Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File:                     0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier:          rvaAh3WVZLVpvEb2dPNGVArvX9moYkobz65EmdSzi4s=
Subject key identifier:   B0:21:DB:D8:D3:51:0A:97:0D:A7:28:B6:73:5F:2B:E9:CF:50:00:C1
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer:       /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial:       019F17F99C66D08744027C46D1D48656760A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number:          0B1D
Signing time:             Tue 30 Jun 2026 10:01:02 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:02 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:02 +0000
Files and hashes:         1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: vKgT7RY3YBn2pBt8HVCbidndVlCuTBnBHfI+Aj2GJ7E=)
                          2: svbZ3xnzSZtEiOKXO_TW25acCTk.roa (hash: opv9wDSI8/zZJZrpAhEN95Q4AkFIV4SP2QjFUJ853yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:9c:66:d0:87:44:02:7c:46:d1:d4:86:56:76:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
        Validity
            Not Before: Jun 30 10:01:02 2026 GMT
            Not After : Jul  1 10:01:02 2026 GMT
        Subject: CN=b021dbd8d3510a970da728b6735f2be9cf5000c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:49:66:38:15:d6:14:a4:7e:34:f3:e3:24:
                    91:dd:58:b9:48:4e:7b:30:6c:4f:b7:2a:46:3f:c5:
                    d0:ce:34:90:48:92:37:c7:a6:d6:22:03:27:97:2e:
                    6d:5d:28:f7:d2:0b:37:74:ac:c6:70:38:d3:91:1a:
                    48:1e:93:b6:7d:73:12:20:61:ab:65:9d:56:fd:ef:
                    3b:9f:a5:55:ac:68:d4:64:20:86:ff:d8:ca:8d:a2:
                    43:16:06:1f:12:0c:cf:7e:36:62:a0:69:e6:54:25:
                    86:9f:d2:b9:12:af:90:ad:bc:6f:9b:fb:fd:a6:7a:
                    40:2e:12:e8:90:d6:e3:0f:40:b2:a5:99:1d:25:eb:
                    84:19:49:26:99:41:35:be:12:26:29:39:1d:c7:ce:
                    00:e7:3f:f3:98:48:0a:ee:4c:ce:79:53:90:83:7a:
                    65:d8:31:52:0e:14:fb:c3:3e:54:26:02:98:aa:52:
                    46:90:48:8e:a1:9c:a1:83:23:e4:e6:e5:b8:56:f8:
                    86:aa:cb:0a:31:b1:2a:26:47:6d:61:41:08:32:ee:
                    a8:f0:ae:52:69:8d:d7:18:4d:eb:94:ec:6e:d7:97:
                    b6:3b:aa:a6:a2:5c:23:83:bf:1c:49:87:d2:88:4e:
                    ee:54:c0:f4:8f:b9:ba:5a:27:41:83:b8:ba:9d:29:
                    5c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:21:DB:D8:D3:51:0A:97:0D:A7:28:B6:73:5F:2B:E9:CF:50:00:C1
            X509v3 Authority Key Identifier:
                keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:01:9a:4d:53:2a:2b:25:dc:c3:89:2f:17:7b:91:76:21:5c:
         e8:dd:e3:3f:a4:97:c9:77:db:73:d9:ee:f9:b7:f0:04:7e:b4:
         26:5f:0f:07:28:9e:d8:73:b5:9a:2c:ea:fc:5d:77:c9:8f:28:
         fa:ae:7b:30:a3:94:8f:ed:4e:de:5e:ff:da:58:f6:f3:12:b4:
         1f:b4:3e:dc:ab:8f:2e:89:c3:23:61:ec:68:90:a4:df:5e:54:
         dd:2a:a4:9a:bd:74:4d:77:8f:a7:35:24:7a:c4:32:bd:2c:fc:
         7f:5d:9a:fc:a8:88:a3:5b:8a:8d:9d:fd:70:f9:3c:ca:42:fd:
         fc:1a:a0:e3:41:b8:02:e0:25:5a:a1:38:05:45:45:4a:25:86:
         80:83:26:fe:3c:49:89:45:40:2c:6f:e0:73:e5:a4:f7:ec:47:
         f4:5e:d9:a7:8b:fc:2a:fc:cd:9b:cf:af:73:b9:96:51:32:bd:
         3f:0e:83:2a:47:f0:d8:a7:f8:93:6b:f7:9f:fc:97:14:4b:e4:
         73:13:1e:1c:0c:5b:55:ce:86:07:a3:13:ff:cc:61:c8:ef:e0:
         65:1f:ac:27:e6:27:b9:64:d3:c2:e0:ba:9c:cc:52:a1:7b:35:
         21:a0:30:51:60:30:bf:f0:24:76:5a:ed:06:f1:b2:56:bd:70:
         e5:0a:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:43 2026 by rpki-client