Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
File:                     0As3tvS0RWReaZOpxexghJJCXw4.mft (raw, json)
Hash identifier:          ie+r/Id2/ZOOM/RO0QR9o9FRtzW9qI3lughxBkN0yJc=
Subject key identifier:   44:DD:AC:D1:54:63:C0:ED:82:47:26:BB:A0:B1:42:2F:64:4A:FB:9B
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Certificate issuer:       /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial:       019EB7D7A99CE88C312909D49D354808030F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
Manifest number:          0D08
Signing time:             Thu 11 Jun 2026 18:00:24 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:24 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:24 +0000
Files and hashes:         1: 0As3tvS0RWReaZOpxexghJJCXw4.crl (hash: MYoU22QOl0r9AHpeRAb5zo2LFftcWRVaV9w9kw0lV38=)
                          2: 1-VKebJ6-QHE8J6bBnka06nsEKrk.roa (hash: ZITsMCXMR1Z2BEaqVh0MX6r/bVT+fA6ggF9urUQBDIY=)
                          3: GBY268elKXl97npV4jXZBGsnzcw.roa (hash: puRSSX8DZwtYE+mawU0837aHCzln32Frk5qp7mgeh8Y=)
                          4: NCC353pQrNx8eGiSxSQfU2T_0X8.roa (hash: x5reXqO96nT5gM2bNozGLs+YENzOaeTSR3ek69LYolg=)
                          5: XX639XievMdqJ8SDTTjke_CjH90.roa (hash: eFHYg4wIZNajc7SdejcYRKfEHVh83hlLOw8omNGRsMs=)
                          6: bQ2Z3MpaRAN6Ght6WnEtUcjPZgg.roa (hash: 5jTz/OfVAorDmvszopQ0R2vKYBjIj8qCbrV2KmrXO8I=)
                          7: fhJYydXnvoN7Ac7AqkaPLuxtACY.roa (hash: e/9VG+aSWxjfrsY+2Dk5znjgI4W2xJG4DTb4yBqCYAc=)
                          8: llhcsYDLkm4Ou2uZaJyDW3EMdA0.roa (hash: v77F3OYndH+vxoqA2hOKsJpKUx5tr3Ki2/ZCUFpENYI=)
                          9: uGQWNyg5237Zm0UUhjGg8gARmn0.roa (hash: li0m/zbSxgzFDwh2iasmSHBN8irzYLoTvtgSIVNzWfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:a9:9c:e8:8c:31:29:09:d4:9d:35:48:08:03:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
        Validity
            Not Before: Jun 11 18:00:24 2026 GMT
            Not After : Jun 12 18:00:24 2026 GMT
        Subject: CN=44ddacd15463c0ed824726bba0b1422f644afb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:4d:f5:24:d7:7d:3c:1c:8b:7b:2a:6d:cb:
                    f8:4e:b4:df:65:e6:7d:ac:3e:06:a2:91:73:54:66:
                    ec:2a:99:bd:43:88:4b:97:e2:7a:5a:28:83:f2:09:
                    6d:ba:72:9e:d9:8a:06:d0:8a:83:66:97:71:3b:2d:
                    38:64:60:05:9e:9f:63:8b:7a:d6:79:90:f5:49:76:
                    a1:11:8e:08:d5:a5:b1:ff:e9:aa:72:c6:98:96:b2:
                    25:f3:a0:14:5f:d3:83:0d:2f:86:bc:c8:17:0e:2e:
                    e7:a2:70:5e:b8:de:6b:4a:2f:74:33:29:2e:32:20:
                    e6:06:1b:49:88:11:4d:5a:01:3e:fb:69:4d:11:17:
                    bf:30:d5:91:ab:22:47:af:9c:07:71:72:eb:e5:71:
                    e6:5b:e2:c4:ef:8d:d0:ee:54:38:b2:c9:9e:6b:2c:
                    9e:d3:aa:f0:9d:1d:f9:15:e2:6a:f0:08:9a:33:c0:
                    63:77:6a:c5:12:e5:aa:51:a9:c9:60:44:1a:ea:b3:
                    57:0f:8e:f7:98:90:85:26:62:d8:21:3d:24:41:d8:
                    ca:4f:e6:81:b9:3c:d6:03:7b:57:e0:95:93:49:a9:
                    cc:dd:30:cd:75:a5:a1:5b:ce:71:9b:53:70:c2:6a:
                    49:91:c6:80:f4:43:c0:bf:7f:98:82:2b:43:2c:71:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DD:AC:D1:54:63:C0:ED:82:47:26:BB:A0:B1:42:2F:64:4A:FB:9B
            X509v3 Authority Key Identifier:
                keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:06:f2:50:94:bc:49:83:b7:5a:ed:5f:9c:6d:cf:64:ce:e3:
         bd:e4:4a:9f:69:20:71:01:87:5b:c8:f2:50:55:13:e7:08:34:
         de:7d:52:33:af:80:ae:ed:7e:1f:8f:8e:60:75:20:17:bc:22:
         9c:c3:60:0b:bb:d5:cc:d6:f5:fc:38:cd:a0:6b:a1:2a:39:b2:
         4c:18:d1:f8:07:1a:88:f0:cc:eb:5d:c3:d8:b6:4f:ff:96:bb:
         eb:1e:f1:db:d6:7b:73:32:91:8f:ae:7b:55:be:fb:01:bf:00:
         cd:be:44:4f:09:14:ea:c6:16:cc:48:5a:94:ee:c5:0a:e6:15:
         e0:e5:75:eb:d0:f0:b5:6c:68:6c:7b:3a:52:00:2f:0f:96:66:
         13:6c:a7:74:48:fd:98:74:1f:c2:16:1c:76:37:8a:0f:81:0d:
         ef:7c:f8:87:b3:df:33:71:34:6e:40:3b:4e:a7:87:96:8b:57:
         54:e8:d1:05:ae:f2:9b:7d:24:69:57:b0:a2:09:45:c2:bf:0f:
         16:46:f9:1e:7b:36:82:0f:3e:15:53:8d:58:1e:da:72:33:c2:
         96:68:55:c5:62:ad:f9:c9:40:24:fa:81:4f:2f:c7:54:cc:77:
         ab:73:b4:c5:6b:9c:34:7e:95:c5:51:d2:d4:ac:81:95:72:49:
         a0:8b:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:59 2026 by rpki-client