Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File:                     rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier:          Gkb0jQRC5LH7/k6GZnI5kn+5c7U/hLwbEv8AVOmYzSQ=
Subject key identifier:   46:37:16:0B:DB:55:87:1D:92:42:A1:24:DF:BC:C5:A5:88:90:8F:90
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer:       /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial:       019EE47A44DFFC25D148F2DCD1AAA18EA05A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number:          1977
Signing time:             Sat 20 Jun 2026 10:01:18 +0000
Manifest this update:     Sat 20 Jun 2026 10:01:18 +0000
Manifest next update:     Sun 21 Jun 2026 10:01:18 +0000
Files and hashes:         1: QACcx3bmkYq5FVm71dmit53bn4Q.roa (hash: oQ/m7QfRfNheRWfUqid3dTy2xJX9VnnT62jOhchvHuk=)
                          2: gux-IxdkibcThQl39PWiMsakK0g.roa (hash: xADBPDkQYtVHScAVn2k1rTwtjm/TxC5Y/n4oo7GBk1E=)
                          3: jpvZw7M6HWfeaPP7BBGWUfnUPW8.roa (hash: m69AM/qWHvVH8vQjk7f2bA/DtDMk2TIVp7SRlmCI4co=)
                          4: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: EtuBWGnpqw3sH4IUDNaTN7Jzck7qnwjQYtZTvmyi37M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e4:7a:44:df:fc:25:d1:48:f2:dc:d1:aa:a1:8e:a0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
        Validity
            Not Before: Jun 20 10:01:18 2026 GMT
            Not After : Jun 21 10:01:18 2026 GMT
        Subject: CN=4637160bdb55871d9242a124dfbcc5a588908f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:2a:c6:e3:c8:e0:46:3a:a5:c3:75:8b:3d:
                    e7:05:d3:75:cd:3b:d4:9d:de:78:c7:b1:90:5f:8c:
                    bb:66:45:d6:5b:02:16:10:a2:98:7e:d7:0c:a9:19:
                    20:25:92:a4:d3:cd:df:05:aa:01:0f:3c:59:ed:4a:
                    a2:a1:b4:13:70:1a:ce:06:f2:6c:a7:d6:ed:98:9f:
                    86:29:14:cf:96:a5:48:32:06:30:72:d7:5b:b1:c6:
                    5e:3e:f0:2d:ef:86:5e:3a:50:02:f6:e2:b8:22:68:
                    d2:a4:25:c4:99:5f:16:12:ec:40:ef:a1:55:3c:d0:
                    32:11:2b:b1:0a:59:fb:fd:b8:50:35:4e:c3:c1:f9:
                    ee:80:89:cf:34:b3:5b:90:f3:60:07:b9:cf:d8:09:
                    3d:93:5f:2c:0b:2c:35:9b:11:98:cb:fe:f7:f2:4d:
                    7e:6a:4e:a3:ce:23:d6:a3:da:58:fb:51:fb:c4:86:
                    73:42:08:8f:a5:37:57:ba:d6:b4:58:f9:87:5d:26:
                    66:2c:fc:c8:06:5a:8f:0a:10:06:58:6f:1f:ea:ef:
                    dd:8a:2d:20:2a:d3:86:4f:05:f1:eb:ab:5d:46:99:
                    ac:b3:ba:54:89:0a:cb:9c:bf:ec:21:c1:c9:05:39:
                    d2:d2:13:94:31:54:32:ed:ab:ed:d3:fb:f4:93:58:
                    0a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:37:16:0B:DB:55:87:1D:92:42:A1:24:DF:BC:C5:A5:88:90:8F:90
            X509v3 Authority Key Identifier:
                keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:5d:f8:84:32:e9:ea:c6:32:a3:45:36:5c:50:ac:0c:b6:
         fe:e1:56:93:6e:35:f5:31:22:ba:06:d7:c6:5f:a0:10:92:77:
         4d:13:9a:06:40:ca:99:89:03:06:79:15:7a:57:da:10:da:0b:
         bb:be:e4:fb:9c:1b:c9:90:3b:bc:59:74:08:d3:10:d3:47:52:
         eb:3b:ba:d0:ae:d6:6b:21:52:16:0c:d7:c5:4f:3e:57:da:5e:
         b6:f4:d8:44:0d:77:f9:d2:a5:01:46:c8:37:0f:5c:25:2c:04:
         ea:b7:a0:6f:25:59:3d:89:d1:90:de:ca:7a:64:c6:4d:0d:6b:
         87:ef:95:fb:bd:69:5d:33:19:b6:92:d3:35:f2:81:e5:01:e0:
         ec:2c:7c:3d:aa:82:c6:41:96:b2:72:69:74:df:b5:67:14:d6:
         81:a2:d6:e2:81:9a:65:98:49:0c:6e:fc:13:20:58:66:38:7d:
         e0:bf:63:44:81:ab:21:c2:28:55:85:f8:7a:77:e6:e2:aa:3e:
         e9:73:5d:17:20:cf:12:dc:48:eb:19:3c:9f:dc:6c:55:d1:b9:
         dd:67:8b:7f:c6:1a:3e:2a:46:0d:6c:0d:36:e9:20:19:1a:be:
         1c:95:df:fa:57:a2:6c:46:c4:87:ec:9f:7c:1f:9a:da:d3:e8:
         6c:65:6b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:17:48 2026 by rpki-client