Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File:                     eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier:          KiXHhRKnVb5Z5XZchniDPVnRbkn0PkfJLZ86UYaRWRA=
Subject key identifier:   80:B6:A6:F7:A9:FC:EC:1B:D4:BF:30:04:5D:5D:32:6F:7E:EB:9C:A3
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer:       /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial:       019EE8FBCC2217CD0B9A20D0FDC59039483C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number:          0F8B
Signing time:             Sun 21 Jun 2026 07:01:16 +0000
Manifest this update:     Sun 21 Jun 2026 07:01:16 +0000
Manifest next update:     Mon 22 Jun 2026 07:01:16 +0000
Files and hashes:         1: WOR1ryq1yq_sySTGxjjKrKinhZM.roa (hash: BLhtkn0XoKuNpX6EOUgjUhzDHI6DAMy035uEGXaAl50=)
                          2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: rHXJVzn2EmSWWvI4Vz3t0kDDY3ZpKuP4EpwulZU8Zhc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:fb:cc:22:17:cd:0b:9a:20:d0:fd:c5:90:39:48:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
        Validity
            Not Before: Jun 21 07:01:16 2026 GMT
            Not After : Jun 22 07:01:16 2026 GMT
        Subject: CN=80b6a6f7a9fcec1bd4bf30045d5d326f7eeb9ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a8:30:d0:d2:14:5d:b0:40:80:ad:0a:2a:23:
                    27:db:32:7a:2d:0e:8a:82:ce:b5:82:f8:00:a7:1e:
                    1e:02:fd:6c:07:ec:8a:d5:9e:2d:bd:33:e8:66:d7:
                    43:3c:99:50:c8:11:48:dc:94:4f:67:d9:ed:2a:53:
                    bb:7d:d3:35:5c:93:4f:39:4b:03:1d:83:e6:93:fe:
                    37:4a:ce:8f:11:3d:f4:a7:4e:57:cf:a2:25:d3:8a:
                    7c:96:0f:b7:4f:e7:1d:67:26:dd:8e:1a:16:ee:3a:
                    c6:6e:3a:d4:6e:dc:34:a3:13:53:8b:de:fd:fd:00:
                    95:43:16:4c:a7:12:e7:51:36:b7:88:a1:0f:93:85:
                    24:67:02:c7:dc:04:07:cd:19:71:ef:f3:95:72:38:
                    1b:34:db:30:a0:4a:f1:84:45:c8:6a:dc:a4:2d:d6:
                    76:4b:10:dd:4c:e4:44:f6:ea:ce:03:81:54:87:71:
                    b3:fa:51:9f:85:57:a5:bc:92:94:db:17:2a:18:ad:
                    15:67:8f:89:3d:f1:a0:e7:ad:eb:43:30:c0:fa:ea:
                    7f:89:a4:72:dd:2c:58:60:e9:0b:05:45:98:ab:c6:
                    22:78:33:9d:da:88:a2:b8:c1:a6:20:0d:97:1b:cb:
                    ac:98:2d:7b:90:77:54:f7:45:14:34:ac:8f:28:10:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B6:A6:F7:A9:FC:EC:1B:D4:BF:30:04:5D:5D:32:6F:7E:EB:9C:A3
            X509v3 Authority Key Identifier:
                keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:23:dc:68:4a:06:1c:60:bd:ae:2c:e4:16:96:ca:6d:c8:
         2a:9d:fb:6f:9a:34:fb:0f:f6:29:a4:d3:01:97:ec:b1:3c:e8:
         4c:1c:36:37:fe:0c:93:cb:b5:92:52:b5:e2:4b:15:90:af:fa:
         97:87:d5:0e:4c:da:22:9d:2f:67:86:c8:4a:9f:19:94:76:66:
         a6:a7:09:33:c1:4c:ea:97:17:2c:71:62:b4:d2:bd:1f:45:6e:
         6e:93:be:6a:18:d4:be:d8:b8:4c:58:ed:69:19:2f:5e:84:f3:
         bd:67:19:97:b4:97:be:7f:b0:a5:82:5e:ed:ca:1a:51:84:48:
         7c:32:dd:94:e6:e4:b0:15:c7:30:f8:6c:ca:7a:0b:38:92:7f:
         63:ee:1b:7d:5b:0f:3f:18:53:4d:90:79:9c:14:31:5e:ae:34:
         62:ba:61:9d:85:ca:44:aa:d8:72:a1:3f:eb:b5:f4:cc:1c:49:
         e7:3c:2c:38:f9:cc:11:f9:73:62:31:74:19:3d:b1:70:b4:26:
         6a:6c:ec:0f:54:fb:de:b3:35:f8:3f:cb:c2:fd:32:83:39:f2:
         e5:8d:0b:83:13:1a:91:6a:2c:31:b1:80:59:71:c0:56:c2:2c:
         e8:8d:b5:8c:82:01:30:08:2f:f0:ea:65:b6:6f:dc:e9:c1:48:
         81:fc:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:37:58 2026 by rpki-client