Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          H0l0qGwnq9PN72oLBMPN3+A0BTjfr51rV16luPjjd0g=
Subject key identifier:   DA:AF:26:86:35:CF:83:91:8F:89:67:6B:8D:E6:A7:6C:7C:50:C5:C5
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019E85A225381C7EFD275849F72C5BA9D128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          0916
Signing time:             Tue 02 Jun 2026 00:00:56 +0000
Manifest this update:     Tue 02 Jun 2026 00:00:56 +0000
Manifest next update:     Wed 03 Jun 2026 00:00:56 +0000
Files and hashes:         1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: 9SQahGm0gxkO93U8O4l3vvKry4uqwwITIumnbhgDlQo=)
                          2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
                          3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jun 2026 16:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:85:a2:25:38:1c:7e:fd:27:58:49:f7:2c:5b:a9:d1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Jun  2 00:00:56 2026 GMT
            Not After : Jun  3 00:00:56 2026 GMT
        Subject: CN=daaf268635cf83918f89676b8de6a76c7c50c5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:52:a3:30:77:3f:05:b3:05:51:01:bd:c2:
                    1d:08:7c:c8:cd:89:c5:cd:c0:e1:16:a2:fc:92:79:
                    ab:9a:69:8e:5d:c5:54:81:58:30:e4:0c:d5:3d:8f:
                    34:e6:7e:0f:e0:dd:83:76:70:a2:c9:fb:d9:cc:41:
                    4c:3e:09:67:05:21:87:55:9c:da:e0:3d:34:46:40:
                    62:ba:3c:68:90:a5:04:3f:61:39:c5:67:bd:38:0a:
                    17:45:fb:a1:39:5b:d8:77:35:0b:21:20:49:2d:35:
                    d3:b0:f7:f4:97:66:60:c6:e2:41:7d:7c:ff:ce:59:
                    59:44:52:c7:c4:73:2a:52:03:fa:ae:42:93:e3:09:
                    68:7d:c8:05:2e:33:e9:23:40:9c:ef:b2:0e:2e:bd:
                    d5:2d:35:72:9f:37:51:40:89:32:30:68:1f:26:cb:
                    6d:54:d0:4c:a2:26:65:6c:b3:e5:42:3a:3d:7b:20:
                    2c:5a:24:e8:2a:b1:1d:d2:1a:49:00:4b:55:7d:f6:
                    e1:ea:40:f1:84:8e:e1:3e:17:d8:32:5f:67:94:0d:
                    4b:03:7e:81:4c:69:3b:e7:d8:3f:3e:c5:65:84:33:
                    99:a5:37:12:de:92:7c:c2:d1:fc:91:b4:aa:6b:36:
                    f3:8f:97:6e:60:d7:e1:ee:1c:a4:a7:d0:ad:a1:1a:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AF:26:86:35:CF:83:91:8F:89:67:6B:8D:E6:A7:6C:7C:50:C5:C5
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:42:38:cb:44:ca:5a:f4:28:32:2c:4e:b6:4f:ab:81:e6:cd:
         36:3e:31:b4:c9:97:69:59:fb:fc:47:32:dc:47:0e:2b:c2:ed:
         26:e1:84:61:47:2d:20:d9:b4:a8:3e:65:dd:1c:71:3e:26:9f:
         fd:a9:07:71:fd:06:0f:25:39:b7:e5:d0:7c:a1:a3:47:c7:e8:
         10:7b:5f:59:89:e9:12:e2:29:50:13:0b:e5:ed:0e:b8:f7:ad:
         08:27:82:dc:24:c2:8f:de:f5:91:dc:63:11:84:e1:d7:7b:b8:
         a2:cb:16:66:aa:bf:04:ac:e5:f4:d2:bc:33:59:c2:81:b2:25:
         ca:07:b2:37:d8:4e:13:76:0e:fa:b0:18:13:98:8a:bb:fa:3e:
         26:59:03:02:43:25:8c:bc:02:a3:d0:d5:28:0a:f6:f1:e1:88:
         39:62:08:cc:47:4b:42:97:59:55:99:49:00:ee:04:1b:d3:04:
         42:3b:6f:d8:bb:93:e2:8d:d0:d1:67:93:0f:d3:80:3c:f7:96:
         d3:94:0e:7f:4c:19:3d:f0:95:bd:96:95:3e:62:69:a2:00:0c:
         21:a5:22:e3:ee:a2:88:45:36:b1:87:94:cd:e6:08:76:2f:17:
         23:c3:bd:bb:8b:94:51:ea:12:c7:6e:2e:b8:84:69:1b:3b:56:
         1f:d5:e7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 02:14:43 2026 by rpki-client