Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File:                     g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier:          5PMzsriRGRzLTbTiTxIrQiTMzfE58jndnwEJqApmZUQ=
Subject key identifier:   82:BC:03:C4:74:C0:E5:33:5B:B3:DD:5F:EF:0F:BF:29:7D:1C:A1:97
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer:       /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial:       019EB958712E31CA9BF08EA5AA160F22A194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number:          02F3
Signing time:             Fri 12 Jun 2026 01:00:41 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:41 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:41 +0000
Files and hashes:         1: Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa (hash: IZffctFNRu2D4ovNLuJ8QUvA9BXb4VzlfLdGt6txidc=)
                          2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: fDPYO+7msstki0PGsgs0FSc/ZHiweiA0ZNZE+FXIFqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:71:2e:31:ca:9b:f0:8e:a5:aa:16:0f:22:a1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
        Validity
            Not Before: Jun 12 01:00:41 2026 GMT
            Not After : Jun 13 01:00:41 2026 GMT
        Subject: CN=82bc03c474c0e5335bb3dd5fef0fbf297d1ca197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:18:6f:bb:f3:a9:63:e7:29:27:11:ce:1a:
                    85:1f:5e:0a:25:48:af:43:df:44:45:3c:9c:b8:55:
                    6d:d2:6f:11:27:16:e8:8d:e9:5d:94:c3:26:66:7a:
                    a4:de:dd:29:4a:c5:f2:ac:a4:91:21:60:a5:cd:41:
                    4b:7c:af:5e:12:6c:e7:b4:c0:a5:f3:07:d4:bc:02:
                    08:72:f1:2f:ec:7d:26:eb:55:b6:65:10:e1:e6:52:
                    07:f7:17:c5:40:e6:09:85:96:b1:8b:e0:1b:bb:69:
                    1d:95:25:e6:28:33:54:01:e1:4e:47:d6:7f:c3:3e:
                    9f:b6:8c:a7:d3:83:f8:88:d3:f3:8c:7b:b2:e7:68:
                    5f:4e:af:5b:e2:08:39:d5:15:89:99:ed:ed:cb:80:
                    4a:9f:ab:5f:fe:3a:98:0e:0d:e2:11:18:c4:dc:e5:
                    93:a2:ce:5e:4d:9b:3e:f9:16:33:a8:ee:c2:d8:7b:
                    64:53:3d:42:da:65:30:48:30:0b:c4:6c:0f:b5:3b:
                    90:33:29:07:12:43:13:4d:c4:eb:d5:67:09:cd:25:
                    77:5c:94:e1:f1:f4:5a:e2:f7:98:4b:21:4c:ab:e8:
                    10:70:8b:41:9c:9d:0a:41:13:8c:1f:ed:bf:fa:73:
                    f7:d7:8d:09:67:e5:7d:ed:a7:a0:96:ae:f0:95:17:
                    95:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BC:03:C4:74:C0:E5:33:5B:B3:DD:5F:EF:0F:BF:29:7D:1C:A1:97
            X509v3 Authority Key Identifier:
                keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0b:da:20:59:36:b8:4a:03:58:b9:77:db:b4:e5:78:7e:af:
         d8:a0:05:d9:05:84:e7:d3:77:a4:fa:fe:ba:9b:e9:78:4c:f9:
         82:6e:ae:4d:10:b3:0e:0e:db:f5:05:ae:fa:ec:2e:31:7a:fc:
         26:a0:b1:3d:c2:7d:ca:d9:2c:7c:58:23:b8:29:9f:d4:ba:db:
         9d:8f:81:c6:a9:cc:4b:3c:d1:a4:30:48:60:f2:0f:36:9f:9b:
         fa:01:cb:5a:5a:3d:c9:af:83:79:f1:c1:f3:59:97:14:f9:7b:
         bd:1b:76:89:aa:19:bb:51:c0:9d:b1:95:f9:58:38:bd:b5:55:
         dc:43:5b:61:09:1a:a9:2a:37:d9:cb:a3:93:2e:c9:f8:40:11:
         4c:36:da:44:de:37:69:6c:3c:fd:c3:7a:b8:2b:51:d1:4d:7e:
         c1:b7:dd:63:d5:f4:3c:29:5b:c3:4d:df:31:92:1d:71:cd:94:
         ab:77:e0:99:64:0d:89:5d:66:d4:26:0a:9b:06:f9:db:24:f4:
         b1:31:a5:e9:bf:bf:11:d8:c3:e4:5a:a0:62:ca:c7:4c:31:2e:
         48:f8:d2:b4:3c:40:03:d2:10:d5:e5:2e:cb:b2:68:5e:87:78:
         f8:a0:aa:70:9d:32:ab:36:73:02:10:a0:f7:f9:a4:07:4c:85:
         58:83:7a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:50:21 2026 by rpki-client