Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
File:                     0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json)
Hash identifier:          n6seoIsH77l7ZKKmtjPnhopVIkc630kYOhA5CvZLnMw=
Subject key identifier:   20:3C:8E:71:1C:73:A4:8C:61:CE:09:42:D7:87:D2:88:F6:83:60:17
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Certificate issuer:       /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial:       019F190C64010103D46C560A6CA777B44E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
Manifest number:          08BE
Signing time:             Tue 30 Jun 2026 15:01:09 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:09 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:09 +0000
Files and hashes:         1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: HoGRGGd1i73QNm8nDo2/0mMJeG1tV64OmuipoToXGzI=)
                          2: BYWS08eTtraOfHT_fVMPk7guHlM.roa (hash: 6Kz4FXMCjQe6WKeTUwsv4um5M7VGGcIVhgjpiTRZk6E=)
                          3: PiwQrJXVrX4qSCMDoPit1fwGxYw.roa (hash: maZooA2YaSXCCk76FIXDQQ5gHOUIoguMUZYt68Zbq38=)
                          4: XlbisSjtE0VEsvYZfBE1a7SwnPo.roa (hash: ywquchTaiRzJ9EyzBmBuS7GF3u7LPVkY7qatrsHV8Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:64:01:01:03:d4:6c:56:0a:6c:a7:77:b4:4e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
        Validity
            Not Before: Jun 30 15:01:09 2026 GMT
            Not After : Jul  1 15:01:09 2026 GMT
        Subject: CN=203c8e711c73a48c61ce0942d787d288f6836017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:49:8a:5c:60:fa:08:67:19:bc:12:0d:ca:
                    7b:98:79:42:19:75:4d:11:0b:7c:36:98:ba:a7:3a:
                    bb:22:4c:38:18:44:eb:35:87:ca:57:a9:16:09:97:
                    fe:9e:e2:a9:d5:b6:84:45:ea:9d:d9:1e:cd:ac:e4:
                    04:5d:53:0e:70:03:c7:59:93:01:66:e5:18:94:84:
                    7c:b6:99:a9:74:94:46:e2:ea:74:48:b6:fc:b2:13:
                    71:33:1e:df:4f:f4:ff:1f:a9:a6:bb:a8:3b:b6:09:
                    56:8e:7f:e5:30:6d:83:04:a9:95:70:68:6e:21:bc:
                    a5:7b:05:3e:f1:24:77:02:78:c7:05:2e:8f:f2:09:
                    5c:a6:8a:c7:9e:4b:c4:7a:05:c2:31:84:0c:13:9c:
                    b3:82:dd:36:e7:13:22:73:9c:eb:07:26:95:d6:a2:
                    71:0c:14:68:a1:82:bc:9c:f4:bc:8c:cb:90:31:d2:
                    27:8f:8d:7d:c1:9e:70:a1:54:fe:1a:62:56:bb:34:
                    d0:63:03:ff:16:a0:e2:5d:5a:37:ae:ae:5e:39:f6:
                    61:17:72:87:6e:95:1a:96:1f:01:d7:99:51:e9:4b:
                    95:f9:d5:89:4d:ae:f7:bb:60:d6:a2:a1:cb:8d:c7:
                    8c:6f:ae:4d:04:b4:57:74:76:e6:9b:3d:33:a7:da:
                    9f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3C:8E:71:1C:73:A4:8C:61:CE:09:42:D7:87:D2:88:F6:83:60:17
            X509v3 Authority Key Identifier:
                keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:bb:09:32:2b:8c:bb:5d:ca:40:13:32:c0:bd:e5:89:09:
         82:54:f8:67:30:ec:1d:32:e0:c7:8b:29:b5:fd:a0:9a:90:0e:
         43:33:17:62:54:1a:c0:05:2c:c2:19:1f:43:ea:0a:0c:c3:43:
         bd:a0:d8:f0:74:55:6e:89:fb:6d:5c:42:c1:85:53:7f:8a:47:
         2f:33:9e:c4:2e:58:91:4d:52:7f:ee:ea:17:04:2d:a5:0e:1c:
         ae:f2:03:f7:5b:dd:d0:80:84:60:a8:31:16:c6:3b:75:61:87:
         5a:df:99:ef:49:84:44:7f:cb:66:40:3a:28:1d:91:06:3f:00:
         18:a2:6b:58:7e:48:0c:1d:9a:87:8d:4f:d3:26:85:7b:27:a4:
         43:33:cd:aa:e2:13:9e:4a:ae:ee:12:7a:90:de:5a:46:24:bc:
         bf:8c:68:5e:99:29:e3:5e:c3:3d:79:e0:28:90:92:87:db:3d:
         74:2b:bc:32:a9:98:fa:a6:2f:44:60:60:e5:f6:2d:d5:ad:43:
         d5:f3:b2:b0:07:04:50:21:eb:7f:4e:cd:50:b2:52:e3:a4:bb:
         29:18:7a:b2:13:14:e1:1c:a2:4f:6a:a8:2b:f9:d9:0f:b6:b4:
         5e:f8:00:68:a5:70:e1:1a:9d:1c:86:72:d0:1b:a1:a5:ed:84:
         c0:db:c9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:15 2026 by rpki-client