Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
File:                     1COlvl4hykYHMq5I84Wj6hUKK-E.mft (raw, json)
Hash identifier:          nE33J0qw65BcfOYgpC6BelIZOpkQe9bSLo5DWZqLTlU=
Subject key identifier:   58:B8:BB:D0:17:A4:91:74:86:C3:86:67:BE:A9:9E:2D:95:C2:58:6C
Authority key identifier: D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1
Certificate issuer:       /CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
Certificate serial:       019E8910BB7E3900AFC486674497F6A1B673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
Manifest number:          0C0D
Signing time:             Tue 02 Jun 2026 16:00:35 +0000
Manifest this update:     Tue 02 Jun 2026 16:00:35 +0000
Manifest next update:     Wed 03 Jun 2026 16:00:35 +0000
Files and hashes:         1: 1COlvl4hykYHMq5I84Wj6hUKK-E.crl (hash: 2dVydgzKF6ZbLzkqgw5NA0p9dIO8z//A/zrM5FHN4FM=)
                          2: Ac8C988WG2rKoPAyM0PJx2rNaoE.roa (hash: 89LOHLJ7QAy8vGNQbBqFUdTxIH6fXbqoySpOcf8nHiY=)
                          3: Hs0IPvXPiiu5SRQabWCm2vLaUng.roa (hash: Jz9KhpCFWy1oS1Y7LmpahQlNI+tRAYvjIo9xoWdqMAY=)
                          4: IHsIqdWKW3oXqrv8CC_-_K3HeCM.roa (hash: dZCFigPRpz1prER5FdjelyGWWX2YW17+YhrDgGzAMCw=)
                          5: LpR-LQvQfXymcif_LMaWE0JZD3g.roa (hash: zhvd1luynFJPjxGKrx2N652wizkvdv3su1q7wp46nxA=)
                          6: URkF_3wWv4caQ7gSHuTsb7r6MGI.roa (hash: Gjnz59P638W/IUVQMIM+Nm7HP3jZwW2uLN6LQ+PZObA=)
                          7: hnX6AgrOaoGB1pS6d2IohDyU9YY.roa (hash: TyBpxjx7ARYI2/qA9SgTNdxkKgP/znTGEAT9++KH4mc=)
                          8: vAK4daozNSO59AKfeMnlfBD0uBI.roa (hash: BWOG9qwyAhGR7urMCtstbKhY8qOFr3C+wcw1uSuJqsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:89:10:bb:7e:39:00:af:c4:86:67:44:97:f6:a1:b6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d423a5be5e21ca460732ae48f385a3ea150a2be1
        Validity
            Not Before: Jun  2 16:00:35 2026 GMT
            Not After : Jun  3 16:00:35 2026 GMT
        Subject: CN=58b8bbd017a4917486c38667bea99e2d95c2586c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:62:49:ef:17:96:7e:e9:57:19:af:fc:e5:0f:
                    f4:54:64:b7:7d:45:3a:f2:b8:9c:63:25:18:b6:ce:
                    72:d9:65:15:93:28:95:7e:d9:08:85:6c:58:c9:20:
                    99:e5:83:53:25:22:32:aa:06:bb:2c:87:13:26:c0:
                    10:ff:64:bb:59:fa:bb:66:51:c9:19:40:97:37:f6:
                    a8:bc:66:ae:62:58:fa:a6:11:b6:65:e8:2c:35:67:
                    3b:f3:d8:f6:86:84:89:a2:58:c5:1c:c5:40:4b:73:
                    7c:15:75:b4:06:c5:4e:d4:a0:86:a0:23:61:51:be:
                    b8:d2:31:88:77:1b:80:50:c9:d9:ec:99:a6:40:30:
                    3a:e8:cb:11:45:07:a3:20:f5:d3:f7:b8:df:1d:6b:
                    6c:65:6f:a7:e7:7a:f5:11:af:46:9b:43:ff:54:58:
                    6e:47:a4:cc:8f:77:1c:ee:50:cc:b5:f2:8c:b3:4b:
                    bd:b2:c4:81:05:cc:de:c8:0b:04:37:04:12:34:82:
                    a0:74:59:c5:c3:4f:7a:d9:3d:07:8d:4a:d0:31:6d:
                    48:62:63:5a:48:85:68:23:63:66:1d:9e:78:c2:47:
                    71:98:97:62:2c:e5:d6:60:5e:f2:0c:38:be:b1:3f:
                    a8:06:0d:45:49:cb:5f:1f:83:08:36:a8:8b:fd:77:
                    98:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B8:BB:D0:17:A4:91:74:86:C3:86:67:BE:A9:9E:2D:95:C2:58:6C
            X509v3 Authority Key Identifier:
                keyid:D4:23:A5:BE:5E:21:CA:46:07:32:AE:48:F3:85:A3:EA:15:0A:2B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1COlvl4hykYHMq5I84Wj6hUKK-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a3e3bb-fd9f-4042-b2cb-d9476665755a/1/1COlvl4hykYHMq5I84Wj6hUKK-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:09:88:03:95:a2:3b:79:41:87:df:b8:d7:e1:10:d2:5a:45:
         a1:9a:35:5d:4a:d1:2b:14:e4:83:9d:ba:73:5f:81:c8:26:aa:
         96:3b:36:63:06:47:8c:00:99:6e:c5:13:a8:93:ed:f0:80:51:
         85:9d:f9:2b:78:e6:3f:ba:54:c7:ba:9b:59:01:c9:f1:fd:4a:
         bb:34:13:5a:18:aa:1a:47:10:28:80:4b:b1:1b:29:30:cc:e1:
         a8:86:2b:d0:17:6d:bd:6f:dc:fb:ce:c4:a7:76:cc:bf:af:3e:
         18:20:e0:41:c9:3d:70:a4:69:f4:e2:a6:0e:b8:da:e8:7e:49:
         a9:5a:e7:23:89:1b:c0:37:22:e8:36:66:f8:6c:3c:08:22:56:
         73:4f:74:54:1a:32:d6:97:86:4d:dc:dd:e0:32:c1:1d:e8:e3:
         0a:f0:1e:b0:41:c4:3a:3f:1e:5c:39:d4:ef:a4:59:47:ce:a3:
         30:34:66:2c:dc:dc:83:79:e6:46:a4:38:b2:59:22:39:8e:4f:
         a5:40:95:53:43:21:53:c8:72:95:a0:b1:e0:d2:4c:9d:2b:a2:
         08:f3:3a:4c:c9:58:a8:e1:b6:e7:dd:e5:35:d3:ba:e2:0a:ac:
         b2:58:f9:40:aa:b6:72:46:c2:8b:9f:f7:9c:39:ee:a3:2f:73:
         e2:bf:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:34:14 2026 by rpki-client