Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File:                     C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier:          7JDmjHPbAL+hcSc6A/n0fzqBAf4gQ+U9NGc9hx1oB8w=
Subject key identifier:   26:24:84:C9:0E:4B:2C:F9:CE:5A:F0:50:FE:4B:AE:AB:11:43:14:7F
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer:       /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial:       019F189E4A68A259B10D573C4392D37D4F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number:          113C
Signing time:             Tue 30 Jun 2026 13:00:54 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:54 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:54 +0000
Files and hashes:         1: 0ZZBNy_4ZfeDGv0GZ4Y6WyBitiY.roa (hash: xrSAqsjvVj4VTaGXTAjpYZq+szPFsolHKq89Y8sv2SY=)
                          2: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: bUS1PQN3VDWQXsLAm8ulWsvOn5oyqRA26iEsge/R784=)
                          3: HlPf6jt7HgmbuEWgecuG4Sgaorc.roa (hash: j8/ocuESU17xtFvRR6K0O2U6/8pNxL5+xXsijYbdSGQ=)
                          4: JB8yx2b88cSBO2zP8HmMFflCSbQ.roa (hash: ptfoSvZpsHgOB3p1UFy4y5riUES2ZHub67bxSsiN4pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:4a:68:a2:59:b1:0d:57:3c:43:92:d3:7d:4f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
        Validity
            Not Before: Jun 30 13:00:54 2026 GMT
            Not After : Jul  1 13:00:54 2026 GMT
        Subject: CN=262484c90e4b2cf9ce5af050fe4baeab1143147f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:96:2b:fb:86:d7:89:b5:3c:37:ba:f2:7a:
                    ef:cf:b1:6a:53:c9:1e:44:3d:3d:51:e6:bf:82:6b:
                    94:1c:25:30:93:7e:01:32:c3:df:dc:73:e1:3d:b6:
                    58:f7:bf:e5:11:d3:ca:6a:7a:73:75:2f:f7:0a:15:
                    a1:fb:8f:30:73:d3:4b:a5:6c:e2:0b:0f:3a:11:fa:
                    f9:d0:8d:dc:31:9b:1b:74:7e:97:7f:23:d4:b7:1c:
                    c5:7a:c7:07:bb:3d:4a:91:bb:c1:a3:e9:94:22:9f:
                    b0:1c:25:37:d5:8c:ba:c4:9c:bd:45:b2:02:a4:f0:
                    37:3f:6a:11:ad:9a:7d:b0:bd:f4:19:b7:8b:5b:b8:
                    fc:9c:dc:27:2c:9b:7c:14:32:4b:72:d2:d1:15:b4:
                    36:8d:24:8d:d2:1e:b4:4a:a9:13:55:dc:f7:e3:30:
                    ff:92:2b:92:39:a1:9c:f6:48:92:07:b4:bc:f9:72:
                    f7:34:6a:4e:f5:6c:30:f6:62:9f:d7:2a:09:44:3c:
                    f4:23:78:d6:a5:9f:78:3b:38:68:c3:7e:ac:02:64:
                    a3:bf:85:de:e8:b9:7d:22:8d:b0:42:e3:b1:7a:73:
                    18:5e:ff:95:06:87:e5:62:79:1b:21:49:7c:14:3c:
                    25:b5:45:af:d2:db:ed:77:55:d8:df:43:b5:a8:ec:
                    2f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:24:84:C9:0E:4B:2C:F9:CE:5A:F0:50:FE:4B:AE:AB:11:43:14:7F
            X509v3 Authority Key Identifier:
                keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:6c:0b:de:39:9b:93:d0:e8:f1:34:fc:14:92:5f:26:4e:91:
         ac:5b:5d:bd:bb:6d:6a:d5:32:fc:d5:c9:1f:0f:4f:12:c5:cb:
         6c:7b:df:8a:54:0a:21:ae:a1:8a:5b:3c:fa:f3:c9:54:8f:4c:
         61:7e:3d:cb:25:1a:e7:00:4a:7a:f1:20:30:dd:53:a8:83:03:
         63:99:86:3a:f3:93:b4:b7:8a:1d:a1:58:78:05:82:1c:3b:8f:
         d0:28:1b:a0:ab:0a:ea:ff:da:5d:88:bd:08:bd:f1:0f:76:9a:
         e0:63:ba:9b:e2:d9:70:57:28:3f:e8:ee:35:62:ff:ab:70:52:
         a7:2f:49:ba:4f:db:20:d7:17:46:02:bc:d9:19:52:51:24:fe:
         de:c0:bc:d5:16:7e:e6:36:ce:2b:30:2b:82:d2:33:64:97:6c:
         d9:11:76:cc:a8:de:8d:02:7d:2a:e2:84:4b:79:88:57:a7:c7:
         21:cb:90:59:6d:2b:28:23:21:76:19:29:23:c4:8a:a2:b5:41:
         4b:b0:2f:92:f2:93:a5:2a:de:a7:f5:cd:51:f6:2c:2d:b4:82:
         77:66:18:f3:e9:41:99:83:fe:80:17:7f:ae:82:9d:0a:29:7e:
         34:f4:0b:1f:d6:fa:95:80:2e:e1:3f:46:c8:cb:c1:fc:0d:b6:
         0a:08:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:45 2026 by rpki-client