Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File:                     8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier:          k7OTdVxIm68kmtePCElVPsVsEMpMRxmm4o5H6Opzel8=
Subject key identifier:   A5:D4:30:AF:57:26:EC:D1:30:BE:80:3C:7A:5C:74:E2:85:1C:98:E8
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer:       /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial:       019F12658F521F30D3D4E28925902E2886DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number:          13BD
Signing time:             Mon 29 Jun 2026 08:01:13 +0000
Manifest this update:     Mon 29 Jun 2026 08:01:13 +0000
Manifest next update:     Tue 30 Jun 2026 08:01:13 +0000
Files and hashes:         1: 3f7sN_W1BMqH2bAJDrYmekJsJtY.roa (hash: 1cW9ojab+mnjJYb+u24Z5r0k3W5TZOEjLnBbQc0hNSE=)
                          2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: gscgLH3AJq9j4AqYpu8r2YTof6d2MP8D7Ni5YLrKMWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:8f:52:1f:30:d3:d4:e2:89:25:90:2e:28:86:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
        Validity
            Not Before: Jun 29 08:01:13 2026 GMT
            Not After : Jun 30 08:01:13 2026 GMT
        Subject: CN=a5d430af5726ecd130be803c7a5c74e2851c98e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:77:a3:02:42:53:d0:83:f1:a3:f9:45:50:
                    40:d2:36:69:d3:58:a3:d9:ce:59:73:b6:47:9e:a7:
                    65:38:3c:45:7e:f0:90:1e:50:4d:74:43:f4:82:41:
                    93:a5:c2:03:0d:ed:c4:d3:62:ed:1e:77:dc:1f:60:
                    ee:4a:95:db:82:f5:c8:0d:71:e3:ea:07:4f:71:bb:
                    1c:47:99:5a:e4:51:3a:a7:08:c4:f0:6a:91:83:13:
                    10:03:7a:65:bb:ca:c2:f5:4f:41:90:a1:20:a6:c9:
                    4d:4a:04:00:44:69:9f:f4:45:9c:ff:03:53:05:3c:
                    55:84:3f:96:19:b2:f7:86:e5:a3:9b:2f:1f:3e:12:
                    b3:ae:95:f8:dc:97:9e:6e:16:e5:83:b9:65:19:82:
                    3b:06:46:2b:ff:a0:68:f9:17:0a:f7:e4:13:15:39:
                    0d:28:9d:27:3c:82:32:22:e8:7b:c3:4d:66:5d:1b:
                    99:e0:3f:1a:03:5b:88:81:23:d6:56:6e:75:ab:34:
                    90:25:67:b6:e3:96:5e:70:75:1e:37:34:88:a7:1e:
                    46:25:2b:2b:17:0f:5c:c4:ee:01:1c:d5:d8:bb:69:
                    cf:22:e7:70:e2:29:fa:af:26:e6:28:db:43:ad:09:
                    66:76:7f:2b:fc:bd:05:45:a3:33:e1:e5:6d:cf:88:
                    4f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:30:AF:57:26:EC:D1:30:BE:80:3C:7A:5C:74:E2:85:1C:98:E8
            X509v3 Authority Key Identifier:
                keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:ae:02:ef:f0:71:f6:a7:24:d0:c5:83:dc:04:b0:cc:4f:
         56:79:b2:5e:a1:be:a9:da:19:e8:c7:99:95:cf:9c:a4:6d:72:
         0b:5b:8b:38:e0:c2:00:4c:5a:23:b8:e1:76:28:0c:71:bc:df:
         94:d8:4d:55:b8:8b:17:9b:da:d0:86:fe:ab:e6:8b:b9:2b:22:
         e8:a1:f7:30:51:54:84:c5:f2:d6:00:bd:4a:c7:95:58:e7:1b:
         84:d0:71:63:4c:67:a4:26:20:83:4d:13:c2:f5:5b:d0:eb:8a:
         a2:e5:2e:5a:d0:ad:fa:df:19:fc:9c:29:98:0d:17:f0:8b:02:
         2e:15:74:b7:d8:24:08:11:5d:21:33:3a:4f:10:e3:21:4d:f9:
         0c:8f:f1:14:66:ab:aa:af:3f:ef:b1:17:c4:d9:30:7e:68:44:
         ea:e8:4f:9a:af:79:be:69:83:21:04:56:94:0f:b9:c6:5f:ec:
         dd:92:aa:81:35:ea:20:5e:8b:45:39:2a:72:98:c8:80:7c:9e:
         15:9a:e6:2e:e5:74:83:42:89:b4:39:3e:e8:29:ac:7b:fb:e3:
         11:c7:1e:71:3c:30:76:5a:99:04:cb:e0:7f:b6:27:c8:84:fc:
         cb:82:6f:8d:0c:04:a5:b4:7a:bf:c7:9d:ea:bc:97:19:c7:38:
         d7:2b:fe:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:28:03 2026 by rpki-client