Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File:                     4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier:          yOT6AnYXsZp0k8FXzJGhCozKR58i0Vyp3thKsZzZopc=
Subject key identifier:   F3:61:17:42:26:E7:76:2B:1F:E7:26:A5:06:5A:91:F2:07:C3:5B:D7
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer:       /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial:       019F17C24010AD974168B28613174EB6C13A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number:          0A09
Signing time:             Tue 30 Jun 2026 09:00:34 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:34 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:34 +0000
Files and hashes:         1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: rfJBh+iKIY+d4WbvI1Mez1gU2GXewGRfU+LldeBYe/o=)
                          2: dhPvX_i1mFOzhmyQ6cgEC3zR_ns.roa (hash: 9n9s5loPBcCb7Ueh7CcxWNEVFKz5nZ6rOXbrQKMlyU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:40:10:ad:97:41:68:b2:86:13:17:4e:b6:c1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
        Validity
            Not Before: Jun 30 09:00:34 2026 GMT
            Not After : Jul  1 09:00:34 2026 GMT
        Subject: CN=f361174226e7762b1fe726a5065a91f207c35bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a3:3b:de:8e:9b:9a:be:45:54:09:30:59:46:
                    60:89:68:94:2d:fd:d0:58:e7:fe:dd:ca:a7:61:ae:
                    98:fd:e8:32:eb:3a:64:9a:a5:71:73:01:4c:3d:77:
                    16:f6:2c:16:d2:d6:f3:bb:90:29:ef:78:c9:a6:bb:
                    8d:e6:87:8b:06:35:5c:78:ff:04:16:fd:f1:c9:38:
                    f8:be:46:c5:fc:5a:23:b0:58:60:46:06:2a:5e:68:
                    74:0e:4c:91:0f:dd:37:91:f7:3d:2f:9c:51:ee:79:
                    d8:2a:e8:ea:29:e1:18:96:03:00:fb:f7:9c:70:c7:
                    56:5d:86:62:94:97:c7:6c:e0:ee:e1:35:0f:d1:a1:
                    b2:55:07:f2:05:a7:b4:7a:e1:16:d8:0a:1a:39:90:
                    ea:65:47:c4:17:74:9d:6d:8e:25:54:c6:97:23:16:
                    52:da:3b:c8:02:71:8a:d3:2a:c6:3d:7c:e8:bb:7a:
                    28:13:87:45:86:c3:8c:b7:4e:02:03:02:2c:3f:5b:
                    93:dd:a8:27:84:eb:ec:3d:84:1e:72:dc:18:34:a7:
                    3a:93:c3:bb:ba:d9:4c:ef:77:2c:6b:e6:02:69:82:
                    91:93:ea:76:71:96:5b:7d:27:94:3e:7a:73:d0:47:
                    ce:41:be:21:bc:de:71:3d:2c:8c:39:aa:ef:31:35:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:61:17:42:26:E7:76:2B:1F:E7:26:A5:06:5A:91:F2:07:C3:5B:D7
            X509v3 Authority Key Identifier:
                keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:58:12:80:c8:cf:4b:62:eb:47:ed:e7:ba:8b:fe:fd:e9:ed:
         1e:c0:42:ac:93:27:e7:d5:c1:e0:d5:ee:b6:15:48:ae:cf:85:
         a0:2d:78:e6:0a:97:84:c5:29:28:14:37:8f:4a:d8:8f:ce:ec:
         2f:b8:b7:97:5b:36:e3:f0:5c:e9:74:2b:84:31:1b:b5:4d:8e:
         4e:04:c9:37:69:d6:9e:4a:1c:55:94:05:66:54:f4:fb:a9:ef:
         20:15:d9:d6:92:9b:d3:b2:cd:d5:c3:f9:c8:70:84:10:12:0c:
         dc:2e:02:6f:25:61:aa:9f:0f:61:d6:e8:19:28:75:e8:55:37:
         f3:f4:3d:05:f2:1a:ea:a4:d9:c1:10:23:fa:3d:d7:f9:c0:89:
         c9:ca:87:75:ce:6c:ca:98:e8:d5:6c:84:23:4a:83:7b:50:30:
         48:86:a8:30:c7:b7:b1:80:fe:6e:c1:06:01:52:cb:0f:40:a0:
         93:4f:74:92:e8:a8:9c:d0:0a:69:d8:4b:6c:b4:60:ef:c8:93:
         08:32:f8:ca:4c:6a:c8:29:c8:3b:ed:68:4d:98:de:c5:0b:34:
         c6:00:81:63:cf:d0:f4:0e:05:f2:cc:1c:bf:35:53:6a:17:e1:
         77:f0:52:4a:c5:aa:55:13:4c:dc:74:08:cd:2c:e8:2e:dc:d9:
         d0:8c:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:58 2026 by rpki-client