Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File:                     rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier:          OJCCHQqIZy7eXYdhrTuhdJKeP3n73A5h32xQDNMkvzU=
Subject key identifier:   52:A4:DB:22:BB:02:3C:56:A3:49:CE:BB:48:5D:BE:DB:6F:E7:4B:B5
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer:       /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial:       019F1A1F279A7F55D2C01824C2C2EB9F1AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number:          14C6
Signing time:             Tue 30 Jun 2026 20:01:16 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:16 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:16 +0000
Files and hashes:         1: 9RnRKei6gl9oZHVCyn4kDQqzyTg.roa (hash: R/Nz+fq8qLQCR73Ef868dsOsi+wbzZuFNF938QY3new=)
                          2: IgdPfhPl1P3iT1FWrsiJPEWiUf0.roa (hash: qJpCjPIGc1MaV9L1dwnXjXWQ+qoYXiY/1KG2OSBZzVg=)
                          3: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: B8g0sIG5rO+4Irax/qyN8LMkrrHpcnOuRUy9u4EAnCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:27:9a:7f:55:d2:c0:18:24:c2:c2:eb:9f:1a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
        Validity
            Not Before: Jun 30 20:01:16 2026 GMT
            Not After : Jul  1 20:01:16 2026 GMT
        Subject: CN=52a4db22bb023c56a349cebb485dbedb6fe74bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:02:e1:59:8c:d6:d4:87:e0:cc:5b:e3:8e:
                    80:42:7c:3d:cb:61:1a:71:28:67:3c:8c:d3:16:f8:
                    e3:9e:5c:1b:b0:51:55:df:47:b0:7a:2d:ca:77:61:
                    f2:8d:bc:9a:eb:10:01:80:4d:f0:fa:c2:fd:b0:a9:
                    e1:45:5f:03:cb:83:d4:ec:71:9f:e9:90:c9:50:20:
                    62:92:53:73:2b:36:35:74:e5:d8:af:fd:0c:f8:7f:
                    57:76:31:7a:4f:e7:c2:72:08:41:27:21:dd:3b:66:
                    90:79:bb:ce:37:c3:6b:30:2d:08:5f:40:7f:c1:7a:
                    cc:ec:4a:d5:89:7b:b9:44:a5:a7:f7:11:15:42:19:
                    be:e6:09:ea:40:62:c0:2c:f4:ee:80:23:d1:22:ec:
                    5c:13:db:c4:20:7e:07:f9:05:6d:3a:3c:b1:81:37:
                    7c:85:02:eb:85:3b:dd:64:bd:3a:85:fb:6e:91:1f:
                    e0:29:74:58:e3:65:f3:29:64:92:b4:62:c7:1d:4e:
                    63:e5:d6:98:b1:91:b9:9b:89:40:8b:30:28:92:16:
                    41:be:1c:17:b8:d0:64:33:79:dc:2a:7d:c9:54:ce:
                    83:a5:3f:fc:46:89:4a:af:f9:39:cf:d6:f7:71:26:
                    c5:9a:df:46:30:68:80:64:93:47:3f:04:7c:81:d6:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A4:DB:22:BB:02:3C:56:A3:49:CE:BB:48:5D:BE:DB:6F:E7:4B:B5
            X509v3 Authority Key Identifier:
                keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7c:a8:10:b2:99:ea:6e:6b:36:cc:0e:38:97:86:3f:fa:af:
         8b:cf:b6:d2:c8:e7:25:b2:14:0e:32:30:c0:d5:9a:ea:65:b6:
         b0:56:2a:38:92:1b:89:7c:04:2e:ac:7f:4f:17:99:30:e8:14:
         bf:dc:f5:bf:1e:0e:89:9a:82:a7:e9:69:49:e0:28:39:0e:d4:
         82:98:d2:cd:07:73:b0:a9:45:4e:93:95:46:0b:ae:f3:f0:d1:
         2e:d1:63:32:7b:22:50:d3:26:1a:17:75:9f:1f:15:39:6a:3d:
         8e:2d:04:31:b7:49:e8:af:21:b5:ad:34:4f:c7:b4:cc:f1:cf:
         73:0a:4a:e0:50:40:a7:b6:89:df:32:e9:88:f2:74:59:cc:e1:
         a1:3f:e8:65:02:8d:99:ef:31:fa:d3:2c:c6:5a:23:63:f3:11:
         b7:74:68:74:31:e8:93:10:47:24:3d:02:6a:eb:c0:2d:01:65:
         4d:34:07:ff:1c:49:29:6a:dd:c1:1c:07:0f:05:d2:47:97:cf:
         be:57:03:76:e0:c7:57:fc:cd:b0:88:85:99:18:eb:69:b4:c5:
         f2:4f:ab:8e:f2:fd:aa:0f:c2:73:91:3e:9b:70:f8:10:dd:63:
         d9:99:9b:14:97:a8:19:0e:6b:8f:99:4f:b7:84:85:04:9d:8a:
         a0:aa:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:48 2026 by rpki-client