54:17:4a:f2:33:15:37:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8D:BE:F5:22:4C:47:14:A9:58:E1:51:0E:5B:6F:37:F4:04:03:8F
            X509v3 Authority Key Identifier:
                keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:16:7f:a5:e4:b2:66:58:30:c5:cc:83:47:3a:e5:c6:0b:75:
         5b:e7:b7:83:4e:ca:ce:b2:0f:7e:1e:75:c1:69:59:95:07:60:
         9f:cd:18:b9:c3:fc:9b:5a:12:6a:eb:db:48:1a:61:ec:b5:32:
         68:df:fe:14:08:3b:75:f3:30:0d:10:98:19:b6:bc:25:08:98:
         2a:74:1e:d8:08:6e:a6:cd:18:68:35:14:40:98:da:45:95:fd:
         e0:5d:17:ac:5c:1a:f9:6a:4b:ff:76:d0:19:00:95:f0:55:4b:
         e3:e8:53:c8:d4:a4:5a:2a:6c:e6:b1:16:0d:6a:51:aa:ae:ec:
         ff:58:ed:20:ed:9a:54:9e:01:6a:7a:3c:a7:26:07:c4:b7:d1:
         a8:87:ea:9c:d3:69:06:1e:22:fd:c3:4b:45:69:22:ea:3d:39:
         b8:f5:c9:e7:6d:07:25:e8:bd:50:85:03:8c:9b:d7:8f:0b:5d:
         58:81:02:7c:eb:4c:8d:ee:14:c6:97:bd:07:af:03:9a:5f:b4:
         be:c8:c3:ca:e7:8d:7d:ee:42:ab:bb:20:36:fe:03:fe:5c:c9:
         7a:71:a3:31:27:0c:62:9c:6b:31:e2:a2:c6:80:e4:60:9c:66:
         f5:e6:ed:01:6d:4e:70:fa:e5:04:35:6e:03:8a:18:c5:08:a1:
         c0:0d:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:24:09 2026 by rpki-client