Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
File:                     cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft (raw, json)
Hash identifier:          AsdI0w31pmkxCx0dGZYmnbgrW4YTeQvaq1zu4dDGS04=
Subject key identifier:   27:CB:03:CC:43:0D:47:6F:92:78:A0:84:17:BB:D7:5F:E0:6E:31:1C
Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
Certificate issuer:       /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Certificate serial:       019EB958FA68BA3B3D6B4BDB125F3434EA83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 01:01:16 +0000
Manifest this update:     Fri 12 Jun 2026 01:01:16 +0000
Manifest next update:     Sat 13 Jun 2026 01:01:16 +0000
Files and hashes:         1: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl (hash: SZkhXYPndIyIbzPKeqT4Vyyal9LETKa0RVrcI868uPs=)
                          2: qA7d0hV7yweCVccdWUkIJoRwGhY.roa (hash: 4eWS0DS3mR7iZPRi58DdU3aTkA34+LKikPGGrZPgsSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:fa:68:ba:3b:3d:6b:4b:db:12:5f:34:34:ea:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
        Validity
            Not Before: Jun 12 01:01:16 2026 GMT
            Not After : Jun 13 01:01:16 2026 GMT
        Subject: CN=27cb03cc430d476f9278a08417bbd75fe06e311c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:86:3a:37:0d:a4:c2:f9:84:06:c3:0d:5b:
                    a4:44:0f:bc:6f:b9:60:40:c9:55:92:a7:a3:0c:fc:
                    dc:f7:58:23:aa:87:9c:52:19:dd:a5:a9:ca:e2:cd:
                    e0:c9:ac:56:99:1a:a1:8b:30:cd:b5:97:b6:2d:21:
                    a0:a7:15:10:1e:61:14:02:23:8c:29:d5:dc:c2:04:
                    0d:1c:ce:27:10:bc:63:43:83:34:6b:cc:24:79:91:
                    b8:8c:29:ca:09:1b:cb:6b:2c:d5:ae:d5:fa:7d:91:
                    09:1c:ff:57:93:bc:59:a4:99:c6:2f:b3:a0:75:83:
                    2d:8d:cd:fb:51:96:93:df:2e:dc:56:9e:da:61:c0:
                    f2:81:89:0b:20:49:e3:2a:e3:e4:7d:ef:eb:1d:49:
                    7d:ea:ca:3c:22:c2:10:aa:77:04:61:b0:94:68:f7:
                    79:c1:47:e2:aa:0c:6a:d0:b5:0e:9a:4c:c4:a9:0d:
                    7d:db:ea:95:dc:7a:d3:6b:34:26:e6:d1:63:b1:60:
                    8e:f1:b5:39:90:f1:b7:a5:c6:96:02:6f:f6:68:84:
                    e7:cd:b7:e6:2b:4a:3b:18:72:04:3d:4d:36:b4:99:
                    27:48:d9:e3:67:1e:95:85:ba:ae:c5:c9:d6:75:73:
                    95:9d:b8:13:58:07:a6:c6:7b:5f:65:9d:fe:cf:18:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CB:03:CC:43:0D:47:6F:92:78:A0:84:17:BB:D7:5F:E0:6E:31:1C
            X509v3 Authority Key Identifier:
                keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:90:c3:7f:f2:5a:8d:a9:0f:f3:f9:44:88:0f:3c:dd:7f:e5:
         32:33:7c:f3:29:06:64:d9:2a:df:4a:7a:8f:21:83:4d:e3:89:
         ab:7a:29:a1:a1:e0:3f:e0:af:ab:b9:9f:ca:33:a2:fa:d7:25:
         2e:e0:d7:c4:ff:85:19:62:76:0b:17:35:1e:7d:b3:dd:0f:3c:
         87:9a:ad:0e:53:fd:c0:23:db:68:35:1f:d7:f9:d6:7e:70:84:
         9f:ac:51:51:20:1a:ab:e1:29:1e:50:61:e3:4f:3a:a7:25:3e:
         0f:a8:87:2a:f5:01:f1:c2:6c:be:10:20:48:23:3b:f3:0f:27:
         cc:38:84:ec:d6:8f:c9:fd:80:17:35:09:ae:e5:bd:2b:2f:1b:
         a2:0d:76:14:12:50:47:20:54:55:7e:d9:1d:ee:4f:a2:c0:fb:
         1e:61:fb:47:5e:06:f2:2f:9d:86:3d:a7:2b:74:89:06:fb:fb:
         f8:47:c0:ef:92:99:aa:53:9d:f9:a9:40:3f:34:d7:8e:4c:60:
         eb:c8:be:d2:33:64:b0:02:1a:48:38:28:73:e0:91:5f:69:4a:
         37:1a:21:23:7c:a2:d0:29:85:90:d1:a5:5e:85:d5:ae:7e:c6:
         ee:d2:02:5a:c1:f9:dc:e1:ea:98:95:e1:20:34:9e:09:ef:e5:
         3d:3e:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:48:55 2026 by rpki-client