Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
File:                     7osnkE0RvPU2d01UFUIILPr-jqo.mft (raw, json)
Hash identifier:          YDyqFDH21NGIcXv2c6/XIirF/fGnrctAedDd0V3R5qI=
Subject key identifier:   9C:09:D6:E7:47:2A:5F:59:F7:60:4A:EA:C4:1A:EE:B3:C2:15:21:13
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Certificate issuer:       /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial:       019EB9582845AD2E94EB920528B5C59A70F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
Manifest number:          0D65
Signing time:             Fri 12 Jun 2026 01:00:22 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:22 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:22 +0000
Files and hashes:         1: 7osnkE0RvPU2d01UFUIILPr-jqo.crl (hash: wfEkeV4hj2Ur2aiL2aMKHh0JfLCZd1UN6cidhdjPN/I=)
                          2: BLLh5nNCz1s5if2pHYByIfYWqoE.roa (hash: EPJ+RLaqu85xGvwiEKDRnHSjYD9ruTYxv3tR7VjbDJs=)
                          3: E7Yzs4RQ5PAWanrzJaRetL_vIW4.roa (hash: ZfDaAmo4Ze/Cj58O8IkcEHyg6puoaRdc7XWQV2TfV6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:28:45:ad:2e:94:eb:92:05:28:b5:c5:9a:70:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
        Validity
            Not Before: Jun 12 01:00:22 2026 GMT
            Not After : Jun 13 01:00:22 2026 GMT
        Subject: CN=9c09d6e7472a5f59f7604aeac41aeeb3c2152113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:da:eb:18:75:1b:21:36:b0:95:f3:2e:d8:
                    83:58:92:2d:38:99:73:bb:d0:23:4e:2e:bb:7c:c6:
                    92:9a:85:a0:e7:96:f5:30:52:60:75:76:a0:84:75:
                    d4:3d:ca:11:36:de:24:7d:97:1d:50:1d:76:83:c2:
                    57:c8:17:5a:54:2e:94:61:aa:5c:cf:7a:98:b8:39:
                    fa:8f:e3:5a:f6:f8:f2:0d:4c:0e:a1:4c:57:ee:20:
                    44:a2:e1:e8:50:16:9a:27:f1:86:45:1b:a1:75:fa:
                    7d:13:c0:61:fd:97:e8:44:6e:02:50:23:5b:5b:43:
                    dc:49:66:60:51:cc:ee:0b:61:a1:3d:ee:33:31:83:
                    d8:60:03:b6:e6:7f:c9:ca:af:4f:fc:94:a2:63:e8:
                    ef:a6:5a:f3:5c:5f:77:63:78:4a:f2:fc:5f:e6:a1:
                    91:db:f9:17:2a:c2:3d:a0:10:ce:04:10:e6:89:64:
                    19:28:17:e1:ef:9b:a5:d6:ac:e9:8f:10:e6:56:67:
                    ae:48:ad:a8:24:42:f1:c3:59:8f:14:9b:97:42:d6:
                    b7:1c:58:68:51:1d:38:2f:38:c1:b9:ee:4e:53:0b:
                    fa:85:a6:01:b9:30:b5:66:c3:42:62:5c:44:6a:f1:
                    8a:43:16:d6:c3:3e:4c:91:3a:a6:9c:a2:e8:75:75:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:09:D6:E7:47:2A:5F:59:F7:60:4A:EA:C4:1A:EE:B3:C2:15:21:13
            X509v3 Authority Key Identifier:
                keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:26:bd:05:06:d5:df:fc:3b:65:90:46:61:cc:31:ef:94:
         06:15:ba:6f:1f:cd:c3:f5:f9:62:5f:a0:88:74:80:92:dd:a4:
         61:b2:7e:72:0f:c5:43:3f:0f:26:4a:13:e1:1a:ec:ca:9d:8a:
         8c:42:2d:2d:ca:7f:68:22:ac:8e:a9:d6:a5:e0:e2:da:ce:b8:
         5d:5b:a1:66:d8:90:eb:77:b3:60:8c:8c:ff:fc:4c:2b:a2:14:
         49:0b:43:e7:71:85:be:99:c9:b5:42:e6:a4:70:4c:09:0f:50:
         6f:97:78:27:66:ca:d3:d6:ed:9d:6f:97:33:0b:c5:8a:80:0b:
         4b:1c:35:fa:b1:ed:55:e5:bb:b3:ef:9c:dc:a8:bd:a1:03:dd:
         3c:69:04:c4:aa:52:92:48:f6:ac:5f:16:26:ae:a9:0f:7b:d4:
         e5:02:81:f0:9b:39:e3:60:b9:bd:44:dd:bd:a6:21:d5:10:5d:
         62:37:80:b9:a3:3d:23:11:45:43:83:b9:15:0a:d7:78:01:2b:
         21:f5:57:0c:fa:19:63:f1:11:57:47:71:e3:41:fd:ee:c8:89:
         22:d3:75:67:c5:70:79:a8:88:cf:ff:e0:ef:58:a3:3f:b4:60:
         18:2b:79:e1:41:15:61:f8:bf:c8:cf:5d:51:1b:ad:2b:33:bf:
         65:9a:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:49 2026 by rpki-client