Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File:                     0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier:          6yKWf6I0wvzAoKNhwZFHmMJGvtW0XGvE0ZPRdNebbzM=
Subject key identifier:   B8:77:72:A2:47:77:FA:9F:98:DC:F2:99:0C:A0:CC:75:5F:66:2A:5E
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer:       /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial:       019F17C2B610143718895D1EDE4E796EDEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number:          081E
Signing time:             Tue 30 Jun 2026 09:01:04 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:04 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:04 +0000
Files and hashes:         1: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: lwAzO4tc8/ruOdI++5iRI9RH8Q9wflCNsWi/JJZCpSM=)
                          2: 6-x6MjhIWmKkKN8PSvag3_NMayM.roa (hash: DJxqLKJWXBtl7f6AjOofGTskuyYrFGFq1UI9pHAp0p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:b6:10:14:37:18:89:5d:1e:de:4e:79:6e:de:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
        Validity
            Not Before: Jun 30 09:01:04 2026 GMT
            Not After : Jul  1 09:01:04 2026 GMT
        Subject: CN=b87772a24777fa9f98dcf2990ca0cc755f662a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:9c:45:98:f0:6d:5f:90:16:48:80:69:8f:
                    8a:df:3f:9c:c3:ea:63:bb:14:69:cd:b2:58:2e:19:
                    6b:31:94:cf:be:a1:89:79:13:26:da:7e:68:dc:ae:
                    89:29:ae:60:e2:c4:3f:79:20:3b:89:e1:78:3f:d5:
                    b8:97:41:c4:0f:64:04:a1:f6:54:ef:68:82:ef:08:
                    7f:ab:9e:d4:00:8f:21:7e:9d:eb:32:6e:e9:6a:0b:
                    e3:37:9b:c3:15:61:a5:c3:42:b6:9e:45:27:20:47:
                    d2:a7:df:ee:95:78:4c:ed:1c:29:28:b6:dd:f4:32:
                    98:0e:8f:e7:fb:c1:cb:71:ff:39:b9:6b:99:11:9d:
                    20:ab:85:45:96:7e:e5:d8:14:16:3f:91:7e:f4:ee:
                    a3:9a:1f:e8:94:9b:47:82:1a:3b:9e:2e:da:16:94:
                    ef:45:93:2e:fb:4f:a9:1a:a5:ec:1a:0c:da:44:6c:
                    40:94:d2:f2:0e:e4:55:20:21:83:f6:da:1b:48:b7:
                    d5:6c:e5:2e:76:83:4b:24:e3:36:80:37:f1:ae:a8:
                    d3:eb:e3:3c:54:b6:a1:3e:e4:c5:51:24:2a:7d:c1:
                    2e:54:a7:db:29:62:ca:be:88:02:46:46:42:d2:53:
                    a0:9b:f3:d5:34:70:f4:59:57:2c:2d:e0:1c:f9:52:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:77:72:A2:47:77:FA:9F:98:DC:F2:99:0C:A0:CC:75:5F:66:2A:5E
            X509v3 Authority Key Identifier:
                keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:0f:3e:c1:7f:07:44:a6:f2:68:77:5c:1f:24:d9:3a:38:ef:
         aa:58:e8:53:ec:fd:c0:96:07:3d:bb:09:44:23:88:f3:55:f2:
         06:00:31:23:80:79:b6:ba:f0:2e:80:f6:fb:c2:d8:11:1e:3a:
         d8:5e:4c:f1:5b:9c:eb:f1:70:29:8a:d7:d2:7f:ea:73:ac:a4:
         8f:bc:34:26:1d:21:fd:d9:8f:68:1f:9d:71:a0:d7:a5:23:a0:
         86:d2:31:4b:64:20:2c:a1:9b:c7:f0:95:75:3d:e0:f9:33:5b:
         bf:3c:1e:a6:b7:f7:a3:eb:7b:e7:e4:a0:4d:02:0e:59:00:8a:
         eb:25:75:33:4b:ce:09:3f:19:10:04:b4:4c:c3:18:6d:d1:e4:
         32:90:f6:ad:9e:23:68:7e:04:e6:fe:53:2f:bd:38:a6:43:2f:
         f6:ad:55:6a:86:a0:0e:28:44:d9:5b:fb:7e:93:e9:85:b9:af:
         b3:29:7a:95:b3:34:ea:55:e1:ee:99:82:9b:89:c8:14:16:2c:
         03:a5:bb:aa:ae:c0:f3:99:f4:6f:a0:c8:0b:26:f6:6b:cb:9b:
         d3:7a:cf:55:26:b5:74:f2:a8:5a:89:37:d9:ba:d8:8f:ea:49:
         23:3b:3a:e3:3d:ff:2a:7a:df:3d:4c:25:37:23:e1:e7:65:1b:
         27:68:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:43 2026 by rpki-client