Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
File:                     MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json)
Hash identifier:          Neyx5Au3Wp3PvvjjiEfR8stOZVUxWYV8lLxYpMmlz7U=
Subject key identifier:   78:69:B0:09:9C:F1:3D:9C:AF:C8:3D:D0:FF:09:DB:F6:46:37:D4:42
Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
Certificate issuer:       /CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Certificate serial:       019EB7336C178A553D1E51B044B907DC0CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
Manifest number:          0ACB
Signing time:             Thu 11 Jun 2026 15:01:00 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:00 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:00 +0000
Files and hashes:         1: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: D5NeSKwxqHdNaeV8WeXiyfwnF37JTyZuh43Wmt8jzK0=)
                          2: RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa (hash: CRq+pDZeUDRucY39aQu9W9dJZ2hkbZK+EIWSe9Ksg/E=)
                          3: _No3AaXXRlHLcpFNSmUWopTAJdg.roa (hash: EJSEOoxCaCh+aZvxqJVPw2pAxsLbMiGabHj8Ve+PjSE=)
                          4: swGFUTWOXUe99AW4UAnyiW3gY2Q.roa (hash: m5rwzGfEVZaEpVcuRJk6LpH2JpmpgTyQJgllQOQrn/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:6c:17:8a:55:3d:1e:51:b0:44:b9:07:dc:0c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa
        Validity
            Not Before: Jun 11 15:01:00 2026 GMT
            Not After : Jun 12 15:01:00 2026 GMT
        Subject: CN=7869b0099cf13d9cafc83dd0ff09dbf64637d442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:d1:61:da:6f:b8:19:9b:a3:77:45:04:48:
                    ef:41:ec:e7:ea:9d:52:1a:09:62:7f:d4:ca:17:f2:
                    87:ba:7a:bb:36:8d:90:20:68:87:97:a5:eb:50:d0:
                    7d:83:ac:fd:2d:58:2f:01:da:5b:10:84:b5:79:a0:
                    f5:fe:51:90:74:8c:cf:f8:c3:0d:9b:84:cb:a4:7e:
                    7d:83:db:26:be:8d:df:ad:fa:d1:78:d3:fa:21:2e:
                    01:5e:96:6c:a2:5f:14:bd:02:29:f5:2f:ed:4c:74:
                    66:92:64:a3:b8:9b:e2:73:64:d8:ff:99:ac:03:34:
                    50:31:e7:77:75:4f:5b:e8:7b:e9:be:c5:ce:e6:8c:
                    d2:fa:1b:90:e5:79:43:b4:76:ca:7c:3e:ce:05:29:
                    a2:1f:75:4a:24:4b:27:27:d0:64:c4:10:2b:4b:b2:
                    16:39:0f:0f:29:45:43:d4:36:32:d9:26:f8:f0:6f:
                    75:d3:91:23:92:a8:bc:fe:28:a1:c1:ea:f2:d7:b7:
                    80:2a:6b:69:47:48:5e:4f:da:96:bf:46:52:8e:b8:
                    70:69:f9:bd:60:c2:f2:a6:8c:dc:49:82:22:0b:68:
                    6c:4d:55:e3:8b:d1:be:7a:cc:28:65:21:bf:08:d2:
                    8a:8a:03:bc:f6:71:f6:82:58:98:25:ec:6d:e7:f3:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:69:B0:09:9C:F1:3D:9C:AF:C8:3D:D0:FF:09:DB:F6:46:37:D4:42
            X509v3 Authority Key Identifier:
                keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:62:8d:07:bf:0e:27:bb:e5:d5:eb:5d:78:7a:b7:52:2a:01:
         88:08:8d:68:aa:7e:ef:ef:e8:e3:ae:d4:65:0e:ba:9f:51:62:
         0a:f5:a5:d7:67:aa:a5:94:8d:80:85:f8:02:87:21:88:e8:9c:
         7b:ab:80:c6:d5:22:f3:49:10:b7:d0:32:a4:67:96:1e:49:e2:
         1f:c1:86:8d:11:ef:b6:0d:2e:2c:c7:d3:6e:07:4c:dd:fb:69:
         0d:e0:32:d7:ca:89:ff:33:44:ba:aa:29:f4:e4:6a:06:8b:5b:
         8e:f1:ed:14:56:4b:f5:2a:31:35:48:a4:e5:7a:22:d5:9e:35:
         19:20:dc:c3:01:1b:8e:28:1a:b5:a2:aa:12:fe:3b:7e:d1:b0:
         7b:18:bb:ba:99:bc:46:04:35:83:d0:ea:6c:f1:1d:c2:93:94:
         2b:c4:87:ce:23:d7:b0:6c:7c:39:8b:21:df:3c:29:57:a0:88:
         02:90:71:f8:90:b4:bf:c4:df:47:27:f3:29:21:30:93:58:bb:
         d8:6b:06:3a:97:35:61:e9:7f:bf:60:b0:42:b9:e4:3f:a4:29:
         82:20:d3:15:73:a9:47:21:47:60:49:31:a9:11:da:f7:59:af:
         67:92:73:af:2d:e4:4c:f2:6b:c3:ff:9f:e6:2d:f9:e5:52:dc:
         22:ca:45:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:30 2026 by rpki-client