Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File:                     1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier:          4xv6WckeTY9tsU4iniprIQCEkyZzNiMswU7FmLI4JN8=
Subject key identifier:   A8:B6:8A:37:A7:EB:B5:05:7E:F7:EB:15:43:6D:4F:E5:A5:2F:11:4E
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer:       /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial:       019EB845A9F150B79DE47E0B754078B5C442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number:          0DFC
Signing time:             Thu 11 Jun 2026 20:00:33 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:33 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:33 +0000
Files and hashes:         1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: KHwizZbRbH0hJ1a98OZUz+zSCLXKXo/ZV+5/++wRyOs=)
                          2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:a9:f1:50:b7:9d:e4:7e:0b:75:40:78:b5:c4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
        Validity
            Not Before: Jun 11 20:00:33 2026 GMT
            Not After : Jun 12 20:00:33 2026 GMT
        Subject: CN=a8b68a37a7ebb5057ef7eb15436d4fe5a52f114e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:74:91:b4:3b:c4:51:83:17:c3:59:14:f9:
                    25:34:8c:d8:c4:c7:4e:df:4d:73:05:25:2a:0c:77:
                    16:da:53:8b:ed:cc:ee:5f:b6:2b:9d:67:99:d5:08:
                    58:46:42:b8:8e:23:bd:a4:84:23:00:48:a8:44:28:
                    57:8f:55:3b:9a:81:32:2c:19:a8:fd:62:44:06:c1:
                    f2:62:41:02:41:f2:4b:fc:be:74:a8:d3:cd:7a:e0:
                    51:6a:38:e3:ee:a9:27:c5:02:6d:f2:ce:66:d8:4a:
                    13:ec:0a:5c:7b:bc:65:7d:a9:6b:9b:d7:f3:be:6b:
                    da:71:e2:51:61:f8:f2:17:2e:23:b0:30:b5:e4:d3:
                    fc:58:56:49:5c:86:cb:f2:a3:ae:d3:ae:a5:17:f4:
                    7a:1d:06:55:04:ad:4f:fc:25:03:20:44:00:d5:d3:
                    99:20:7d:f8:ea:54:74:0f:55:b8:98:42:11:2b:9a:
                    96:f9:19:4e:f1:77:d6:ce:1a:f4:39:1b:61:82:2e:
                    ca:7a:95:00:c6:ed:d4:f6:78:e1:ea:54:40:a3:3f:
                    cb:60:1a:69:45:af:2c:87:2a:5e:3f:de:de:3e:d4:
                    28:e5:61:72:52:25:e8:23:3a:ba:14:41:93:9e:85:
                    66:4e:e7:7a:ad:77:26:93:f8:8c:03:37:15:c1:db:
                    68:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B6:8A:37:A7:EB:B5:05:7E:F7:EB:15:43:6D:4F:E5:A5:2F:11:4E
            X509v3 Authority Key Identifier:
                keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d3:32:b4:aa:4c:be:5a:eb:b7:75:b8:c1:15:a1:f2:9c:75:
         16:eb:3e:df:a0:b2:0a:8f:93:63:3d:65:da:e3:4c:c3:8e:50:
         bf:a9:c9:eb:73:84:66:2a:90:05:54:ff:dc:92:9e:54:d1:99:
         27:14:96:50:aa:c2:da:2e:63:73:24:e0:5d:79:cd:d5:22:88:
         64:ba:56:ee:21:c2:ef:d4:94:10:a6:2a:f2:ef:a6:8a:52:4a:
         5c:ef:86:11:f3:79:29:51:28:67:8d:4e:49:6b:dc:a2:70:dc:
         d1:17:25:b3:3f:57:85:21:a2:c7:e7:5d:a6:3a:92:3c:09:fd:
         ef:4c:85:62:0b:b4:50:96:f6:87:11:93:59:7d:97:66:6d:b6:
         65:f6:5c:61:7e:45:b8:d4:c8:de:77:f3:f8:e6:ed:d5:63:d8:
         53:10:b2:80:f8:94:4c:33:b4:d5:70:79:33:3e:60:f6:95:a3:
         03:91:b0:b9:f6:98:66:57:d8:18:b6:a9:82:38:51:b8:43:95:
         e5:db:44:cf:ae:b2:8c:d0:d4:22:e5:5d:f9:5d:c0:df:6b:ca:
         21:ec:28:6b:da:72:d2:c8:24:af:d5:88:cc:6f:e9:ce:04:bd:
         37:44:7a:15:f1:e4:6b:f2:93:fa:2b:42:5f:ec:5b:f2:18:3d:
         14:fe:59:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:04 2026 by rpki-client