Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
File:                     lrvRv8ovihV4-qtbEMD8NVVhzGU.mft (raw, json)
Hash identifier:          8kO711Qg3Ir9VRKeUhW/gyml1q2KjuFz3IZAdh5dHLc=
Subject key identifier:   F7:B1:66:BD:83:8E:C5:F4:FE:12:C8:BC:A8:77:C0:9E:E2:6B:1A:82
Authority key identifier: 96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65
Certificate issuer:       /CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
Certificate serial:       019EB92158F8880023745DF1B6C1374C4A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
Manifest number:          08EE
Signing time:             Fri 12 Jun 2026 00:00:30 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:30 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:30 +0000
Files and hashes:         1: lrvRv8ovihV4-qtbEMD8NVVhzGU.crl (hash: Jqbdu8wcjCLMDPQ7sDu8ZwfmDOlWATvrZPteqfXAdX0=)
                          2: v7ov36hfvtk8wkcEWj0LQvv50EQ.roa (hash: z6k20v/tfXJDwNdPG7+trPkkzDOlvFnCMcAGQoe5GKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:58:f8:88:00:23:74:5d:f1:b6:c1:37:4c:4a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96bbd1bfca2f8a1578faab5b10c0fc355561cc65
        Validity
            Not Before: Jun 12 00:00:30 2026 GMT
            Not After : Jun 13 00:00:30 2026 GMT
        Subject: CN=f7b166bd838ec5f4fe12c8bca877c09ee26b1a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:fb:a2:44:0c:e1:76:47:da:52:64:40:0b:
                    12:28:e9:6c:81:4a:55:6a:11:ad:03:67:46:b1:a7:
                    16:de:3a:83:bf:32:b3:26:e1:3c:45:7d:a9:5b:a2:
                    5e:59:ab:33:a5:01:90:27:dd:4e:09:4e:b4:af:74:
                    bc:6f:a0:38:eb:77:32:e5:59:f2:45:1a:6f:c6:a5:
                    16:a8:cc:c8:84:0a:f4:98:1c:8f:10:a6:1b:86:52:
                    60:ab:b7:c3:0e:10:ad:a4:03:d3:4f:3e:2d:9b:35:
                    ed:b0:e4:8f:66:eb:58:bc:d2:c9:4b:82:cb:41:3c:
                    4c:6c:0b:55:b5:aa:f3:15:69:a0:35:5e:3b:ae:d7:
                    57:df:e5:74:4d:79:de:8e:35:25:75:ff:58:25:a1:
                    72:36:0b:ef:e4:37:ae:50:1c:cb:a2:40:89:5d:7d:
                    61:ab:bd:8f:66:75:81:4c:19:dd:a9:7e:62:e2:a2:
                    d6:63:da:e4:55:bb:98:c7:3e:5e:d5:be:f4:a8:93:
                    5b:2a:7a:12:c3:a6:cb:b2:a9:2e:ce:49:80:ed:c4:
                    82:1c:fe:fd:47:df:2c:33:45:90:1a:c8:1d:22:be:
                    59:b8:aa:57:c3:db:0b:87:db:53:10:1a:ba:70:8a:
                    10:2a:7a:9b:ef:86:9f:6f:d1:cf:a4:f2:84:01:c3:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B1:66:BD:83:8E:C5:F4:FE:12:C8:BC:A8:77:C0:9E:E2:6B:1A:82
            X509v3 Authority Key Identifier:
                keyid:96:BB:D1:BF:CA:2F:8A:15:78:FA:AB:5B:10:C0:FC:35:55:61:CC:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lrvRv8ovihV4-qtbEMD8NVVhzGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73f5b5-293d-4035-92ac-a87e2872ad8a/1/lrvRv8ovihV4-qtbEMD8NVVhzGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:32:bd:8b:19:7e:49:85:20:19:e6:a6:df:78:fe:15:18:9e:
         99:59:a0:d2:f0:7e:b8:5b:f8:50:fa:e3:cb:c2:5a:63:1c:0e:
         2f:f8:6a:4a:2d:2c:ab:f6:db:19:84:f7:d6:91:37:6a:72:ab:
         18:e9:52:80:27:a9:aa:60:a8:ad:49:c9:72:4d:82:e9:9e:aa:
         04:6d:4d:71:b7:05:cc:09:39:72:83:c0:55:70:5a:df:a2:9f:
         24:08:c2:51:78:45:e5:26:21:33:82:8a:eb:e9:27:0b:e9:45:
         cf:79:46:6c:81:13:91:68:de:3d:83:45:ed:d1:5f:d5:74:07:
         ea:1a:84:f6:1a:e3:d0:ec:58:4e:87:67:bf:70:47:e8:37:81:
         62:e5:78:5f:84:9d:31:47:8c:69:17:3c:7d:57:65:65:77:f7:
         31:4d:82:78:18:5d:e1:8e:64:74:88:4b:6c:e0:a6:9a:a5:0f:
         96:9a:06:09:11:7e:19:e6:d6:56:87:6f:d4:1f:44:95:bb:2e:
         93:73:a4:47:1c:fc:66:97:ee:b9:1b:d5:fc:48:a5:bc:57:6c:
         c7:62:11:6e:bf:06:8d:dd:02:f2:2f:0e:aa:fc:c4:2f:78:2c:
         49:af:d8:65:56:b8:bd:ef:47:b6:56:90:db:57:bd:de:04:27:
         80:c7:ef:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:54:05 2026 by rpki-client