Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File:                     8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier:          OsBciLpz3qA4ZFoVKIwGGVqYUqfONdmrTjmepQ56MJU=
Subject key identifier:   95:D4:17:71:1E:0F:8E:8B:A0:C9:05:BF:88:2B:0D:7D:FE:11:FC:93
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer:       /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial:       019EB7A0AD7DC0DF53318F8894BA2378B4D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number:          0F5C
Signing time:             Thu 11 Jun 2026 17:00:21 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:21 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:21 +0000
Files and hashes:         1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: 4RXs/afc5nB+6T49cDPzvAL2OOnUxMHiaqWhX+kNDz0=)
                          2: EKzVr1AvNpYiprsqEkvQMIL5W4E.asa (hash: Ipa5Hr4X/R8wDhVGPsZEgzWXdPPvkLWg6IkVPIMaQqY=)
                          3: aW0GLfMs8RiqQkgroqb6Dpcu-TM.roa (hash: UsXuprIqiJrTmGsZFEzdkex7OcaYkNomgnQMK988aG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:ad:7d:c0:df:53:31:8f:88:94:ba:23:78:b4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324d0f47297680535eb2799189db888b4066782
        Validity
            Not Before: Jun 11 17:00:21 2026 GMT
            Not After : Jun 12 17:00:21 2026 GMT
        Subject: CN=95d417711e0f8e8ba0c905bf882b0d7dfe11fc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:f3:7c:48:d7:27:ef:04:e9:30:2c:87:f6:
                    f5:33:72:25:09:f2:c5:24:3c:be:bd:45:3f:8c:b7:
                    70:92:2d:8e:3e:bd:19:25:cd:de:32:34:18:33:51:
                    b4:c1:9e:0e:88:f3:06:71:e5:70:93:de:50:bd:57:
                    ac:24:82:22:32:66:41:c2:d7:36:d6:0e:ec:62:ed:
                    5e:f4:56:77:7e:da:69:4c:4a:85:8d:d7:1b:5c:50:
                    df:85:9c:d3:ed:cf:4b:21:4f:ab:da:32:94:79:72:
                    54:3d:00:46:79:8c:8d:54:27:76:10:01:d7:1d:fc:
                    b9:44:7b:eb:c7:e1:d5:3e:4b:c7:78:e6:93:5d:66:
                    71:8d:5f:32:e1:95:8e:47:3f:8b:d1:ff:45:27:57:
                    5c:fd:92:21:96:48:b6:ea:ad:61:63:50:7e:e1:fd:
                    8d:a6:11:ea:4f:a8:ee:46:3f:29:0a:5c:a7:5e:f7:
                    2e:21:b0:41:ec:2c:d5:b3:4b:52:63:4d:b1:14:83:
                    f8:f4:3d:3e:07:58:67:05:2b:d3:13:90:2f:ff:25:
                    75:e1:38:32:31:53:0b:a1:80:36:97:17:e3:0c:e2:
                    a5:dd:c2:c3:b1:e4:69:b1:93:30:71:2a:9f:2e:b8:
                    71:5c:99:34:00:00:e2:51:5a:d2:e1:5a:2e:4e:4b:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D4:17:71:1E:0F:8E:8B:A0:C9:05:BF:88:2B:0D:7D:FE:11:FC:93
            X509v3 Authority Key Identifier:
                keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:b9:07:5a:98:1d:ae:0e:bb:60:4c:a4:0c:d1:ee:9a:29:
         cf:01:4f:89:9b:b8:3e:39:a9:48:3c:23:35:6e:89:0f:7c:ce:
         a9:5a:6a:91:ad:5d:21:34:c4:95:94:84:47:4b:2b:91:6b:5a:
         22:13:eb:73:03:68:7b:96:fe:71:80:da:02:2f:81:c6:03:98:
         34:74:55:5f:9c:5f:67:bd:aa:5c:c6:f7:f9:7a:3d:96:af:2e:
         ca:11:81:0a:1c:ba:85:93:67:6f:55:4e:a0:da:cb:4a:ce:df:
         a2:ee:60:cd:6d:a2:59:ed:11:17:53:72:ab:4c:b9:ab:dc:8c:
         91:d7:db:28:0a:7a:54:e8:e0:aa:83:89:0b:c8:28:de:c1:53:
         d6:f7:77:08:c7:08:61:1f:eb:c7:c9:bb:83:2c:31:4a:4e:df:
         f3:de:95:bf:5e:b8:ea:15:6c:ee:45:59:e5:4b:73:d6:19:2e:
         9b:29:2e:22:2b:93:aa:34:6f:31:87:61:1c:ea:6e:19:e2:71:
         0a:55:73:d2:b5:6f:e4:ad:d0:0c:57:94:b2:56:2e:c2:d0:fc:
         26:22:f7:8b:7d:47:52:e2:75:01:c8:b0:ff:65:34:2a:26:bb:
         a1:37:8e:c7:ee:6b:33:e6:54:69:33:b0:e3:29:84:4d:63:06:
         e4:bd:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:53:57 2026 by rpki-client