Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
File:                     sMnhFmeJWbipR4_Op8o8BgMQIWI.mft (raw, json)
Hash identifier:          jaNPIkUGM8+UaWR6l5UtVvw405VLGO5ieru5nAO3CYI=
Subject key identifier:   85:D7:8F:D6:64:AD:9B:5B:FA:87:B4:32:AE:88:7F:9D:10:6C:05:A3
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Certificate issuer:       /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial:       019F12A5161ADDC1EF2A8D39B2ABC88D0104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
Manifest number:          09D6
Signing time:             Mon 29 Jun 2026 09:10:36 +0000
Manifest this update:     Mon 29 Jun 2026 09:10:36 +0000
Manifest next update:     Tue 30 Jun 2026 09:10:36 +0000
Files and hashes:         1: S4wwLn9fDgIk6Y9FUd4042L2ynI.roa (hash: /05M3ivPyCp6HZVks6NA1oAAHLfQXNFMpgoWZYo9jdI=)
                          2: SOiERy2FzpjBOJscmjZUT2oXCyo.asa (hash: I8iKKxNhfuhsMLpyqDcsPliv9eTPu4ZuRNf7dFDTu3k=)
                          3: XUGY9TbOMBX49Z8u90RGUe-ExLs.roa (hash: qtTspg26ND5GYRKyrYjwXIvA6gCRcdmehMVXE9EcA5s=)
                          4: sMnhFmeJWbipR4_Op8o8BgMQIWI.crl (hash: 5VFGUbWoP6RHHchttjUm+YjdDpxHCkc+Uj8VtXVLqsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:a5:16:1a:dd:c1:ef:2a:8d:39:b2:ab:c8:8d:01:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
        Validity
            Not Before: Jun 29 09:10:36 2026 GMT
            Not After : Jun 30 09:10:36 2026 GMT
        Subject: CN=85d78fd664ad9b5bfa87b432ae887f9d106c05a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:f9:5e:42:23:4e:47:a7:75:64:93:80:b3:
                    75:9f:70:6f:52:39:f8:2e:94:44:21:59:2c:af:1a:
                    b8:70:1e:5d:7a:eb:b9:f5:fd:ce:2e:9d:db:bb:84:
                    b8:df:63:0e:15:d0:06:77:d0:60:dd:31:8b:6a:54:
                    e6:ac:86:73:22:d4:08:ac:87:13:ac:7e:55:77:a6:
                    f5:d8:14:e7:a2:e8:2e:e7:25:bb:4d:18:b3:3e:10:
                    84:67:61:0d:d2:85:8b:ab:da:4c:e1:6b:0a:16:1d:
                    4f:08:48:a7:d7:50:62:6d:22:a0:d1:c6:4f:0e:b5:
                    0a:da:f5:bc:8e:e7:0d:5d:92:14:4b:32:9c:16:24:
                    11:34:84:7c:d3:ba:06:08:5c:82:eb:46:59:6a:4c:
                    a2:5c:8a:06:fd:29:8e:ff:5c:a1:41:b7:b6:ec:d0:
                    ca:f5:92:5d:e2:15:d0:6a:5b:ff:d5:0f:b0:d5:bb:
                    0a:ac:d4:1f:43:4a:d6:54:bc:a0:2b:ef:1e:b5:2d:
                    5d:92:bd:26:ac:e1:60:9d:9e:48:29:cd:94:c4:54:
                    12:f5:2a:13:2a:ea:09:82:29:7e:49:db:db:45:63:
                    d2:b2:bc:62:9a:7f:f2:bf:fd:b6:b4:ba:e6:d0:2c:
                    e0:31:f5:22:02:b8:90:8e:18:51:6e:db:17:0f:9d:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D7:8F:D6:64:AD:9B:5B:FA:87:B4:32:AE:88:7F:9D:10:6C:05:A3
            X509v3 Authority Key Identifier:
                keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:74:56:84:1b:c1:10:75:9e:ff:82:24:49:d6:23:e9:6f:04:
         2b:fd:24:cc:5f:f7:85:01:57:e3:2e:70:07:f6:96:c0:5a:3e:
         4b:f7:27:00:35:da:e2:29:51:1c:93:ce:6c:3b:26:9e:dc:f9:
         16:f1:e2:5f:60:98:19:8b:ed:3f:f0:41:38:40:10:86:a8:4b:
         35:e7:cf:c3:8a:0d:75:fb:0f:24:c0:10:0e:ab:9e:23:11:fa:
         db:cf:72:ca:49:e1:b2:cc:28:1f:3d:e0:de:c3:2d:9b:39:d2:
         a6:64:5d:3e:3c:ea:72:ae:59:4c:1c:e7:11:0a:2c:10:92:3a:
         40:74:23:63:e1:13:a2:66:4f:b6:27:cf:37:72:42:81:ee:61:
         a7:18:cf:fb:53:86:34:35:2d:0c:0d:10:74:9f:3c:00:31:39:
         c0:fa:27:5d:80:e4:d9:8d:86:bd:c2:92:b5:aa:35:c0:6c:92:
         77:cf:a3:15:d5:5f:ba:82:75:6f:ee:0f:e8:ad:ac:b9:de:6e:
         70:75:a9:1d:77:2b:eb:15:f5:da:9a:d1:57:c8:20:59:9e:e3:
         cf:13:f6:32:29:f5:c7:ce:9b:54:29:ae:36:77:61:f4:fb:c3:
         81:f3:e2:64:a5:9a:ec:3a:12:94:7b:f5:40:49:66:e5:6f:60:
         42:b8:ca:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:21 2026 by rpki-client