Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File:                     cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier:          39TQ+ZMb3nr4OvXeRYFIf/Nb5uT0ZDL+d5AtlBLSSP4=
Subject key identifier:   F0:04:E6:AA:76:2D:00:DE:41:04:6A:BA:04:87:03:10:C4:16:B9:A0
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer:       /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial:       019E90933ABDA0DF24C366355193006BB689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number:          06C0
Signing time:             Thu 04 Jun 2026 03:00:28 +0000
Manifest this update:     Thu 04 Jun 2026 03:00:28 +0000
Manifest next update:     Fri 05 Jun 2026 03:00:28 +0000
Files and hashes:         1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: MNXLzdjG6eqqXEYIqLZkVRfvj0cIjOs8tGbyXUskrLg=)
                          2: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (hash: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:93:3a:bd:a0:df:24:c3:66:35:51:93:00:6b:b6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
        Validity
            Not Before: Jun  4 03:00:28 2026 GMT
            Not After : Jun  5 03:00:28 2026 GMT
        Subject: CN=f004e6aa762d00de41046aba04870310c416b9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:73:64:48:45:f6:88:d6:9b:73:00:84:d0:95:
                    6e:69:1c:b5:a8:9b:8b:b6:04:74:43:06:3c:4b:2e:
                    71:9a:8f:02:7b:e7:6c:b2:bd:eb:73:f9:80:0e:3d:
                    4c:97:f7:4b:f4:03:5e:8a:e1:c7:79:58:92:3d:3e:
                    1d:9a:af:de:01:e1:8f:d0:39:b7:fc:10:ea:9d:6b:
                    bd:ac:d6:65:0b:14:35:40:3f:06:cd:44:52:d5:b6:
                    2e:d2:5c:04:15:75:68:c5:0d:42:06:91:66:84:fa:
                    3e:2a:36:bf:fb:b8:b7:22:c5:90:c1:96:12:e3:92:
                    45:01:5a:83:81:20:43:85:b8:37:88:f6:05:42:f6:
                    69:ef:8f:8a:b8:99:89:3c:24:43:ae:8b:a5:e7:20:
                    7a:b9:a8:f8:42:6b:e3:67:b4:50:87:2f:91:a7:36:
                    d6:1a:ee:71:ec:c4:56:e7:cd:b6:00:f3:3d:56:e2:
                    e9:17:27:84:b8:84:55:ca:06:2e:5e:cf:50:63:22:
                    87:c5:ff:2f:12:5c:0e:3b:19:b9:a9:45:13:0c:26:
                    90:46:50:cb:eb:17:91:da:df:60:6c:71:94:90:3e:
                    ca:47:81:7c:6d:56:34:0d:66:87:bc:5c:5e:b6:14:
                    08:36:a4:bd:85:d7:a3:0a:f5:3a:78:f1:ad:de:12:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:04:E6:AA:76:2D:00:DE:41:04:6A:BA:04:87:03:10:C4:16:B9:A0
            X509v3 Authority Key Identifier:
                keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:eb:fa:db:69:3e:8d:d6:c0:7c:b0:20:04:a5:21:52:45:
         e5:67:46:7e:29:bc:b1:a0:d5:ad:0a:25:4c:d0:88:31:1f:a1:
         c8:6e:6e:a5:a0:c2:bd:da:b5:ec:0b:0f:9b:34:ca:1d:a7:1b:
         64:7d:f8:76:1e:ce:97:19:64:f7:b0:6e:d3:47:02:d7:db:7d:
         41:7e:b9:54:b0:fd:5e:36:b6:9a:87:81:b8:88:2b:c8:b8:32:
         55:de:6c:4c:31:24:ec:a6:0a:8c:2d:ce:c7:81:27:a2:82:a5:
         18:5d:59:98:77:55:c6:0c:6c:74:91:15:c4:78:be:14:92:55:
         0a:94:24:50:71:6b:0d:75:c6:65:71:0d:f3:5a:f2:05:ac:23:
         a5:4e:0b:5c:b0:23:9a:91:74:04:e9:89:a4:1b:2a:89:29:83:
         0c:fc:25:39:22:78:79:8f:de:53:d5:ec:7b:bd:7d:37:58:9c:
         85:17:91:f9:37:2f:2e:60:09:93:67:29:fc:ef:19:74:e2:87:
         7b:4f:13:1c:dc:fe:5c:b7:7e:50:cb:34:25:91:28:d1:a8:1d:
         e6:4c:6a:65:34:02:8b:34:66:d6:e1:16:b2:d1:d8:72:fd:fa:
         3a:ff:f9:89:aa:99:b0:b6:b4:ba:ba:42:09:04:f0:52:51:92:
         2a:71:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:03:53 2026 by rpki-client