Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File:                     iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier:          n/b6ZDW7QnIKB04bXVdGy89Db6rtKGd4xf6B/UrpnJY=
Subject key identifier:   50:17:F1:79:E6:49:CB:0E:88:F7:5C:B6:E0:29:0A:91:0B:33:5F:9B
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer:       /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial:       019EB98F70408F6A8C293DE0A8F1BB398BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number:          0E80
Signing time:             Fri 12 Jun 2026 02:00:45 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:45 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:45 +0000
Files and hashes:         1: 04FKSiNEBSVxxBYiPtE8VcsRvqM.roa (hash: iIsFB+u1yXou/MBTJQN92523XOZ49HIi4J+JzBjc0Vk=)
                          2: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: kXH0+8jlBvSecefDpstuayKd4qxgFGZGPBwkw7eLWoE=)
                          3: yUZd6eY1ILFj_NVgWnntQzVJiGs.roa (hash: aYbs72JfiEw4WjwVxwNiVwxvegvGGWCTaf1wWunmceE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:70:40:8f:6a:8c:29:3d:e0:a8:f1:bb:39:8b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
        Validity
            Not Before: Jun 12 02:00:45 2026 GMT
            Not After : Jun 13 02:00:45 2026 GMT
        Subject: CN=5017f179e649cb0e88f75cb6e0290a910b335f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:b8:de:7d:14:4f:3d:2f:6d:10:51:9d:8c:
                    9e:bf:91:ef:f5:0a:08:69:5e:53:48:e7:5a:d9:39:
                    3e:f8:97:53:d2:9d:ec:4f:e2:d7:69:51:74:2e:71:
                    42:ad:59:9b:60:02:c9:8c:a6:42:66:3c:88:1d:28:
                    36:7e:c1:aa:98:a7:df:7f:2c:bc:91:0c:98:03:d1:
                    8e:0a:48:54:d9:c1:9d:46:62:ec:13:20:65:32:05:
                    9b:9d:8d:20:ab:17:24:ba:cb:73:d8:52:5a:8b:bc:
                    d7:4f:8d:88:fb:db:df:e3:dd:c4:25:69:c2:74:e2:
                    11:c8:3f:cc:96:40:76:90:0a:c0:6d:a7:1b:ff:77:
                    46:df:a3:8a:5f:a8:4c:6b:51:f4:12:b5:c1:3e:27:
                    10:bb:fc:7d:8f:dd:cd:e9:01:92:ba:b9:c1:26:af:
                    b7:19:74:c7:9e:3e:f1:c0:09:ff:6e:e0:b3:db:59:
                    68:6e:14:f6:97:a8:da:bf:78:8e:ac:1f:70:99:dc:
                    7a:7e:5c:01:fb:14:d9:8a:7b:88:d0:7f:ac:91:bd:
                    f9:98:19:9f:79:65:e0:41:22:46:b4:fa:a6:bf:67:
                    cd:b5:c5:84:d6:52:62:56:28:01:51:d0:5d:01:6d:
                    d4:55:a0:c8:1f:3a:74:9c:60:f4:30:47:91:ca:06:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:17:F1:79:E6:49:CB:0E:88:F7:5C:B6:E0:29:0A:91:0B:33:5F:9B
            X509v3 Authority Key Identifier:
                keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:08:be:5a:39:0a:43:2a:85:7b:4d:36:23:cc:c6:56:02:
         7f:9e:56:5c:f7:1d:01:47:c5:a2:9a:3c:14:76:16:24:5d:d9:
         0e:50:6a:b0:71:53:82:cd:66:4a:0c:a9:9a:12:68:0a:18:39:
         bf:b9:5c:5c:58:42:8b:3a:48:20:c5:c2:e4:13:8e:89:29:de:
         76:19:8d:2d:66:b9:73:e9:d3:19:88:d4:8a:40:5c:f5:db:c8:
         2a:37:e2:2a:1e:4e:b7:44:37:32:88:0d:93:6a:92:00:cd:52:
         3a:ed:10:d6:0a:ee:be:90:ac:f1:42:a7:f3:69:2c:20:a4:ed:
         66:63:ab:7a:75:a2:d0:38:2f:85:5c:51:72:fe:ca:65:e8:5c:
         d4:c3:fa:7f:d2:e2:4c:ee:4e:18:91:be:12:d6:44:75:5d:25:
         5d:5a:5d:a1:c7:72:d8:ff:c7:44:9e:9d:00:9a:94:ca:da:44:
         92:30:2e:cb:57:9b:16:0f:b4:43:62:54:1b:40:9a:50:66:26:
         cb:9d:6f:fb:67:e0:6b:55:fa:9d:92:0e:16:ad:d8:41:6d:2a:
         83:3d:48:58:24:9d:04:8b:ce:ff:10:f4:85:26:88:4b:28:e4:
         33:83:af:82:ff:40:22:b5:a0:4c:5a:09:16:13:44:37:eb:51:
         f5:9d:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:08:29 2026 by rpki-client