Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File:                     oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier:          8HJ8sXzgPbyAYyxTdGGsXSaN2x/x2wNKR9SlJcTS4II=
Subject key identifier:   97:35:30:B9:09:FD:D6:33:54:E5:5E:8D:3E:6D:D8:AD:16:DE:CA:EE
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer:       /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial:       019EAC78BE7754B2F535E2A5A2C4051780D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number:          127E
Signing time:             Tue 09 Jun 2026 13:00:54 +0000
Manifest this update:     Tue 09 Jun 2026 13:00:54 +0000
Manifest next update:     Wed 10 Jun 2026 13:00:54 +0000
Files and hashes:         1: E_iRTXv34ZqZD3pIYO9UjKGuMZM.roa (hash: i1fiJO0e9H9m1mOdq45mO4/oIY+M6L6ueaw+taXDZdY=)
                          2: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: ylDuGHCUI7+lbyA1DRuIY9wSabFZU3sfdlb5ZI8yEQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jun 2026 11:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ac:78:be:77:54:b2:f5:35:e2:a5:a2:c4:05:17:80:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
        Validity
            Not Before: Jun  9 13:00:54 2026 GMT
            Not After : Jun 10 13:00:54 2026 GMT
        Subject: CN=973530b909fdd63354e55e8d3e6dd8ad16decaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:20:61:07:5d:91:bc:79:02:e2:db:43:9a:
                    ae:a0:2c:3e:f6:12:37:04:43:d0:ec:aa:3d:1f:b7:
                    11:2c:31:0e:63:5c:89:c2:5a:4e:f7:fe:33:2f:62:
                    3e:01:59:37:c2:45:a8:5f:86:43:96:dc:35:5c:99:
                    41:b2:b5:84:99:e3:ba:7b:69:85:13:4b:4c:d8:18:
                    aa:27:b2:c0:46:62:28:1e:3e:a1:6c:56:79:7f:f7:
                    2a:bb:10:ea:58:6d:2e:c2:3f:4c:a0:fe:f3:e2:b9:
                    e7:67:b9:48:9e:f4:ab:57:5b:db:2b:25:34:2b:eb:
                    2e:79:1f:61:d9:bf:6d:0f:cb:26:01:bd:38:8c:fd:
                    ea:5f:65:6d:a2:31:3e:92:61:d3:88:4a:7c:ef:21:
                    44:3b:cc:68:96:1c:4a:af:c8:b2:83:5d:a3:e1:dc:
                    b1:52:99:2f:13:7a:dd:6a:32:0a:57:fb:5b:4b:65:
                    76:16:df:85:13:ba:6c:df:20:0d:e9:fd:02:25:ac:
                    b6:6e:d4:4d:be:88:90:cc:20:79:00:67:b1:c2:37:
                    30:c5:8b:09:fb:c0:59:ea:6a:3c:f9:09:4c:72:ac:
                    60:aa:2d:ad:d4:6f:72:ea:19:77:10:36:18:77:ff:
                    b7:7f:ea:64:2c:4d:bf:c0:1f:f9:50:6c:c6:1d:08:
                    f4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:35:30:B9:09:FD:D6:33:54:E5:5E:8D:3E:6D:D8:AD:16:DE:CA:EE
            X509v3 Authority Key Identifier:
                keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:e3:dd:fb:45:da:16:42:45:45:41:17:03:6e:de:6f:23:
         c7:f3:14:e3:10:12:4a:f9:8b:35:dd:bc:02:c0:62:0c:b1:6e:
         11:7f:0a:eb:80:41:68:ec:9a:1d:80:e8:f6:10:c8:51:86:52:
         eb:c8:f1:36:7f:e2:3f:dd:ec:eb:f0:4b:ee:9f:d6:a4:4b:52:
         09:09:e4:e5:32:82:94:18:9e:4a:69:a8:c7:f9:b2:cd:61:f9:
         62:10:e1:df:f7:d7:5c:5c:d4:1a:96:02:60:b9:cc:54:ca:a2:
         03:e9:39:9e:f1:de:63:e9:ca:df:84:21:95:2c:2f:66:65:1d:
         6b:c5:01:ea:7a:40:07:0d:95:45:2b:1d:34:84:16:a9:89:0f:
         b4:ae:a9:99:52:46:d8:b4:b6:1f:a0:4a:20:8a:85:20:78:d4:
         d4:72:89:47:63:67:82:e3:37:16:4b:d7:3f:69:16:1b:dc:e0:
         eb:88:79:3c:6c:41:5a:46:fc:3f:d9:77:11:ec:7a:4c:8c:ae:
         76:c5:71:ec:7f:e6:cb:49:ce:7f:74:ee:b0:5a:cc:cc:c3:4c:
         42:e0:f8:44:b3:ea:3d:7b:16:8c:51:79:a0:8c:94:cc:68:7c:
         e8:81:c8:d4:13:72:b7:ee:ad:c5:28:e4:c7:f7:52:b0:13:8c:
         b8:61:ae:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 21:05:02 2026 by rpki-client