Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          MIjAYFRwXpiCOyYGwttt/vgauKL+BqCzzy4bh3gIPmg=
Subject key identifier:   8C:45:01:A0:9E:D0:E6:96:AD:8F:27:83:D7:C2:53:7D:51:11:BB:75
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       019F18D63185044DBBD46C08D25C423648BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0F76
Signing time:             Tue 30 Jun 2026 14:01:58 +0000
Manifest this update:     Tue 30 Jun 2026 14:01:58 +0000
Manifest next update:     Wed 01 Jul 2026 14:01:58 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: 1nN3OU+sg623zv7rROhnIS39dtb3oN8TMOhQ3Bidn6M=)
                          2: qyHL6II4esJ4dc5VWl8lMms3EA0.roa (hash: XUNHvMm3tr618bDepCNFHXOwOdAqjvCOtPPWHwwDwkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:31:85:04:4d:bb:d4:6c:08:d2:5c:42:36:48:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Jun 30 14:01:58 2026 GMT
            Not After : Jul  1 14:01:58 2026 GMT
        Subject: CN=8c4501a09ed0e696ad8f2783d7c2537d5111bb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:d7:e4:a9:5f:23:e9:e0:9e:95:61:b0:0c:
                    5a:68:d5:39:e5:56:2b:a8:ac:da:42:49:c1:1d:3f:
                    15:c4:9e:38:77:c2:1b:43:4b:d0:4f:93:36:33:da:
                    db:78:0d:41:0f:2b:c5:99:6a:d4:60:6b:60:e6:bb:
                    f3:55:88:e7:9b:4f:e9:61:45:cd:14:73:75:27:65:
                    8b:07:3a:32:4e:39:8c:80:66:74:f9:94:16:42:ea:
                    80:e6:d4:a8:2c:2f:d8:e5:4a:db:fb:e1:f2:69:15:
                    29:0b:ce:af:0e:77:57:a8:f8:46:65:43:44:63:ab:
                    82:49:9a:42:77:53:87:7a:20:86:48:ef:23:6d:9d:
                    4d:18:3e:df:2c:47:c3:d6:59:50:5e:f6:33:52:ee:
                    44:6f:0b:71:37:41:e1:07:26:7a:71:c1:bd:6c:7e:
                    1c:16:4b:ae:2d:7a:52:05:42:92:c9:89:12:a7:90:
                    97:ab:75:d6:14:71:34:2d:49:93:a8:75:ae:81:99:
                    1c:db:72:d6:9b:b8:cd:21:38:54:9b:eb:81:d1:9d:
                    93:9d:f1:9c:e2:d8:7b:d3:72:fd:3f:97:1d:78:53:
                    9f:11:38:25:ca:28:eb:63:09:d7:60:0a:c3:0c:d2:
                    49:b5:f9:e2:6e:2e:f4:3f:e1:68:cc:f4:73:03:58:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:45:01:A0:9E:D0:E6:96:AD:8F:27:83:D7:C2:53:7D:51:11:BB:75
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:40:4b:83:69:9f:90:78:8d:0b:b2:13:55:09:36:d4:a1:d4:
         23:8f:f8:4d:01:56:a0:c7:78:eb:45:5a:c0:e9:8d:79:a1:6d:
         34:ab:f2:18:5d:88:a1:e8:19:77:99:a6:53:5f:93:f2:da:25:
         f5:ed:65:77:3d:f8:69:6e:50:cb:cf:ef:e8:51:45:0d:06:c1:
         6f:8b:a8:9d:7a:e5:e8:68:e8:6d:82:2b:e6:97:a6:ea:c8:ae:
         f1:ec:38:58:b0:40:13:0e:19:05:94:4b:1a:42:5b:c4:31:c2:
         29:db:05:6e:bb:b4:1d:07:82:ce:d0:28:55:a2:da:34:40:7a:
         e8:1b:fb:8c:66:32:0d:e4:83:10:dd:b5:fb:af:26:cd:68:a5:
         bb:89:d1:9f:0a:57:97:8b:84:04:6c:d5:53:ff:5c:32:5e:ae:
         85:00:44:21:f3:79:07:b9:08:15:5e:94:97:89:b8:4e:0f:4d:
         e2:36:78:9a:9d:4b:0d:c3:88:b7:33:a6:66:93:68:99:ef:9a:
         08:d3:3c:89:a1:1c:f3:56:7b:63:e5:ec:93:01:b2:47:f7:55:
         ec:bd:3e:ef:76:83:af:de:ff:3b:45:36:f7:45:fe:4d:cc:08:
         57:01:1b:d2:1d:b6:dc:3d:24:0c:7e:9a:74:10:34:cc:e3:4a:
         75:29:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:20 2026 by rpki-client