Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File:                     _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier:          C1a5XzJouuYlaj3hvZcYsQ9e5JceTpRoFmrf2QIqrFM=
Subject key identifier:   1D:26:85:51:2B:8E:BA:67:87:76:65:99:59:F6:2B:97:29:16:E7:10
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer:       /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial:       019EB98F34EA43536CD3DDD7CA3B9F4DA96B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number:          0D3E
Signing time:             Fri 12 Jun 2026 02:00:30 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:30 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:30 +0000
Files and hashes:         1: QB_L2flVKCSvWrhwILTxXBF9q1k.roa (hash: pEKmv3ldOF0B1re5xxMMMaSWFbB0Hn+EA9NLMo/Hpko=)
                          2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: Bj9voNsQUDzBUdIE9sQt/5T17TiD2QWille3Wi4+gCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:34:ea:43:53:6c:d3:dd:d7:ca:3b:9f:4d:a9:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
        Validity
            Not Before: Jun 12 02:00:30 2026 GMT
            Not After : Jun 13 02:00:30 2026 GMT
        Subject: CN=1d2685512b8eba678776659959f62b972916e710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4a:2a:80:26:b4:5a:38:05:04:cb:ad:45:93:
                    63:b7:3d:67:bf:7d:ae:e9:89:e3:37:02:8a:ae:38:
                    3b:d3:80:77:37:5f:4c:f7:d3:3d:d8:87:4b:a8:87:
                    4c:cc:d6:53:4d:ac:72:50:02:54:b5:a3:02:c1:4c:
                    b1:ad:8e:1e:56:98:45:aa:2c:37:b2:e8:d7:82:94:
                    41:a7:83:04:06:83:4f:07:f4:2b:5a:53:98:d9:18:
                    e2:b6:3b:42:7c:a5:85:d7:d3:3f:3e:92:fb:f2:2c:
                    f5:2d:f8:f2:cc:67:19:33:2a:a0:71:20:7b:49:c7:
                    29:52:c4:e5:fd:ca:e7:cf:a0:98:ab:50:04:8a:c4:
                    34:d7:8a:23:2a:eb:8c:dd:d8:fb:47:5b:ca:19:f7:
                    d0:5f:c1:41:df:ee:a6:79:cc:67:5e:2e:c9:96:72:
                    cf:02:20:b5:57:37:a0:cd:5f:f0:8a:af:9d:38:bd:
                    84:f9:30:20:dd:cd:a9:fa:8c:69:ad:92:6f:6a:a1:
                    ea:6f:3e:dc:bb:e0:a0:cc:7c:9b:c4:fd:7b:87:f7:
                    56:bd:86:19:3c:3c:84:7c:f2:c9:dd:88:16:8d:88:
                    c9:c5:8a:5e:25:a6:96:4d:51:72:1b:3e:1f:7a:16:
                    66:1b:46:11:fe:94:f0:7a:f3:44:01:29:c4:8d:e6:
                    eb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:26:85:51:2B:8E:BA:67:87:76:65:99:59:F6:2B:97:29:16:E7:10
            X509v3 Authority Key Identifier:
                keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:37:5a:a7:94:40:a3:d8:e1:fc:a2:73:c3:72:81:d5:90:8b:
         11:a0:ef:fe:1b:7b:2a:0a:d9:e4:7b:66:bf:e1:0e:c3:65:76:
         6f:9c:af:6e:19:bf:19:ff:86:9d:0b:f2:60:5e:82:43:84:c4:
         2d:4f:81:bf:08:8e:96:08:a5:ce:73:3e:36:e7:40:ff:92:d2:
         04:c6:f1:6b:f5:d4:aa:12:8d:ed:29:38:be:a9:6e:40:07:19:
         f4:3d:5a:8b:c4:88:81:f4:dd:68:4f:3c:f6:6b:b8:a9:07:dd:
         b1:29:64:c7:1c:c7:24:cc:27:3a:09:bf:7c:68:99:37:44:5f:
         7d:8a:37:ab:72:48:31:fd:88:8f:68:8b:7d:9d:45:30:d3:03:
         60:31:b0:b3:c6:78:2b:01:10:bc:5b:9d:ff:85:72:15:c0:89:
         9f:c6:28:9b:f5:bf:5c:91:cc:53:6e:3b:40:46:2e:97:4c:e2:
         a1:d9:19:ff:1c:df:0f:6b:05:f6:72:d7:5f:8c:9e:75:b0:7e:
         d3:a6:fd:28:0c:2a:87:46:37:09:6f:86:19:29:f1:f8:a3:3d:
         6e:e4:0f:4f:fa:60:ec:84:ab:7e:a0:8c:57:55:1c:83:67:e5:
         be:27:08:1d:33:a3:d1:47:66:01:88:3a:7a:d9:b8:60:25:5b:
         27:40:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:26:51 2026 by rpki-client