Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
File:                     yOx8SlcVXOjexbHNYv-oQBexb1g.mft (raw, json)
Hash identifier:          2lKZnNi7/UW1acRlU12okr4+eONs92mHxe7O1pFwEC0=
Subject key identifier:   2B:E6:58:7E:E5:41:1C:57:B4:36:3A:FC:09:F9:51:E9:64:14:D9:7E
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Certificate issuer:       /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial:       019E9B1721D9743BCD97283C542BA8EC5D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
Manifest number:          086A
Signing time:             Sat 06 Jun 2026 04:00:44 +0000
Manifest this update:     Sat 06 Jun 2026 04:00:44 +0000
Manifest next update:     Sun 07 Jun 2026 04:00:44 +0000
Files and hashes:         1: LA3jFcuaqgILmHo9nTpg4K4H2wU.roa (hash: kxF22odJcoiHzXYLzYGjkdPZsm3zZB8qlfFcOiIEMd0=)
                          2: yOx8SlcVXOjexbHNYv-oQBexb1g.crl (hash: lRuliXsiFQyhpVLu7kgZ2uY/fWSRDwhk8EXb1I5+9kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:21:d9:74:3b:cd:97:28:3c:54:2b:a8:ec:5d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
        Validity
            Not Before: Jun  6 04:00:44 2026 GMT
            Not After : Jun  7 04:00:44 2026 GMT
        Subject: CN=2be6587ee5411c57b4363afc09f951e96414d97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:ef:70:d2:2c:70:7b:90:4d:6f:ec:9d:1e:
                    48:4a:44:db:8b:0d:9c:d1:61:8e:ff:93:4c:d7:9c:
                    70:80:bb:5a:24:9f:10:1d:a1:32:a8:67:03:95:8e:
                    59:80:60:b3:99:0b:d5:0e:ed:89:58:d6:a1:ff:44:
                    fd:d5:91:72:30:16:a3:ff:49:c2:15:bb:67:c1:55:
                    06:67:40:7e:17:49:ad:04:cd:87:48:94:4b:15:b8:
                    8d:c7:2a:55:5b:61:94:b6:05:89:ec:72:e9:0e:0b:
                    bf:17:59:30:1e:aa:b7:73:d7:52:9b:fb:a2:f7:dd:
                    39:96:c9:4e:01:d3:38:3e:1a:4c:40:c4:d3:c0:a7:
                    5a:37:dc:cd:6f:72:7b:e8:8f:5a:cd:96:9a:31:c7:
                    6b:e6:2f:5a:97:51:f4:eb:fa:a5:7d:26:05:6b:75:
                    25:63:96:d8:28:12:5d:12:aa:ad:ac:a8:57:8d:40:
                    4d:53:e8:15:c9:d6:07:ce:e5:d4:04:96:90:78:13:
                    b6:9d:53:d4:ca:30:93:01:0c:86:ec:f8:8c:40:25:
                    b5:fe:2a:ba:2c:21:66:75:96:7d:3e:32:18:d3:31:
                    b7:af:f0:02:45:79:6f:ed:f2:82:ef:bd:83:6c:b1:
                    60:88:d3:13:e5:80:ec:c2:f9:fd:63:5f:0d:f6:7e:
                    19:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E6:58:7E:E5:41:1C:57:B4:36:3A:FC:09:F9:51:E9:64:14:D9:7E
            X509v3 Authority Key Identifier:
                keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:fe:cc:df:c6:41:ba:c0:03:96:30:d8:f6:11:4c:89:ef:
         b7:9a:f8:16:e8:13:0f:ea:a5:38:82:36:f2:cb:b1:38:98:fc:
         e3:a5:26:ab:5c:08:64:b9:ca:7a:9c:d4:16:63:dd:19:e4:54:
         2a:cd:5a:e0:a1:9a:8b:49:94:3c:fb:7e:06:66:17:fb:76:f3:
         b1:ca:30:fa:57:ef:f6:d6:5e:90:1d:c7:1f:39:3f:02:d5:68:
         21:53:55:33:33:0c:83:d0:51:97:88:69:3b:82:36:c8:8f:31:
         85:d0:16:10:85:6c:ba:10:20:7e:33:be:b3:98:64:60:b1:05:
         2d:66:5d:72:93:40:82:51:d8:d7:c5:36:72:34:7b:92:a4:3b:
         28:80:b1:a9:17:00:3c:f1:80:a2:7b:fc:79:bf:a1:42:1e:15:
         e8:f2:7d:ea:f2:d5:18:5c:e2:bb:c8:e2:2b:8d:be:f7:62:5a:
         7f:e8:d0:eb:64:07:65:f7:07:3c:ee:4b:ef:e6:82:20:d0:be:
         d9:20:bc:f0:c5:76:c1:ec:62:99:12:bc:89:2f:8f:26:b7:69:
         8f:8f:a8:cd:f6:1f:6e:5a:02:f6:af:ee:db:5b:60:fe:08:7a:
         4a:f0:7a:9a:f5:76:17:79:98:e1:ad:71:62:a1:98:c6:67:81:
         48:99:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:09 2026 by rpki-client