Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File:                     CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier:          z2t+MdBj77DAMeoGSD1TNN6+0InsSaoS3rzntzLKuVc=
Subject key identifier:   63:B9:C3:38:A7:5D:92:B2:17:82:39:CF:10:35:5F:8A:6E:2D:40:40
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer:       /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial:       019EB9FD16FE8AFC7FDF437D934C335685AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number:          1477
Signing time:             Fri 12 Jun 2026 04:00:31 +0000
Manifest this update:     Fri 12 Jun 2026 04:00:31 +0000
Manifest next update:     Sat 13 Jun 2026 04:00:31 +0000
Files and hashes:         1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: /1rQ3JVVp9TLaSVAzIKrMsx7fNk4/mq2FrDPhzBSMsU=)
                          2: RyL4c5_NFeavotjlWc9ltdGX7O8.roa (hash: dSsA+dzaiaqYnBINWY6V92uBT2cKWLJnMg9X5b/Herc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:16:fe:8a:fc:7f:df:43:7d:93:4c:33:56:85:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
        Validity
            Not Before: Jun 12 04:00:31 2026 GMT
            Not After : Jun 13 04:00:31 2026 GMT
        Subject: CN=63b9c338a75d92b2178239cf10355f8a6e2d4040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a1:1e:7f:e5:fa:b0:5c:b3:fd:0c:9b:f9:ab:
                    7e:33:e0:63:7e:9e:63:f2:50:67:ba:fc:f7:74:d4:
                    6c:52:1d:9e:c7:06:ee:73:34:c3:89:60:e5:2a:95:
                    b4:41:b0:95:9b:99:f1:06:6b:92:c9:18:31:c2:a4:
                    34:bd:f0:25:92:65:4c:32:f0:a7:e1:9e:93:a0:b7:
                    e8:9d:72:4e:a5:b7:c3:83:7b:29:73:a4:45:f2:d7:
                    73:ee:23:56:ec:0f:17:b0:3d:97:e8:fb:e6:cf:d1:
                    3b:22:98:1a:a8:ad:df:ea:f8:bc:37:74:c8:db:ae:
                    0b:6f:3a:ca:81:ce:f3:d1:52:46:cc:0b:e5:75:ea:
                    1e:95:4d:a8:9a:72:57:a5:f1:90:7f:48:9b:1f:47:
                    94:ba:58:f0:1f:fb:e4:35:17:60:bd:1f:23:26:75:
                    c1:66:26:78:61:4c:b1:b5:19:e2:b3:be:fc:b6:b1:
                    a1:1b:76:1e:ff:bb:ae:05:fe:9e:5a:70:11:af:57:
                    2e:b2:b8:6f:78:bd:fa:f3:c3:e8:04:39:e5:ef:65:
                    0f:f1:21:86:93:f6:9e:ae:5e:27:a0:03:d6:34:2e:
                    6c:d9:73:9d:67:e0:a6:8b:06:db:06:30:47:88:23:
                    c0:22:3a:3a:5b:8c:c8:54:f7:c4:98:f5:93:d4:6e:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B9:C3:38:A7:5D:92:B2:17:82:39:CF:10:35:5F:8A:6E:2D:40:40
            X509v3 Authority Key Identifier:
                keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:00:b4:8e:b4:5d:48:19:b5:61:97:67:3c:99:7b:cd:18:5f:
         e4:9b:86:7c:69:e1:a5:e2:36:d9:ed:7c:5c:6c:c1:e0:7d:e9:
         d7:28:0a:c0:13:2e:3c:96:72:f5:83:30:a7:bf:11:b0:29:30:
         8f:e8:f7:f9:47:85:47:80:ef:90:e5:78:7e:94:af:d5:ee:45:
         8f:52:cc:60:26:66:b1:ca:48:3b:51:7a:40:11:9e:1d:94:0a:
         da:96:a7:e4:65:85:56:1a:76:38:6a:9d:d3:ef:09:ad:47:2e:
         8c:cf:8a:c3:96:7f:77:d0:ee:72:71:eb:87:99:74:55:83:e2:
         4e:30:fc:66:d1:d9:1c:c7:fd:84:e1:d1:ed:29:07:d7:d8:c3:
         a8:bc:54:38:a4:59:96:f5:e0:ee:b1:f7:61:c6:08:ac:10:84:
         d5:63:20:9e:17:a5:a7:33:23:0c:67:09:ae:e1:b9:0f:1b:38:
         f3:f8:7b:db:e5:e3:4f:be:40:0b:eb:ae:c8:05:fe:dc:b9:ed:
         58:f4:62:c2:cf:1f:ff:67:49:65:21:03:3d:26:28:0c:86:f5:
         03:4d:a3:08:ea:6c:75:c7:f5:9a:81:1e:f5:f6:8c:bf:61:1b:
         5a:c8:12:5d:42:2a:6b:42:68:9b:23:cc:21:94:ac:82:e3:0d:
         8a:f3:a5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:25 2026 by rpki-client