Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File:                     0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier:          Drhe17fKzUsuoOk3X1FlPvijx9UPQ9u3hluqy+wnOL4=
Subject key identifier:   98:28:DE:18:58:45:0D:88:7A:54:9B:F5:34:B9:F0:3E:3A:B5:03:F0
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer:       /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial:       019F1868070EFEF565162643E4F0E428CB1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number:          14B4
Signing time:             Tue 30 Jun 2026 12:01:38 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:38 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:38 +0000
Files and hashes:         1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: KK/rMaliNq8bAwFQSvlXjmU8l699896BTuPHWxZhIYI=)
                          2: _vTGMoMd2OUixFc93cU4_AKUok0.roa (hash: 8AD33t0BoeAy789bxPf6MIdbPtyMKTJZlywsC+bTttg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:68:07:0e:fe:f5:65:16:26:43:e4:f0:e4:28:cb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
        Validity
            Not Before: Jun 30 12:01:38 2026 GMT
            Not After : Jul  1 12:01:38 2026 GMT
        Subject: CN=9828de1858450d887a549bf534b9f03e3ab503f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:84:75:18:98:86:e4:bf:2a:56:36:68:78:
                    19:b6:42:aa:d1:11:09:00:06:1f:96:0f:5e:cd:82:
                    e3:1d:de:c8:d8:86:48:74:41:b0:ea:b6:f4:d5:d4:
                    3e:1d:fb:bb:20:85:6e:b2:4d:6d:ab:fd:ed:c6:0d:
                    02:bb:1c:f3:9c:b1:ce:7f:86:ac:2d:e6:6e:12:73:
                    59:aa:93:3a:a4:5e:35:18:77:66:ca:e9:96:c1:bd:
                    9e:8f:b7:6b:d3:b1:c9:5f:94:27:63:d0:8c:c5:ab:
                    f1:f5:1a:cb:a4:38:4a:9d:a2:a8:4a:81:55:96:ef:
                    46:11:de:b2:5d:3b:cd:cd:c1:f3:5c:63:86:ca:03:
                    ec:3d:4c:10:b4:43:5f:8d:64:5d:db:d9:9b:f6:31:
                    15:58:c0:4d:2f:89:a4:46:9a:57:42:0d:5d:28:e7:
                    bc:e2:23:ed:57:f9:6c:90:32:94:ef:ea:20:77:78:
                    62:e0:9d:25:af:ad:c8:bb:88:2a:c3:00:cd:5e:6e:
                    b3:ad:bd:cd:7b:2d:fa:a9:2d:38:5c:40:f4:1f:36:
                    33:30:00:43:9b:c3:02:76:96:e1:35:b0:8d:5c:6b:
                    8c:0a:e8:40:2f:63:59:5e:1a:ce:e7:41:b2:1b:d1:
                    19:f0:38:79:4b:ce:d0:0a:b5:ef:d9:83:cc:7a:24:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:DE:18:58:45:0D:88:7A:54:9B:F5:34:B9:F0:3E:3A:B5:03:F0
            X509v3 Authority Key Identifier:
                keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:01:23:1a:f2:47:e6:7c:06:fc:40:05:4b:e3:55:5e:d0:7e:
         7e:14:d4:3e:e4:dd:b4:da:2d:10:2c:36:8e:97:68:a2:09:d1:
         10:63:0e:00:e9:80:65:b4:9a:98:e7:ba:c8:c8:5d:eb:62:71:
         26:de:09:03:b8:29:11:c0:dd:b0:b7:86:ec:23:c9:0d:2b:ef:
         f6:63:1f:6f:20:c6:59:2d:14:0f:d6:74:56:ca:31:50:5c:76:
         26:8f:3b:37:96:90:1b:a6:79:83:3d:d8:f8:79:e1:97:d9:8f:
         63:53:df:18:7b:2a:55:5e:28:53:2c:11:fd:52:78:eb:d5:46:
         73:54:8d:fc:dc:5a:c2:2a:9c:8b:b0:69:29:af:8a:fc:fb:d3:
         11:00:df:ad:99:9a:69:71:67:b5:ca:20:cb:5a:7a:52:d8:6e:
         85:93:a7:3a:04:71:cd:42:14:e8:45:0b:97:38:6a:5a:3c:f1:
         16:88:23:3d:92:14:ac:9c:88:4c:9b:e5:fe:80:f9:62:18:0d:
         4a:2c:c6:4e:92:22:fa:a9:3c:2d:87:80:49:4d:f7:9c:92:f8:
         53:bc:5f:2d:ae:e2:71:ef:cf:0a:b0:5b:da:34:bb:20:7e:63:
         b8:c4:69:55:4a:a1:bc:00:ec:67:7f:42:9f:56:06:43:e8:70:
         a6:9a:20:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:47 2026 by rpki-client