Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File:                     8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier:          JqTdXRst1wiLQo3hSZBeJNtd2Oq7xjOVXypO9M3wb0w=
Subject key identifier:   E0:A2:45:33:DE:22:91:4A:BD:7A:71:44:EA:F6:C1:9C:D4:6D:65:CE
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer:       /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial:       019EB6FC5F11E88DBB593F7CC3AA22785AE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number:          09AB
Signing time:             Thu 11 Jun 2026 14:00:53 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:53 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:53 +0000
Files and hashes:         1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: 00MO1XXPw9uQgW3H3bX37iO68j6jpxIpbNrzwC3D+iM=)
                          2: iHVc-I0D4U1Te_vkxACKnVHK0pY.roa (hash: cq22r4Ne1D5UlvzndIcqY6BmHjQFUZ46sNNxAKWhDNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:5f:11:e8:8d:bb:59:3f:7c:c3:aa:22:78:5a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
        Validity
            Not Before: Jun 11 14:00:53 2026 GMT
            Not After : Jun 12 14:00:53 2026 GMT
        Subject: CN=e0a24533de22914abd7a7144eaf6c19cd46d65ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3a:54:fd:87:e7:61:45:f2:1b:cf:2a:0f:8e:
                    4d:07:cc:a1:4e:8e:de:c2:20:98:d4:d8:21:47:34:
                    12:c6:51:8f:9c:7b:35:dc:f8:e8:ad:cb:a6:17:ce:
                    8f:ad:f9:dc:5b:ef:34:c3:ae:29:b7:90:29:2f:78:
                    9e:32:7a:f4:98:74:b3:70:75:16:a8:c3:e9:58:0f:
                    3f:c3:4e:18:47:e7:f6:7c:f9:e6:4b:52:61:5d:06:
                    87:42:25:16:f0:db:b4:5c:bd:ea:a9:ec:17:b9:21:
                    f4:06:1a:9a:d2:c3:1c:3b:64:bf:e8:02:9f:06:e9:
                    a7:c1:c0:2f:ae:85:c3:7d:c0:f3:50:d9:ce:6d:71:
                    68:dd:b5:59:90:10:ea:c0:7e:81:b0:b2:b2:90:7e:
                    46:8d:3f:63:6d:1d:f2:37:b5:89:a9:a9:77:6b:fa:
                    4f:e1:79:06:7b:ac:9d:fb:5a:07:ef:d9:64:e2:aa:
                    0a:5b:23:6c:a1:71:53:5d:80:87:a1:9d:ad:5b:7c:
                    9e:07:aa:33:fb:2d:74:fe:b2:bd:98:30:b5:05:e2:
                    13:5c:b6:51:06:8a:eb:03:0d:3f:6d:ea:68:25:71:
                    7e:80:74:68:9e:d6:92:33:f3:8a:4c:d6:9a:40:4b:
                    33:e2:c5:b7:72:cc:a3:88:63:89:28:1b:f6:94:b4:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A2:45:33:DE:22:91:4A:BD:7A:71:44:EA:F6:C1:9C:D4:6D:65:CE
            X509v3 Authority Key Identifier:
                keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3e:2d:ea:ac:35:e5:f9:cb:64:45:f5:e1:53:09:e0:df:15:
         7b:d1:5b:8a:38:52:52:de:12:9f:68:07:e6:70:48:8d:05:8c:
         43:bb:4f:c4:b2:63:e2:25:b0:f7:89:a3:57:b3:ce:ae:57:81:
         7a:97:9b:95:a2:8c:94:b9:d8:9d:5d:b2:97:75:11:1c:46:e8:
         b4:73:ae:58:f9:e5:55:da:21:5e:c3:12:64:5b:10:8b:59:1c:
         36:0c:48:90:df:e3:c6:d8:79:a0:0a:51:48:97:d9:ab:fa:7f:
         eb:7b:55:dd:02:79:0f:9d:0e:19:84:7d:80:8f:5f:6d:ef:ef:
         95:e7:5c:98:ba:7e:20:8f:7b:14:fe:64:dc:67:8c:9d:18:18:
         5a:61:fa:76:b0:5c:d2:6a:29:4c:e4:ef:76:8d:48:bc:61:d4:
         09:94:e1:81:e6:81:d0:fe:1d:b0:ec:de:30:ef:bf:ac:3a:e0:
         4a:f9:18:6b:b9:97:1f:ab:b4:80:5f:f4:0d:c0:1d:df:83:5c:
         57:14:8e:58:7c:ca:94:5b:b9:36:74:d6:86:30:d1:2d:52:dc:
         e0:f0:96:3a:93:32:1d:84:70:b0:fe:c6:ff:45:c0:72:4f:2a:
         69:e8:ad:a3:9a:c4:db:67:4c:67:66:9f:80:76:c4:b3:5f:a2:
         e4:b4:ee:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:12:06 2026 by rpki-client