Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File:                     fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier:          mNyERxKmZ73B280l6Ub9YI9j9cdMHjAVcxBmcjjkuxE=
Subject key identifier:   E9:5E:80:05:D5:DB:10:6E:51:16:CE:DA:D0:F7:74:10:61:D7:6B:18
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer:       /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial:       019EB87CCFD37D360D2C5F2CA8EE16AABACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number:          090C
Signing time:             Thu 11 Jun 2026 21:00:47 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:47 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:47 +0000
Files and hashes:         1: JuhHdC_-wskYknvP7LIY1ggd8So.roa (hash: Qx3w+8OYL4pNm6xzXbZj9QOdHwp0WRkNESd9pe1uoik=)
                          2: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: pUcSg6cjhQOCMZRjsvxnsWnxjMNeKtiIt0hXduAvdDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:cf:d3:7d:36:0d:2c:5f:2c:a8:ee:16:aa:ba:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
        Validity
            Not Before: Jun 11 21:00:47 2026 GMT
            Not After : Jun 12 21:00:47 2026 GMT
        Subject: CN=e95e8005d5db106e5116cedad0f7741061d76b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:b2:6b:7d:f8:5b:80:65:72:8b:2e:b6:60:
                    e6:72:c3:da:48:cb:17:81:2e:e0:9f:29:45:35:9a:
                    ed:fa:cc:a8:5d:7f:1f:10:fc:3c:16:2d:fe:1a:7a:
                    ce:d1:cb:64:ad:0b:e5:64:96:c9:75:a9:39:51:12:
                    90:64:6c:21:1f:4e:96:00:5f:28:28:ec:9b:18:fb:
                    48:6c:3d:09:10:68:35:12:7e:19:38:63:6c:69:c4:
                    b6:53:9a:de:a0:07:fe:13:c2:6b:44:e7:3a:9a:50:
                    92:f3:54:48:26:a7:94:0d:04:dc:4b:b9:bf:6c:d9:
                    ff:c4:95:a5:e0:ae:6b:22:c1:a8:87:8c:0c:88:a0:
                    93:88:e1:a5:e5:57:b7:83:79:68:5c:87:f8:3d:1c:
                    b1:86:53:7b:ce:bb:30:39:d8:e3:b4:31:1b:9f:f4:
                    f0:fb:3b:96:00:ef:f7:ee:49:f7:07:f3:17:55:63:
                    d1:4e:ee:47:a6:26:08:76:ec:4c:33:82:c4:09:42:
                    b1:45:c2:ae:e8:17:97:35:82:8e:47:00:47:bf:75:
                    41:76:7f:0d:bc:d5:e2:64:bc:66:16:7f:59:66:1e:
                    c8:b8:88:92:f5:32:75:2e:23:f2:0d:11:89:f9:5f:
                    fc:5e:c2:4a:0e:3c:30:e7:a4:0a:b9:f2:e9:0f:0a:
                    d6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5E:80:05:D5:DB:10:6E:51:16:CE:DA:D0:F7:74:10:61:D7:6B:18
            X509v3 Authority Key Identifier:
                keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:cc:a8:ce:c9:c1:ce:82:8f:bf:3b:06:a9:b4:19:8b:b2:
         23:da:bb:03:7a:75:30:be:fc:cc:4a:11:59:7a:b4:d4:52:c9:
         b1:b5:51:42:2f:29:72:50:e1:c2:ea:d9:c6:ea:57:97:01:c8:
         70:9f:ce:9d:93:10:96:81:ff:5f:7a:ce:e8:29:c3:24:96:19:
         10:b0:94:a4:60:9a:39:b8:59:b7:be:d0:22:b2:c7:2b:ee:f5:
         e5:ba:1a:30:f5:ac:65:df:ae:b1:71:3f:c0:c9:8d:70:81:a4:
         0b:60:a1:90:e2:e0:6c:ea:20:7a:56:aa:f5:f6:d2:42:3d:83:
         ee:a1:40:37:0a:c6:4d:72:41:89:5d:4b:13:28:77:1d:b3:37:
         3d:2c:61:cb:9c:cb:0e:50:a5:06:4f:d5:17:f5:36:e5:66:5b:
         55:eb:98:29:53:32:ac:80:ae:b9:48:cb:be:35:d3:cc:7b:56:
         0a:27:63:eb:1d:72:3d:16:b8:f5:4d:96:09:3c:db:6d:99:e1:
         52:1a:bf:85:84:28:2a:23:de:df:19:29:13:06:6d:5c:17:d0:
         03:f1:2e:4b:02:03:68:88:19:c1:c1:77:d9:9e:05:82:75:b3:
         a0:0a:02:6a:2f:5c:35:10:4a:b4:29:59:44:0a:3e:24:31:ae:
         08:b2:6b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:26:08 2026 by rpki-client