Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File:                     o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier:          CabYYRIieajDEnkAAd/0YmvZPum5Xo0Lups60fhkgsQ=
Subject key identifier:   9A:70:DF:9D:A5:BD:4F:55:D9:4D:FB:EF:1C:71:89:47:85:29:5B:76
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer:       /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial:       019EC7EF818067ADB3FFC2CB1D02AB457640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number:          0E93
Signing time:             Sun 14 Jun 2026 21:00:22 +0000
Manifest this update:     Sun 14 Jun 2026 21:00:22 +0000
Manifest next update:     Mon 15 Jun 2026 21:00:22 +0000
Files and hashes:         1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=)
                          2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: IHCiQXxDZOzOrs61cCfNT2C9bkl5KvA8mcg/MnGM/8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c7:ef:81:80:67:ad:b3:ff:c2:cb:1d:02:ab:45:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
        Validity
            Not Before: Jun 14 21:00:22 2026 GMT
            Not After : Jun 15 21:00:22 2026 GMT
        Subject: CN=9a70df9da5bd4f55d94dfbef1c71894785295b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:51:ea:fe:93:e0:fe:c5:5c:56:7e:da:85:
                    5a:32:33:69:d4:e1:ac:fb:13:15:e7:19:36:52:52:
                    bf:1e:e5:9f:51:38:74:3c:48:1b:1c:1c:1e:c7:b9:
                    2e:6c:c9:6b:bf:87:0b:62:34:32:4e:19:e6:39:6d:
                    c6:4c:20:b1:74:63:a1:ce:f9:df:3f:bd:09:74:3a:
                    5a:2a:83:9c:13:51:fd:99:8d:87:c5:bc:65:e2:ad:
                    1f:f0:10:93:e3:5c:db:eb:0d:2f:37:99:e7:6c:d5:
                    d2:38:4e:6e:25:2d:02:66:3d:c3:54:3b:86:75:a1:
                    88:ca:57:29:05:e8:72:73:fe:86:00:72:4e:4f:49:
                    b3:82:03:08:3f:8e:c5:00:00:bb:ca:e1:69:be:d3:
                    2b:4d:2d:42:50:a1:c8:31:4c:bf:ef:8e:8e:f1:19:
                    76:0a:a9:5f:5a:fd:32:94:32:2a:ff:73:f8:a9:ac:
                    10:c7:95:46:56:4e:49:99:ca:c9:a9:d0:3b:5e:71:
                    11:e1:f6:f9:d6:94:12:bc:09:f1:4a:7d:f5:0a:aa:
                    37:b5:49:3a:a5:0c:2f:56:68:1a:f7:59:72:8e:6b:
                    74:d6:da:1f:95:03:1e:f3:71:2a:a3:1b:82:ad:e0:
                    d5:e5:09:1d:f0:64:11:89:19:54:5a:99:8d:62:fd:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:70:DF:9D:A5:BD:4F:55:D9:4D:FB:EF:1C:71:89:47:85:29:5B:76
            X509v3 Authority Key Identifier:
                keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:bb:ad:85:9f:27:8e:10:cb:c2:3b:fe:91:11:c1:d1:f6:6f:
         ea:51:f6:a4:5c:e4:6e:e4:56:27:82:cc:78:7f:66:ea:a4:4f:
         ed:f0:fc:82:e1:a0:0b:ee:48:78:ee:8b:d9:84:05:b7:af:2c:
         fe:5d:b6:01:8a:a6:67:d0:48:61:08:5c:0d:d9:1b:73:75:b4:
         48:7c:a1:ef:45:7a:d1:07:49:72:b4:46:69:d4:25:36:17:f4:
         fd:51:61:7a:7a:e9:14:72:01:7c:64:9a:cc:08:b3:2f:bb:77:
         da:76:6b:06:e2:4a:92:71:95:ba:21:8d:ad:a3:a7:ec:cc:1a:
         23:54:51:04:9f:03:fc:82:78:24:39:3f:ea:6a:a8:52:52:d6:
         28:b9:5c:66:c5:8f:2c:49:d2:75:e2:cd:25:3a:0c:f2:e3:53:
         b6:01:72:fe:1e:53:3f:4a:77:a7:6d:94:24:82:a0:8b:91:13:
         b8:e5:ea:cc:4a:eb:43:3d:89:5e:79:d8:03:9a:c0:09:a2:b9:
         3f:8d:8c:08:0f:65:64:35:c7:ee:bd:f0:e0:37:c6:1c:03:e0:
         ef:47:7c:c7:8c:6f:3c:bc:fe:71:74:20:60:e7:b5:8b:06:c3:
         c5:8e:19:45:88:aa:eb:95:18:51:ec:47:37:d9:d3:0b:aa:cb:
         b8:bb:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 07:40:02 2026 by rpki-client