Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          kfupPD1cQ58Mz1Nz1bdxRz/4Wc+u1gz8FZgz9SDCsNA=
Subject key identifier:   B4:5B:42:5C:33:F0:B8:AC:A7:73:87:6E:D3:A3:39:51:97:8F:20:22
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019EE254C04BA16118F4139314BA07B70B08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          0946
Signing time:             Sat 20 Jun 2026 00:01:05 +0000
Manifest this update:     Sat 20 Jun 2026 00:01:05 +0000
Manifest next update:     Sun 21 Jun 2026 00:01:05 +0000
Files and hashes:         1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: Zm7O6vPjF3HiqKszx2RwYVZ4N03RDFM2dIv7hI3zANw=)
                          2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
                          3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:54:c0:4b:a1:61:18:f4:13:93:14:ba:07:b7:0b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Jun 20 00:01:05 2026 GMT
            Not After : Jun 21 00:01:05 2026 GMT
        Subject: CN=b45b425c33f0b8aca773876ed3a33951978f2022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:11:f8:0b:2c:c3:14:77:45:a5:72:44:f7:
                    57:cc:bb:ac:97:05:b1:53:9e:4d:93:1f:a6:f3:29:
                    80:aa:d7:54:4c:1e:a2:2c:af:32:ef:8d:3d:95:4f:
                    0d:1e:b1:b4:be:aa:51:3e:96:cd:66:d8:21:97:83:
                    90:52:8b:9f:94:76:77:f3:23:b3:ff:85:ed:e4:1e:
                    2d:ca:65:1e:6c:ce:c2:6d:8a:c4:8c:94:7a:97:9c:
                    a4:c9:63:ec:e2:65:65:35:12:3d:42:f0:cf:b0:82:
                    3f:87:54:f2:e4:34:60:65:da:5e:ca:f7:3e:9e:b0:
                    72:90:90:ee:2b:82:4c:3e:dd:27:10:9d:f7:bf:81:
                    96:b0:47:15:95:ff:65:af:60:8b:9e:65:94:63:e3:
                    12:7f:e5:4d:18:c5:7a:61:a0:c7:cb:c6:e9:31:e9:
                    ec:04:79:57:ad:25:07:92:93:60:22:e3:b1:44:ed:
                    43:13:94:08:74:3e:47:b6:24:ab:e3:65:38:26:fb:
                    df:12:c5:30:c9:b7:f4:a7:70:a2:1d:47:40:71:49:
                    ee:1f:fa:e7:44:04:67:44:69:60:cd:d2:d4:ed:d6:
                    27:4c:1a:39:11:5e:9e:f7:6e:3f:84:f8:1a:d4:dc:
                    93:02:88:af:3a:50:4f:54:9f:e9:f8:27:63:0c:0a:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5B:42:5C:33:F0:B8:AC:A7:73:87:6E:D3:A3:39:51:97:8F:20:22
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1a:c5:b1:c8:50:51:91:d7:ef:90:96:a2:89:da:de:ea:52:
         ec:ae:90:a8:63:de:21:8a:b7:69:2c:bb:1c:a3:0a:0f:f2:19:
         5e:f8:d4:f7:c4:4c:ed:f9:2b:ee:42:b8:11:7a:8e:63:7f:98:
         6a:d2:cf:ee:3b:09:df:0e:7d:e0:fc:f2:fa:8f:41:e6:65:37:
         59:a3:e1:8b:ac:05:3c:78:43:eb:a3:35:b5:3d:81:83:88:0a:
         69:a0:d3:0a:81:c9:82:f4:2e:db:17:df:a8:f9:0e:f0:1b:a1:
         88:a2:d6:9a:0a:bc:b2:5f:30:ba:d1:65:11:81:7c:e8:02:6b:
         d9:e9:f4:ae:97:9c:02:27:9b:90:a0:ec:ae:e6:3f:10:a4:d7:
         13:17:fb:a3:80:10:e5:97:92:d6:4a:8d:97:e7:c8:5b:37:4a:
         0d:88:66:59:a0:66:fc:f2:e2:7f:a6:52:90:e9:33:18:5e:13:
         cf:27:9b:a2:bd:95:c6:81:27:77:64:17:22:47:6a:db:3a:43:
         89:2c:2a:8e:df:f0:63:bd:af:47:3a:35:78:c0:f2:d1:ee:35:
         4c:20:3f:37:ac:81:57:ad:39:00:ec:f2:e7:05:e3:a9:6e:77:
         92:fc:8f:23:d4:67:62:1d:5f:ff:65:a3:b3:9d:01:cd:62:ff:
         48:ad:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:05:50 2026 by rpki-client