Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
File:                     gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json)
Hash identifier:          XpDSi83Kp9meSa192bj7ycI05Goauvp0EmWj0qtmaMo=
Subject key identifier:   90:F6:17:97:07:B3:AC:BE:C0:3A:55:0D:08:4C:2B:91:E0:75:E4:C2
Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0
Certificate issuer:       /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
Certificate serial:       019EB61E2E5D7F39C27242B5B65F41B09B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
Manifest number:          134E
Signing time:             Thu 11 Jun 2026 09:58:11 +0000
Manifest this update:     Thu 11 Jun 2026 09:58:11 +0000
Manifest next update:     Fri 12 Jun 2026 09:58:11 +0000
Files and hashes:         1: 5eB4htWyGJDJwj6zhgzJLbW_4Rs.asa (hash: AMkYMX4Ub8J6QzakBaQUECXSyVGj24SQ4egirOIAq6E=)
                          2: Uhdd2LHjn5iOA9Ff6w9g0pvCay0.roa (hash: GWSvUjVdu1UDo6lvgspGXIRNDtNx+fESVlxZbXeFX7g=)
                          3: dUaacGCz13O8mwDRkLQ5vwgXcZw.roa (hash: 7Istxql6dso4eiRf+0awNNeqAEJpy1igpjA10pd+/TM=)
                          4: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: syFD/ttONxg6oHC4Q3/UpvsHMl/KyXhBuBie6Hq6p4U=)
                          5: lnH9C7HQoo7yeYbE56WHSLlD_TE.asa (hash: V5rxGHK5REBBYrckeqobdcgc6TTvp3rfULd5M0m28N0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 09:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:1e:2e:5d:7f:39:c2:72:42:b5:b6:5f:41:b0:9b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0
        Validity
            Not Before: Jun 11 09:58:11 2026 GMT
            Not After : Jun 12 09:58:11 2026 GMT
        Subject: CN=90f6179707b3acbec03a550d084c2b91e075e4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:2b:84:5b:66:e2:23:66:06:30:76:1d:ea:
                    05:e5:18:96:94:aa:a4:b7:f6:dc:4e:cf:84:8e:27:
                    88:30:f2:17:d6:b7:a2:a2:44:38:31:f3:ab:e3:30:
                    f1:f4:3d:dc:9a:9a:b0:e1:b2:ea:62:21:82:24:9c:
                    f5:59:66:db:99:6d:01:ad:25:bf:05:c5:cf:a9:61:
                    87:62:5c:10:4e:de:87:ae:6d:fe:32:bf:4c:76:66:
                    35:07:b9:e4:f0:8b:3c:09:8c:7b:34:92:c3:4c:0c:
                    70:10:00:2e:fc:c8:d5:26:b0:88:12:d2:1d:a8:30:
                    8b:6b:38:b6:9a:0d:0a:2c:ce:22:b6:c8:61:59:f2:
                    71:96:21:76:bd:39:f2:9a:8b:a1:eb:d6:9b:46:2e:
                    d0:42:8c:8c:de:bb:5c:b9:79:85:88:fa:07:93:03:
                    24:58:3a:36:e8:d0:7a:b0:d5:07:ec:34:9c:7b:45:
                    db:aa:52:a0:8e:2e:53:6a:39:7b:37:82:dd:dd:0f:
                    b9:8e:ef:ad:a0:27:25:c2:8d:e1:12:7f:15:a0:37:
                    ca:d9:e0:4e:96:2d:c6:d4:39:cb:91:c7:13:a7:21:
                    09:9c:95:74:8d:ea:cb:f6:55:6d:76:05:83:78:23:
                    2e:a8:71:3e:85:24:d3:88:46:55:e8:97:c0:76:66:
                    46:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F6:17:97:07:B3:AC:BE:C0:3A:55:0D:08:4C:2B:91:E0:75:E4:C2
            X509v3 Authority Key Identifier:
                keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:72:ab:d5:af:22:51:8f:c9:30:4a:4f:2c:29:9b:1e:15:cd:
         5a:88:38:08:76:67:a9:65:27:49:21:96:fe:2d:e6:d2:93:23:
         00:0a:da:a0:ab:e8:f2:0e:1a:d6:6c:35:0a:a9:16:41:82:0b:
         4e:29:9c:13:a9:6c:ac:10:71:7c:ca:16:0e:4c:38:89:7b:ba:
         7a:a3:a8:9b:2c:37:c4:1e:c7:b5:5e:59:69:ca:68:6d:6d:e3:
         2f:1c:2e:18:90:ce:7c:9e:e2:8f:c2:f0:5f:82:29:1c:de:4a:
         33:a0:d2:ef:ca:4a:cf:4d:59:a2:a9:0f:c8:f0:9e:bb:42:ac:
         cf:f4:59:af:60:11:78:c9:b4:87:e3:4c:42:d0:9b:81:a1:ad:
         bd:4e:e9:15:da:b6:54:96:e4:92:23:b8:d4:a4:da:da:ee:91:
         ce:d1:d6:79:9c:87:c5:1a:d7:9b:ed:e3:89:8c:48:e1:c7:26:
         a2:95:23:e0:76:32:88:82:1b:77:c7:8a:c8:9a:64:21:2e:df:
         14:4f:bb:8e:59:9a:23:8d:0a:cf:b4:b0:e5:56:30:f0:39:86:
         68:a2:00:52:25:b2:e7:0b:69:22:0e:16:0c:db:40:87:cf:32:
         ee:f0:92:6f:fc:52:9e:cb:77:31:d7:f5:a0:81:28:09:02:45:
         02:53:0d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:20 2026 by rpki-client