Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File:                     coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier:          pxRoD5EYia6J2v2t1UqCsC3+TRrZkYFVXVlaK59yhAc=
Subject key identifier:   BF:E3:46:79:BF:C6:6C:DF:DE:19:05:B9:A7:03:5A:61:FB:3F:0B:89
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer:       /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial:       019EB62090849A75B1D728C543949FB850AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number:          0D63
Signing time:             Thu 11 Jun 2026 10:00:47 +0000
Manifest this update:     Thu 11 Jun 2026 10:00:47 +0000
Manifest next update:     Fri 12 Jun 2026 10:00:47 +0000
Files and hashes:         1: ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa (hash: s0+YXn6JExjbv7EOFAv3PA9qoMA8evHuktHkrwfwuYE=)
                          2: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: 4czHwJGnw7IFtao5uSSiwGKGcDxVBXErtw8LAPuVF3I=)
                          3: iRt9261buTm7shrgFKkm6kWLTGc.roa (hash: uNEt4c9Cjn1NASORr/E3c5O819CRsDanUsNnI47C9JY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:20:90:84:9a:75:b1:d7:28:c5:43:94:9f:b8:50:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
        Validity
            Not Before: Jun 11 10:00:47 2026 GMT
            Not After : Jun 12 10:00:47 2026 GMT
        Subject: CN=bfe34679bfc66cdfde1905b9a7035a61fb3f0b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:09:e3:3b:61:dd:13:1c:6b:6f:62:e9:f8:
                    88:f8:84:99:58:0f:81:f4:8b:42:5b:08:39:c6:d0:
                    cd:b7:d0:f5:71:d7:63:67:26:41:70:7d:c2:1c:7f:
                    6c:9c:bc:44:42:b3:c2:70:98:d1:14:9d:2e:4a:c2:
                    e9:b2:11:39:cb:e0:76:6b:3b:41:91:75:7a:47:5b:
                    8b:98:09:99:e7:ad:ef:63:bd:13:5f:56:14:42:3e:
                    03:3d:2d:f6:41:98:aa:5f:04:6d:6c:44:c0:15:b4:
                    68:f7:f8:99:98:5a:9a:aa:9b:c9:9e:28:59:f6:9c:
                    27:4b:61:75:6b:42:45:fe:e7:53:3b:c1:8a:a2:68:
                    67:c2:e8:fa:2d:4a:19:77:89:71:33:18:67:77:48:
                    7a:e4:17:56:06:fb:58:67:2f:64:fc:62:d7:52:3b:
                    29:79:33:fc:bc:a9:ab:50:a5:5d:8f:ef:e1:f9:18:
                    29:84:28:e1:92:63:ea:5e:d8:df:99:11:a8:53:68:
                    96:4e:a0:c5:ba:72:5e:37:91:b1:5c:26:e9:e0:1e:
                    5b:df:89:6b:ab:fa:2c:9a:6b:75:c3:a0:ff:8f:a4:
                    b9:72:5c:54:64:cf:0a:f4:32:28:02:78:a3:4d:63:
                    7d:7e:f7:f5:aa:7c:eb:97:7c:2b:17:b0:43:b7:70:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E3:46:79:BF:C6:6C:DF:DE:19:05:B9:A7:03:5A:61:FB:3F:0B:89
            X509v3 Authority Key Identifier:
                keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:de:a7:cc:5f:3f:79:c8:1d:8b:a5:1f:70:10:0d:2f:75:d5:
         b7:bb:82:c3:5b:b0:ca:78:dc:22:e3:d6:9e:bb:78:ec:6a:c8:
         8f:ec:6c:5f:ef:ac:34:c4:d2:f6:23:82:4f:81:02:3e:f3:8c:
         f5:ec:68:92:19:64:1c:4f:7f:6f:f3:05:0a:e5:3c:4e:8f:f2:
         79:b0:cb:b8:36:70:5c:e3:09:2c:48:91:6d:05:39:76:ef:9d:
         1b:b4:63:50:6a:52:15:90:71:0a:52:c0:20:f2:da:5b:c7:04:
         8a:48:46:18:d7:f2:62:dd:1d:72:19:ac:4a:8e:1d:04:42:86:
         29:cb:55:15:d7:00:ff:fc:b7:aa:dd:23:c9:f1:65:72:ac:41:
         a4:81:cf:50:d0:f6:17:09:5d:93:38:b1:aa:c4:a4:a7:b0:a3:
         64:1a:60:68:a9:88:33:0f:d6:d7:00:17:6c:af:c9:98:f6:40:
         28:b9:c4:12:f6:5e:82:ad:24:ee:68:2a:8f:f0:93:78:76:83:
         ee:be:79:b7:57:d0:74:5b:ae:7a:7c:81:5c:72:0c:97:c2:12:
         c8:84:a8:bc:b0:89:5a:7d:11:12:c4:d2:df:ab:24:cc:a7:db:
         58:be:93:1c:0a:7f:8e:1e:3c:e6:21:36:a8:ee:d6:c2:a5:4e:
         80:46:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:13:39 2026 by rpki-client