Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
File:                     0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json)
Hash identifier:          lDcYW5xesVLnhYPT9EO/A1Aw583U1v3CkoV7PnWRQyg=
Subject key identifier:   A1:3D:18:04:85:A3:6E:88:50:4F:81:B2:0C:24:EE:45:40:E2:AB:6C
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Certificate issuer:       /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial:       019F190CA2376D349E6D1BB097E78003E446
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
Manifest number:          0C41
Signing time:             Tue 30 Jun 2026 15:01:25 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:25 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:25 +0000
Files and hashes:         1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: EWn0DEM5TaM3qekPpnhnuh5cmwkGhtoOIb27HpKoVsg=)
                          2: wivMN35KuEgnCPJ_N1vF1kAwlHQ.roa (hash: TSOrmsI98t/QypJ+zbHvGanluRz5oq6NnUNRBbmcaMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:a2:37:6d:34:9e:6d:1b:b0:97:e7:80:03:e4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
        Validity
            Not Before: Jun 30 15:01:25 2026 GMT
            Not After : Jul  1 15:01:25 2026 GMT
        Subject: CN=a13d180485a36e88504f81b20c24ee4540e2ab6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:8f:02:1a:51:0f:7a:31:65:70:c5:0d:27:
                    cc:79:34:1d:eb:98:8e:c0:20:91:37:2d:4f:8a:20:
                    9a:c7:74:7d:86:17:cd:14:56:11:07:72:97:ae:61:
                    3c:fe:65:22:b1:ed:cf:1d:d9:11:a7:9f:55:68:ca:
                    84:6c:98:c2:3c:68:d5:11:2d:d1:7e:05:3b:43:a0:
                    11:45:44:73:45:b4:b1:a7:46:a9:bb:df:fc:33:b3:
                    9a:7f:a7:bf:5a:27:ac:1d:bb:ca:77:11:17:21:6a:
                    34:e5:61:9a:48:84:91:9e:95:01:5f:18:bd:bb:f8:
                    b1:9c:99:24:da:08:34:d9:f7:41:fa:60:40:33:f2:
                    29:fc:f8:22:35:11:45:84:b8:be:b4:5d:d4:09:03:
                    80:8f:50:20:b5:72:1d:7d:5c:a2:79:66:80:25:51:
                    1c:af:04:85:16:ac:a1:1e:ad:28:8c:29:20:c8:ec:
                    17:4b:a3:4c:29:9a:33:9c:f8:06:46:1a:31:8a:d5:
                    f4:d3:f8:f2:34:4c:09:ce:df:ee:32:be:d1:0a:78:
                    98:c1:00:98:78:48:00:96:00:4a:9e:87:90:ae:99:
                    23:a9:be:59:74:64:f9:28:18:b2:a1:ab:12:d2:ae:
                    0c:5e:67:6c:bb:55:d1:5f:c1:0f:43:f8:66:13:ea:
                    ea:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3D:18:04:85:A3:6E:88:50:4F:81:B2:0C:24:EE:45:40:E2:AB:6C
            X509v3 Authority Key Identifier:
                keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:d2:d5:aa:91:ef:ff:ba:09:9f:1e:69:c5:81:c1:57:22:
         12:09:c0:e8:76:fb:f1:be:23:06:4f:10:5c:6f:6b:ae:f3:91:
         f5:9e:09:9e:79:25:96:24:26:5e:58:5c:a1:be:42:f8:74:1d:
         80:eb:71:c2:64:3e:fd:9f:64:ed:15:0c:9a:c7:be:1a:77:17:
         ca:2d:9a:ff:c5:e8:4d:fa:94:7f:ef:81:78:88:d5:f7:7d:84:
         63:b1:64:98:3e:97:40:8e:ce:2b:d6:ae:35:79:7f:ae:33:3f:
         03:3f:e0:12:4b:ec:ba:3d:4f:13:ff:77:09:ff:05:34:66:95:
         05:b2:f8:63:ca:65:b7:1c:07:1e:da:aa:7e:cd:7a:59:0a:14:
         9b:25:ee:cb:1f:8d:97:67:34:d4:37:ec:43:d2:7b:91:cc:b2:
         19:91:76:55:b0:b2:81:fd:3d:27:57:d8:83:7e:fa:ad:b5:dc:
         79:b8:97:ec:8b:c4:3b:a7:2c:32:a6:6b:b7:a4:9d:73:3f:a8:
         b4:f7:33:e7:89:1f:10:6a:cb:d9:fa:cd:0b:1c:f8:b6:e0:3a:
         79:8c:ea:c1:ed:9b:50:2d:2c:3c:67:cd:06:36:55:93:e0:f2:
         f5:61:99:9d:eb:8f:b3:bb:e1:fb:57:84:40:21:e6:e2:2b:b7:
         06:40:a1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:10 2026 by rpki-client