Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
File:                     27OW36lR7EFX8hHl7XQO2X4bDz8.mft (raw, json)
Hash identifier:          PcLoKZGYZvz6t2GGNmr+qNb9/970dhP+qHgoDCWnK+s=
Subject key identifier:   87:4C:94:C0:B9:BD:AC:0F:50:57:D1:D7:0D:43:FD:BD:A8:BD:CB:F1
Authority key identifier: DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F
Certificate issuer:       /CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
Certificate serial:       019EBCC76CE424B490C8DED162DF7E200399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
Manifest number:          0D52
Signing time:             Fri 12 Jun 2026 17:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 17:00:46 +0000
Manifest next update:     Sat 13 Jun 2026 17:00:46 +0000
Files and hashes:         1: 27OW36lR7EFX8hHl7XQO2X4bDz8.crl (hash: 9FzGhD/wWcMronFtihSiaU/VG1RA4+KFhM7QWlgarlw=)
                          2: DfHWpmAWUgCCErY8uLt82E-U1FA.roa (hash: +Qi5uESsKdV2qG1rG182kIlHI1TpCDtCPoj/zgTI3/E=)
                          3: GYZtGu5A6w6f_D9QSqwvacnqffU.roa (hash: k+vGwyv3QPG/+s72nT5RSbpgXn+mZD4c8cr8T4ADKms=)
                          4: U98gDyS6dRj9SjIXrnN3pWc2zgE.roa (hash: HsrUh8+O8DlJnCmiqH/w8bVErohPR7VfDdSGvWsJKvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bc:c7:6c:e4:24:b4:90:c8:de:d1:62:df:7e:20:03:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb396dfa951ec4157f211e5ed740ed97e1b0f3f
        Validity
            Not Before: Jun 12 17:00:46 2026 GMT
            Not After : Jun 13 17:00:46 2026 GMT
        Subject: CN=874c94c0b9bdac0f5057d1d70d43fdbda8bdcbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:e6:53:2f:71:4e:16:f1:9a:2a:60:b8:49:
                    a4:89:39:c7:66:9c:a5:c7:55:c2:a4:a2:35:84:6d:
                    27:38:6a:5a:8c:b6:ea:75:4d:77:46:06:20:ca:d3:
                    24:60:8a:a2:14:dc:ac:1c:f8:57:28:71:00:e2:62:
                    51:79:cd:4e:3e:78:f0:c1:31:f9:a6:66:ee:73:2f:
                    77:a6:c7:96:c9:fe:71:06:40:7b:37:0a:70:fb:ec:
                    f0:04:bc:07:84:35:07:36:2f:39:ad:7d:55:48:ed:
                    2b:0b:4e:fd:57:2f:1c:54:f8:4b:9e:af:a7:7b:5c:
                    bc:52:6c:ec:0b:8c:88:e0:7b:f1:dc:45:87:27:d7:
                    eb:7b:97:05:32:75:ad:c6:dd:2a:08:21:ad:a2:01:
                    6c:8f:ac:48:43:04:a7:d8:9c:4c:27:ca:d2:7c:e8:
                    7f:fb:70:89:22:6a:22:5f:b7:ea:b4:4b:07:97:64:
                    5b:aa:71:32:11:35:b0:97:ed:e4:18:30:23:3c:5b:
                    27:0a:f5:f1:69:0b:46:c4:1f:b4:6d:d1:6a:28:61:
                    9d:3e:ac:eb:99:27:b6:20:32:d0:2b:25:cf:b3:be:
                    ee:aa:20:52:08:33:a1:d3:23:bd:0b:54:a0:ad:d2:
                    88:fb:be:0f:76:64:ef:7e:b6:52:4d:2a:52:bb:4a:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4C:94:C0:B9:BD:AC:0F:50:57:D1:D7:0D:43:FD:BD:A8:BD:CB:F1
            X509v3 Authority Key Identifier:
                keyid:DB:B3:96:DF:A9:51:EC:41:57:F2:11:E5:ED:74:0E:D9:7E:1B:0F:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27OW36lR7EFX8hHl7XQO2X4bDz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b3987a-4504-4749-9d73-df572fe9672a/1/27OW36lR7EFX8hHl7XQO2X4bDz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:da:9b:ea:7d:ce:ee:8a:5f:87:48:a3:eb:7d:33:ce:1b:
         60:2a:e2:06:b7:6c:06:5c:28:3e:6c:9e:d5:a1:6e:f7:d0:da:
         7c:4a:08:47:ce:bc:91:08:67:5f:8c:e8:5b:7a:4e:de:04:cf:
         ef:5c:0f:c2:02:8c:ff:0d:f8:6e:ce:32:4b:02:83:a8:1f:e7:
         c5:86:92:41:b9:61:ba:a9:dd:a6:93:14:98:1f:5b:7a:0a:a1:
         fc:6d:f1:f7:e9:fb:a6:a1:5f:6c:e7:d9:a2:d7:60:73:57:3e:
         72:f4:d4:bb:68:8b:64:90:16:d6:8e:1b:f0:dc:5e:2d:a5:c0:
         07:d1:f0:93:2c:89:f1:ae:5e:d6:07:95:c1:05:69:13:34:d6:
         ff:4c:8c:03:c1:de:95:c8:2b:c2:e6:dc:8e:d2:7f:58:b3:aa:
         09:ba:78:f1:12:30:f1:a5:4e:8a:cf:0f:c5:7c:bc:9a:ac:88:
         38:4c:81:a4:aa:fa:64:ae:a0:d9:8c:3f:b3:b8:bc:eb:88:bb:
         cc:3e:a4:11:73:a3:9e:d2:84:69:6c:1a:94:6c:81:cc:06:3d:
         03:d1:c6:b0:54:31:c8:da:9b:a3:1d:25:36:de:62:53:00:89:
         9b:33:ae:47:bc:aa:14:ef:54:8a:74:13:02:7e:9b:9d:9f:ae:
         1a:f5:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:34:48 2026 by rpki-client