Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
File:                     A9yMYjke_dTdGORoGeF3gAKpoYc.mft (raw, json)
Hash identifier:          fOawTtG2VnqWINIvBbSksHzjugVVwS5Lj+6kJLldp1w=
Subject key identifier:   02:DD:9D:D4:24:8D:C9:B6:78:36:CF:3B:45:90:15:67:7A:6C:0F:71
Authority key identifier: 03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87
Certificate issuer:       /CN=03dc8c62391efdd4dd18e46819e1778002a9a187
Certificate serial:       019E905C5EBFAC3A9067E2E1DEC74891FAEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
Manifest number:          0701
Signing time:             Thu 04 Jun 2026 02:00:32 +0000
Manifest this update:     Thu 04 Jun 2026 02:00:32 +0000
Manifest next update:     Fri 05 Jun 2026 02:00:32 +0000
Files and hashes:         1: 1-eoC_GN2YbYe4XqCQ3dQUDWLMGU.roa (hash: CCW99WT+qJ1fktgS1Nv1Xts5RljXDXbC1tmqj4HW2vI=)
                          2: A9yMYjke_dTdGORoGeF3gAKpoYc.crl (hash: nD2KOjpNEARRzDsMjElsInG3JBmSIzNjQyE5HxQj43g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:5c:5e:bf:ac:3a:90:67:e2:e1:de:c7:48:91:fa:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03dc8c62391efdd4dd18e46819e1778002a9a187
        Validity
            Not Before: Jun  4 02:00:32 2026 GMT
            Not After : Jun  5 02:00:32 2026 GMT
        Subject: CN=02dd9dd4248dc9b67836cf3b459015677a6c0f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:f5:15:5b:6e:4e:c5:51:c7:56:50:e1:96:
                    61:83:c8:cc:25:d2:da:4d:15:fd:4e:1f:a0:d1:fb:
                    ac:b8:bb:b3:f8:e2:64:5e:e5:9c:61:da:a8:b3:13:
                    3b:2d:34:bc:80:84:1a:ff:8e:7d:cf:0c:6e:6d:92:
                    da:73:28:65:00:13:c1:3a:12:c9:d6:bc:56:96:26:
                    94:a8:1b:97:ae:03:2d:a5:fa:27:0a:72:05:28:6f:
                    5c:c0:81:f3:f3:e1:c4:45:52:ce:cb:15:29:85:be:
                    08:f9:a0:28:94:5d:0b:d9:d2:57:87:59:8d:b7:be:
                    12:83:77:dc:01:00:e2:45:79:a2:e7:4a:4e:e9:3d:
                    52:82:5c:e8:52:3c:12:3c:d1:4b:79:cd:38:d2:a7:
                    c0:ad:03:20:0d:6c:4e:19:ee:f1:e2:08:64:91:a8:
                    8c:2c:31:17:91:df:6a:4c:0d:79:eb:c2:4d:61:bd:
                    fb:b4:f0:e1:68:09:50:37:9f:02:ac:dd:39:b5:8b:
                    98:37:24:cc:a1:c3:63:ce:79:e3:d6:9d:5e:db:3e:
                    ea:1f:c3:87:af:a1:12:c2:82:32:47:4f:41:97:69:
                    5f:f8:dc:fa:fe:7c:3c:b1:6b:a7:e9:43:0c:be:c6:
                    6c:d6:3e:ea:23:5f:41:68:7a:b6:3e:3d:8e:f7:06:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DD:9D:D4:24:8D:C9:B6:78:36:CF:3B:45:90:15:67:7A:6C:0F:71
            X509v3 Authority Key Identifier:
                keyid:03:DC:8C:62:39:1E:FD:D4:DD:18:E4:68:19:E1:77:80:02:A9:A1:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9yMYjke_dTdGORoGeF3gAKpoYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d080c7-cee6-4b41-8c1c-0ef8c036b616/1/A9yMYjke_dTdGORoGeF3gAKpoYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:79:30:e9:bd:d0:45:9a:6d:7c:d6:40:95:89:c8:42:25:fb:
         c6:de:d6:79:57:71:d8:af:e5:0b:b7:6c:81:3c:82:95:c0:c7:
         45:37:bd:0d:73:02:14:57:ac:88:f8:7a:45:e5:76:9e:37:d9:
         e5:89:51:77:3b:dd:32:9d:13:08:3b:b3:48:c5:bb:c4:49:82:
         9f:9b:fc:da:55:7a:e1:80:1c:ea:36:7b:15:42:93:5c:f6:99:
         a2:78:89:c7:64:ab:4e:f4:11:8e:30:5f:a8:00:5c:b8:a1:12:
         96:cf:5c:77:78:a6:2b:95:e7:a4:54:34:d7:95:3f:b5:84:8c:
         b3:53:08:da:8d:47:19:5a:8a:bd:ea:6c:e0:8a:57:41:28:79:
         d8:75:63:3b:3b:9d:db:c5:eb:dd:5e:df:4e:7f:35:a7:d1:4e:
         e1:ea:58:b7:2a:f4:89:13:3a:3b:e5:6a:5e:2c:06:91:71:d9:
         e0:9e:f7:21:96:4c:38:5c:4a:99:70:c6:ca:7a:41:d7:05:48:
         38:2c:75:01:0f:e8:c3:9f:e3:df:1a:52:de:91:19:97:66:fe:
         2d:21:da:7c:f6:aa:dc:2f:93:cd:ac:df:23:36:89:2d:43:67:
         d1:6e:d7:6c:7b:1d:02:6f:96:10:bc:1b:10:29:e5:52:ed:84:
         55:ee:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:03:34 2026 by rpki-client