Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
File:                     fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json)
Hash identifier:          O6eRhJ5boqou5xcKk5W9dSV8qeCqTAFe4fB2/JeKgpQ=
Subject key identifier:   DA:75:9C:8C:24:71:17:A7:BD:1F:0B:1D:0A:A2:D8:96:61:C1:AE:A2
Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC
Certificate issuer:       /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
Certificate serial:       019EB845A67A1AB12D37112A3DDF49772EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
Manifest number:          0A2F
Signing time:             Thu 11 Jun 2026 20:00:32 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:32 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:32 +0000
Files and hashes:         1: 70GrOh32dQLUqU95-AO2TD0BpWg.roa (hash: JinzzeihpLTiA6O6jFrNum74gOx6URavCLmJpxWV2cM=)
                          2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: X5U3n6kNeRD/KtCduZpu0qWJePYtsAaP18ceLOAW/yI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:a6:7a:1a:b1:2d:37:11:2a:3d:df:49:77:2e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc
        Validity
            Not Before: Jun 11 20:00:32 2026 GMT
            Not After : Jun 12 20:00:32 2026 GMT
        Subject: CN=da759c8c247117a7bd1f0b1d0aa2d89661c1aea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ca:b2:e6:7a:06:8e:c1:f7:04:4c:85:d8:c4:
                    f6:52:26:23:bb:7c:37:78:0d:74:64:a2:6b:19:93:
                    a9:52:fd:11:2c:bd:f8:da:18:b4:6d:41:8e:71:b6:
                    28:4a:fe:64:a6:10:85:c3:32:b9:f9:58:8e:96:59:
                    fc:72:4a:6e:e7:4a:3f:11:49:7e:7c:cd:7a:c1:c2:
                    6c:86:29:96:e0:c3:29:3d:70:a8:dd:3c:cd:e2:d9:
                    94:6e:27:4e:07:d6:0e:46:57:db:31:88:24:33:69:
                    9b:6e:a2:70:c4:43:2b:e1:c1:44:9b:13:7b:6f:fc:
                    fb:8f:48:31:c3:06:47:98:36:bd:d1:8c:94:ab:72:
                    0e:ae:36:71:18:bd:2d:e1:44:ec:56:bc:03:b6:bf:
                    bd:05:1b:6f:d1:05:55:cc:68:53:fc:45:22:fb:ab:
                    c9:16:db:ed:28:ca:5d:24:5a:85:e1:1e:d5:0a:66:
                    2d:e8:cd:14:93:e7:83:57:df:ba:36:d5:1c:fd:0c:
                    bd:b9:0e:7a:ff:ad:07:a6:b5:47:06:4d:24:d2:54:
                    30:fa:dc:74:19:8c:11:de:0e:13:69:5d:5b:d8:f5:
                    18:2b:bb:4f:d8:ac:d9:49:25:46:2e:0e:86:3a:b1:
                    2f:79:0b:be:ab:9e:f6:58:59:8a:20:0b:91:2b:29:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:75:9C:8C:24:71:17:A7:BD:1F:0B:1D:0A:A2:D8:96:61:C1:AE:A2
            X509v3 Authority Key Identifier:
                keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:30:c8:1d:73:fb:e5:69:70:1b:67:de:bd:98:80:83:46:
         3a:e1:d7:a4:62:c2:96:9e:3e:28:d7:63:fc:d6:cb:71:c3:64:
         65:61:9a:c8:66:e3:9e:13:04:c0:67:92:ff:ef:23:42:e1:80:
         5d:5c:8f:a3:79:17:4e:7c:47:14:1d:2e:97:aa:9c:c0:e3:a1:
         e4:3b:4c:f7:85:58:11:86:83:43:9b:d4:82:94:4b:43:8c:37:
         f1:9a:d1:9a:3b:bf:2c:85:28:31:f6:f9:d9:df:64:df:fa:d7:
         43:b5:3c:f0:e5:f2:91:9c:28:d3:98:26:4e:71:68:73:50:9a:
         82:29:9b:d6:3d:ea:54:88:b4:3c:97:96:d7:da:4e:17:35:fc:
         f1:1f:11:ea:56:8a:c5:e8:fe:e8:6e:31:9b:47:07:8c:b6:86:
         ed:cd:94:38:db:89:69:45:92:a5:33:43:ad:6e:8b:98:99:66:
         c2:40:66:47:ae:c9:c0:23:f4:6f:2d:04:55:8b:0c:9f:18:43:
         dd:09:4d:ae:e4:78:fa:62:3f:22:52:6a:c0:3b:bb:02:8b:71:
         34:73:fa:2c:60:df:ed:72:65:1c:3c:71:39:ae:d5:70:4f:49:
         aa:83:87:7e:56:0b:19:02:d7:69:e5:73:a5:53:fa:87:d2:1a:
         24:8c:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:30:09 2026 by rpki-client