Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File:                     9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier:          /fPmjuIISOls51cwriPZIRV/z4THuxqWPRirhNb2AjI=
Subject key identifier:   A6:4F:6A:09:22:0B:A4:88:8E:10:14:A5:72:73:85:F4:2D:71:3F:08
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer:       /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial:       019ECECE053A31919F0DD12FB7279344BD9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number:          1961
Signing time:             Tue 16 Jun 2026 05:01:08 +0000
Manifest this update:     Tue 16 Jun 2026 05:01:08 +0000
Manifest next update:     Wed 17 Jun 2026 05:01:08 +0000
Files and hashes:         1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: SwMMjxNWvWFns/jLxqOeGkAtbFj3FVvigeOAv2gZEQU=)
                          2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ce:ce:05:3a:31:91:9f:0d:d1:2f:b7:27:93:44:bd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
        Validity
            Not Before: Jun 16 05:01:08 2026 GMT
            Not After : Jun 17 05:01:08 2026 GMT
        Subject: CN=a64f6a09220ba4888e1014a5727385f42d713f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:23:c3:24:32:46:7d:b1:4c:b4:fc:a2:00:
                    78:ab:e3:c5:11:00:de:2a:cd:55:72:a7:d6:46:c8:
                    8c:eb:05:73:75:01:71:a6:43:f3:a3:0a:6b:1d:06:
                    61:e0:11:a2:70:67:12:8f:1b:49:f3:b4:f2:32:02:
                    1e:ab:d0:24:85:24:1e:1a:fe:58:55:08:b6:fd:1e:
                    38:8c:8c:ff:74:95:4a:4a:0f:d6:e6:72:59:06:69:
                    c3:28:46:80:dc:75:73:e1:73:ed:aa:98:bd:a7:7b:
                    e8:89:41:92:43:87:02:6b:20:81:9e:57:36:6f:48:
                    04:e5:98:83:9f:dd:f5:e4:22:18:81:6b:43:52:70:
                    b5:f5:d4:89:96:c8:8d:64:4b:04:6f:c8:3e:f3:1e:
                    ee:65:74:f6:a7:14:36:b0:73:9d:ad:cf:95:ab:a7:
                    8f:29:28:64:4c:7c:ce:04:76:81:b5:06:d0:6e:f2:
                    61:30:59:e6:6d:aa:3f:72:08:4e:04:d9:67:02:93:
                    80:3f:33:1c:b5:92:a2:97:c2:40:3c:4d:25:1a:4d:
                    5e:88:ae:0c:c6:c2:df:6d:b3:fa:9b:bc:fd:dc:fb:
                    f0:30:9d:6d:1e:03:98:04:cd:de:a7:b7:96:21:d3:
                    49:06:38:06:2c:c0:4c:94:f8:c3:91:74:89:2c:a4:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4F:6A:09:22:0B:A4:88:8E:10:14:A5:72:73:85:F4:2D:71:3F:08
            X509v3 Authority Key Identifier:
                keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1f:fa:af:3d:41:ea:21:c4:ec:35:af:95:25:23:c3:ec:f1:
         aa:9c:c2:2a:01:df:31:e5:fb:97:86:b1:2b:ed:6d:c4:46:67:
         ba:61:5c:fc:4d:db:40:1c:14:ae:6e:09:f7:50:bb:59:92:52:
         5c:d3:de:44:c1:95:07:28:23:7a:e9:f8:19:f8:df:77:cc:cf:
         7a:49:f7:05:5e:bf:ff:97:a4:1d:ed:97:3b:86:4d:bc:b5:19:
         1d:4a:d1:e3:57:ea:19:21:fb:99:09:99:f5:3c:d5:b7:02:0a:
         14:ad:21:f8:2e:fd:50:d4:6f:87:7b:b5:a6:03:bc:a5:46:bc:
         5f:04:e9:8a:f8:21:ff:c7:ad:42:27:f7:9d:df:53:58:54:00:
         f2:38:11:9e:de:4a:77:0c:2f:0a:4e:79:c4:65:db:81:fb:4d:
         66:e2:cf:4d:a1:4f:47:0a:c3:6a:4a:2a:7f:64:f7:51:11:96:
         5b:27:75:c8:02:fb:e4:d5:22:18:23:9f:f6:1b:91:4a:52:5d:
         69:de:bd:2a:81:46:ff:de:80:5c:04:50:5a:1e:09:13:48:48:
         2d:9c:48:dc:62:27:11:67:9a:e6:e2:b8:69:be:8f:e9:c8:37:
         38:ba:a4:85:18:12:a6:5c:66:af:45:9e:0d:89:7a:7f:b0:ce:
         40:56:4f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 08:02:02 2026 by rpki-client