Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File:                     K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier:          knbo396+w1nun8YIon1JPuqEmGWZ0IYcSy/4bpkjCZ8=
Subject key identifier:   7A:0A:60:E4:98:79:AC:94:16:49:37:9F:BA:B4:9F:A1:3C:5B:AB:2E
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer:       /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial:       019F19E7D91DEF29F3D152B267AF2E69CB63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number:          06A2
Signing time:             Tue 30 Jun 2026 19:00:52 +0000
Manifest this update:     Tue 30 Jun 2026 19:00:52 +0000
Manifest next update:     Wed 01 Jul 2026 19:00:52 +0000
Files and hashes:         1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: yaM20fM5ZHx6Tmz+MSqP7yJWVQOBK+8PBmsCwD2tUUw=)
                          2: z5dBX6odp12M_OB_gttLAeXRzfY.roa (hash: H0+1g03VSFVNjWI/Z7WGHpAKWuQ/lvaaEnN2kUyKA+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:e7:d9:1d:ef:29:f3:d1:52:b2:67:af:2e:69:cb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
        Validity
            Not Before: Jun 30 19:00:52 2026 GMT
            Not After : Jul  1 19:00:52 2026 GMT
        Subject: CN=7a0a60e49879ac941649379fbab49fa13c5bab2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:95:21:ac:aa:72:49:a8:a0:88:21:12:92:
                    c0:7a:e0:e3:43:8a:42:39:4a:de:fd:2f:2b:03:1e:
                    1e:86:bb:20:d2:fa:1a:66:a5:ba:12:f0:2a:54:f3:
                    ee:64:2e:96:bc:b1:0e:d0:db:de:7b:47:fa:f6:c0:
                    5a:60:c1:a2:09:a7:6b:66:ba:a2:b6:99:60:8c:ff:
                    8a:dc:26:63:e3:df:f0:39:0c:30:74:21:c4:28:7e:
                    02:82:30:a1:bf:0a:33:ab:b8:36:2d:48:f7:08:3a:
                    e6:d7:d0:27:52:94:37:56:2a:10:8f:d3:0a:c2:27:
                    41:66:de:32:5a:25:46:4c:37:c3:d2:a7:b5:ea:16:
                    e9:88:02:ea:4c:61:11:48:78:9e:da:31:e0:47:51:
                    c8:f3:ea:5d:4c:a0:56:35:1e:ec:1c:c6:ba:6f:68:
                    77:bd:b9:08:9c:59:55:cb:09:93:c8:17:16:44:ba:
                    5b:fd:2a:c3:5d:21:ea:0b:c9:aa:da:2d:81:2e:2a:
                    82:fd:a2:6b:a5:ca:df:87:76:22:5d:0a:b9:eb:57:
                    95:86:08:24:49:26:b6:86:9f:8a:fc:4a:ec:f4:02:
                    e6:8e:73:0c:f5:ab:87:00:b3:f2:01:51:ad:d3:a2:
                    f1:08:00:9b:7d:75:f0:20:7f:3c:85:3b:78:33:35:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0A:60:E4:98:79:AC:94:16:49:37:9F:BA:B4:9F:A1:3C:5B:AB:2E
            X509v3 Authority Key Identifier:
                keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:09:c7:6d:8d:8d:47:52:ba:fd:7c:db:ab:91:69:4c:4a:
         00:96:ee:da:93:dd:8e:92:c4:2f:a4:8c:b7:dd:4f:4c:aa:59:
         2f:e4:27:e5:e9:85:90:14:0f:d2:51:e6:09:10:6c:24:5a:30:
         d8:87:7d:92:b6:91:0e:48:37:d7:f3:72:01:87:25:31:c7:76:
         84:f1:a9:eb:23:b4:f8:bd:64:a7:cf:5a:8b:14:ba:2d:79:5f:
         e6:6b:d4:8b:63:21:a8:45:7e:89:00:04:24:22:01:65:44:f9:
         ad:08:48:93:4e:fd:0f:91:17:ee:95:99:30:12:fa:0c:47:fb:
         e8:e6:9e:82:7a:f6:78:eb:fc:0c:04:13:e0:b1:d3:5f:0a:5c:
         77:97:1c:a8:f3:57:e3:15:7c:f2:f0:ae:e7:21:22:82:e1:1b:
         ad:12:19:bb:d4:9e:4d:27:6d:83:4a:a5:48:87:ca:65:4f:f1:
         72:85:45:f6:76:c6:5a:40:6e:26:4a:ce:59:5c:f4:46:f9:e3:
         9a:fb:1a:f0:71:ab:8b:78:b8:9a:07:f5:2b:25:ab:a1:bd:c5:
         e3:b6:34:a3:0a:3e:16:1b:13:2a:2c:26:97:83:28:a8:bd:82:
         5b:d2:65:35:a5:4f:c9:97:1a:3a:5b:ed:56:df:0b:b6:1c:4b:
         7c:55:d5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:38 2026 by rpki-client