Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
File:                     E_8jyrp-AfaB5z36sXQ_9keN3O0.mft (raw, json)
Hash identifier:          XT7KTAZtAP8JvDr3821JH7nfsdxMsjZVtFXB8wtSPl4=
Subject key identifier:   37:23:C7:F9:09:B3:D6:C1:75:E4:12:F9:2D:CB:E5:29:39:03:35:BB
Authority key identifier: 13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED
Certificate issuer:       /CN=13ff23caba7e01f681e73dfab1743ff6478ddced
Certificate serial:       019EB845B81FFD52EBEC7EE34861B88CC39E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
Manifest number:          06C7
Signing time:             Thu 11 Jun 2026 20:00:37 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:37 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:37 +0000
Files and hashes:         1: CF3c0K2gtt1WUm-O6kkQLEd6JYQ.roa (hash: 5ttQMFlBuHqp4mBzNOycaLf8j5C57Lnf42hbj8hxe2g=)
                          2: E_8jyrp-AfaB5z36sXQ_9keN3O0.crl (hash: 1cxElijO9GrZRw3I2UejYK8nQIKeIVUsSDpbDju9obA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:b8:1f:fd:52:eb:ec:7e:e3:48:61:b8:8c:c3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff23caba7e01f681e73dfab1743ff6478ddced
        Validity
            Not Before: Jun 11 20:00:37 2026 GMT
            Not After : Jun 12 20:00:37 2026 GMT
        Subject: CN=3723c7f909b3d6c175e412f92dcbe529390335bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:23:5e:8c:31:ce:0e:e6:a0:d7:fd:6a:9d:
                    d1:5d:94:22:c9:31:5d:48:a4:9f:9a:a8:e5:e0:a9:
                    61:47:ec:28:f5:81:f6:a2:33:f4:b7:ac:c8:16:fb:
                    1a:05:88:5a:f0:a8:f8:d0:6d:0c:0b:21:13:dc:b2:
                    5f:29:30:2d:2b:ce:5c:fa:cc:7c:9f:06:1a:1c:8f:
                    4e:36:36:91:2a:38:c4:39:0a:21:57:03:cb:9b:fd:
                    08:2d:15:c9:60:e7:c5:a0:e1:5b:fd:d7:7d:de:a4:
                    a6:fa:cd:88:a2:5a:9a:e4:29:c7:41:5f:00:ae:81:
                    cb:b8:06:b4:c6:af:ae:e7:37:89:94:d4:3d:77:4a:
                    01:bb:5f:f3:24:31:ce:80:fb:97:a5:ee:68:55:3d:
                    dd:6f:1f:c4:ea:4c:cf:63:0a:35:0f:70:be:b2:b1:
                    a0:a3:16:42:5a:dc:68:18:cd:a0:6e:56:75:58:ce:
                    f6:88:30:b8:c2:6a:a0:55:a6:3b:65:8c:1c:8d:1c:
                    52:04:99:56:67:92:89:30:7f:40:04:6d:c5:f5:4c:
                    4a:78:ab:2a:17:f7:63:de:b7:4f:b4:18:db:19:5a:
                    74:1f:a6:3e:8a:74:54:6c:ad:8a:d8:ff:2d:53:49:
                    cf:75:34:92:ae:86:d3:78:b2:fa:3a:c6:63:e7:53:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:23:C7:F9:09:B3:D6:C1:75:E4:12:F9:2D:CB:E5:29:39:03:35:BB
            X509v3 Authority Key Identifier:
                keyid:13:FF:23:CA:BA:7E:01:F6:81:E7:3D:FA:B1:74:3F:F6:47:8D:DC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_8jyrp-AfaB5z36sXQ_9keN3O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/28a68c-fb5e-4860-94b4-639780e939e5/1/E_8jyrp-AfaB5z36sXQ_9keN3O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b9:3c:ea:69:97:23:37:89:57:11:4d:0a:32:74:75:28:05:
         f3:07:13:9f:7d:11:fd:d3:64:42:77:3e:c3:40:86:d1:f4:ff:
         c8:2c:24:dd:81:4c:59:60:ff:d1:1f:03:ef:39:da:dc:a9:8e:
         28:0e:ca:e3:26:57:e2:23:96:ff:32:23:68:cd:91:5d:95:68:
         0b:a2:0f:43:63:a2:0b:b6:bd:96:79:a2:59:1c:d8:70:5c:50:
         87:f7:95:18:38:84:98:b1:cf:1a:06:8a:4c:ee:54:a0:dc:e7:
         3b:7e:a8:90:aa:f1:79:32:8f:a5:35:ce:03:7c:aa:58:6f:b5:
         ec:5c:fc:23:c5:86:af:6d:dc:bb:fa:b7:c6:49:0d:96:52:f2:
         06:36:8e:e7:0b:8d:b9:df:e4:19:d2:44:12:d3:4c:fd:18:7a:
         59:0a:7d:af:2b:c0:0c:c1:47:d2:8d:d3:bc:53:db:a3:47:98:
         bc:1d:e8:82:da:d8:7c:1d:9d:1f:ca:14:b6:45:6b:a2:22:29:
         dc:09:c9:cd:1c:7c:3f:af:19:60:c3:13:bb:1e:36:87:36:f9:
         77:5d:50:7b:24:a7:7a:09:39:83:c5:d7:de:47:c9:f1:a5:54:
         e9:1f:f1:9a:d6:17:c1:2c:79:30:5c:f9:ae:aa:55:66:fc:64:
         3d:10:cb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:00:08 2026 by rpki-client