Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
File:                     Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json)
Hash identifier:          GxVA23q9NZhX54Fir0vTnQKsuWAIJnuDyA7WUJYQso4=
Subject key identifier:   EA:0A:30:D8:40:29:31:D7:8E:4A:03:AE:20:8D:A8:40:B1:1E:BB:0F
Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D
Certificate issuer:       /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
Certificate serial:       019EB8460A681E949D159399FDF1BAEDCCDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
Manifest number:          0E9B
Signing time:             Thu 11 Jun 2026 20:00:58 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:58 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:58 +0000
Files and hashes:         1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: Tlf2+zycXYqFgnbYhddS1zs1tei5ta3jIuFZsAmMhVM=)
                          2: b6SrHt5Rox7Gz0mFIlCgOGxY0-c.roa (hash: HGRxKRl+EVaZgrGClx+TSy5HdfcfRc78fy6SCMHEA/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:46:0a:68:1e:94:9d:15:93:99:fd:f1:ba:ed:cc:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d
        Validity
            Not Before: Jun 11 20:00:58 2026 GMT
            Not After : Jun 12 20:00:58 2026 GMT
        Subject: CN=ea0a30d8402931d78e4a03ae208da840b11ebb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:b6:1d:d4:af:1d:a8:2a:2d:e3:79:d3:b0:
                    62:83:89:08:b5:87:6c:36:62:77:74:7c:bb:80:03:
                    1d:53:7a:26:d0:ac:2b:49:26:44:bf:02:67:35:fc:
                    c6:d1:a5:95:46:fd:dd:88:70:30:4d:b2:99:40:7b:
                    a5:d1:5f:54:e7:fe:aa:1e:79:51:9c:16:27:62:8f:
                    7c:12:3b:cc:f7:f4:33:b6:39:8e:75:dc:d9:70:57:
                    d3:da:4d:38:9f:ab:77:10:fa:d2:42:b6:ea:5f:8e:
                    2a:ce:9e:d9:f6:ef:7f:73:f8:a1:cd:db:30:6e:24:
                    08:fc:79:8c:b3:7c:14:24:d6:39:8c:85:7b:11:39:
                    4d:ff:5f:70:19:92:9e:24:a5:63:60:eb:06:d0:9c:
                    07:81:5d:57:d2:6d:6d:a5:33:dd:57:c4:46:4e:4d:
                    46:01:48:4b:fd:0d:15:e4:5c:98:07:bd:90:d1:04:
                    dd:0f:65:bc:4c:01:0e:e4:5a:0c:0d:3f:c5:74:ed:
                    52:29:d4:64:fe:6e:fc:40:d7:b2:0a:d3:9d:be:44:
                    c1:69:99:e3:e5:aa:d5:79:c1:f6:9d:d5:9e:81:8a:
                    a8:9f:6e:45:5a:48:a1:65:0c:eb:89:43:98:f4:01:
                    94:e8:ac:f1:66:64:39:ab:ab:bb:d9:d7:6a:e3:3c:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0A:30:D8:40:29:31:D7:8E:4A:03:AE:20:8D:A8:40:B1:1E:BB:0F
            X509v3 Authority Key Identifier:
                keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0e:37:ca:98:da:f4:47:35:7f:46:90:74:ff:a7:a5:3c:e6:
         1e:5a:5e:bf:39:3b:b0:a8:0f:c5:24:0b:55:a8:91:e1:1b:9e:
         47:15:fa:96:3d:c5:97:ca:44:2c:64:12:77:a4:55:55:5b:c2:
         2a:5a:65:ed:79:b9:5f:5b:3f:e2:24:54:16:9b:71:ea:40:bc:
         f2:3c:68:52:75:81:92:a6:cb:fd:db:60:69:e8:ed:07:4c:97:
         88:8c:1a:96:f6:1a:ad:4d:93:c9:29:ba:11:fd:93:c8:81:d6:
         60:97:89:69:34:bb:79:95:ae:45:4a:b6:24:3b:1f:32:54:87:
         70:b5:49:a0:22:b8:09:1f:a3:1f:31:f1:b1:3d:0b:5a:c4:a3:
         21:44:f0:4b:b1:9d:08:f6:ac:9c:9e:5c:ab:ea:b9:09:bd:45:
         f6:d6:48:45:bf:80:a8:aa:e4:e8:1f:c9:f2:5c:97:20:97:6b:
         04:33:0b:71:04:3f:ae:6e:dc:25:09:81:4c:dd:4e:1b:37:ad:
         11:d4:e2:6f:fd:f1:30:9d:e7:c6:8e:ff:f1:e2:32:c3:57:f1:
         07:8a:11:d3:1f:29:54:0f:42:44:d3:be:c4:f8:05:10:08:1c:
         49:58:ab:57:06:3c:29:be:3b:ca:ba:1a:8f:07:b2:f4:55:af:
         96:45:19:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:33:52 2026 by rpki-client