Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
File:                     loH8jHM3xqHSC4SADfhion5f29c.mft (raw, json)
Hash identifier:          PM/idfNvg948I9anO1WfeYbx9Rj+9Of0uO4Q+w6Uw/E=
Subject key identifier:   8C:EA:DF:ED:B7:74:19:10:DD:72:D5:A7:3D:80:1B:6B:10:03:5C:29
Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7
Certificate issuer:       /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
Certificate serial:       019EB76A5B00E0DC8ADFEA23AF49FD259A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
Manifest number:          03F7
Signing time:             Thu 11 Jun 2026 16:01:01 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:01 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:01 +0000
Files and hashes:         1: 62xv2lQHxNM_l_YrJtcwOfnMuYw.roa (hash: gV7lklXQn/5hqUDHVsvJYf+Kfk/HDRP/U+DCEe4jlA0=)
                          2: PFGIVa0BOcrYn7LDn1lpTGcFlyg.roa (hash: KajiJYew3aM31pMlayFlO34jp69DaxrhYFWYOe/gl/8=)
                          3: i9dvXXtl86NkntskYAQaMtaTQus.roa (hash: jn3xesrUXS6xuu+2iCltP+AJecvksZHI4qYuAZ+46Rw=)
                          4: kH2vVEZ7NeBnNJ25Bfzxs-l-m2Y.roa (hash: lUmva7T7suBnjlbuPKGwGSN8q5aV/viwDRe/Z9TY9sA=)
                          5: loH8jHM3xqHSC4SADfhion5f29c.crl (hash: awWv9rJXSAq0m81OFmqRykmv5CeIGx+Bg3NbfuM8g1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:5b:00:e0:dc:8a:df:ea:23:af:49:fd:25:9a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
        Validity
            Not Before: Jun 11 16:01:01 2026 GMT
            Not After : Jun 12 16:01:01 2026 GMT
        Subject: CN=8ceadfedb7741910dd72d5a73d801b6b10035c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:5f:3c:4b:3b:cb:cc:03:9b:4f:c9:39:d0:
                    72:74:5a:4b:3e:a2:1a:6d:0a:46:7c:6d:48:c3:f2:
                    84:84:1a:4d:5a:37:cb:a0:39:6d:cc:cf:a4:af:a0:
                    85:39:b6:3a:60:57:42:1f:94:6a:14:4c:96:36:0e:
                    f1:9f:a2:76:79:2b:ff:f3:3d:b0:76:66:5a:ee:7a:
                    1f:aa:3c:40:76:81:fc:40:c3:7d:a3:75:7f:6c:ca:
                    11:77:bf:46:23:4b:05:66:d2:f3:4c:75:12:f8:9d:
                    73:18:e1:3f:9a:79:c2:c3:0a:69:8d:53:00:a6:0e:
                    8f:c3:35:ef:b5:fd:7d:d3:a3:ec:eb:81:f5:f5:ec:
                    3f:b3:14:b6:93:f7:c2:e7:05:7a:ff:56:a9:73:08:
                    fb:23:1d:ba:83:a5:1c:ba:52:68:ec:6b:1c:fb:d4:
                    94:8e:22:0d:bc:50:b0:f9:84:90:de:f4:b2:03:6d:
                    d9:40:07:62:ff:1c:67:53:c9:b4:e6:fe:c9:d6:b5:
                    ac:dc:72:fa:e8:4c:08:f2:ed:b8:d4:84:25:b6:45:
                    c3:d3:8d:df:df:af:81:81:ff:15:fb:84:2f:81:a0:
                    f6:b3:cf:54:cd:8e:dd:c5:44:5e:f5:71:ef:63:2d:
                    f7:2a:a4:48:db:27:fa:44:f2:0b:b1:df:fa:01:12:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EA:DF:ED:B7:74:19:10:DD:72:D5:A7:3D:80:1B:6B:10:03:5C:29
            X509v3 Authority Key Identifier:
                keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ee:c0:29:c7:1d:9a:1d:5a:5a:1a:7f:5b:b5:cd:dc:3d:de:
         78:07:99:9c:74:6f:2d:77:7b:37:b4:12:95:77:3b:9c:f5:93:
         99:cd:cc:a6:90:a0:df:63:d9:bf:93:ea:b3:fd:bb:0a:12:b5:
         9b:99:29:f7:e2:bd:32:63:7d:0a:fe:0e:a3:62:9b:13:23:ac:
         1b:11:a9:1f:f3:3a:8a:b9:06:05:87:9c:26:f2:d1:00:d9:c1:
         cc:de:0b:5b:dd:72:d9:e8:92:d9:d1:8a:5a:0c:d9:87:b6:82:
         f5:40:c8:cb:eb:e7:c6:ab:26:8c:46:c3:8e:09:f6:04:8b:c6:
         fc:cc:af:5f:54:20:2a:4c:11:ea:e5:b0:ff:3d:d5:98:a2:07:
         4a:6c:e5:1d:75:4c:7c:53:d1:78:df:db:f7:59:20:c7:d3:7c:
         77:e2:0d:58:c5:49:2b:0e:5c:f7:07:db:a5:e2:83:d7:91:30:
         c6:0b:ac:86:8a:3b:08:1c:00:b4:cd:e1:25:7c:cd:4a:24:f4:
         3d:a0:41:a7:3a:f4:1b:35:99:b3:e0:a5:40:d6:c6:d8:17:33:
         ac:d4:09:52:cb:48:ce:50:de:37:5d:25:96:24:a1:46:7a:32:
         f9:49:65:97:f5:2e:e3:51:10:03:83:d7:0e:10:32:e9:3b:ab:
         b1:85:fc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:16 2026 by rpki-client