Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
File:                     IOI90FhJzIEyVauNG4U_ucRdhpQ.mft (raw, json)
Hash identifier:          afLL3PrRdGUXkqTZBjfKGXFRfidVkxmv82U6//x1hqQ=
Subject key identifier:   6C:51:16:E1:69:C3:E4:4F:D0:DF:C8:F0:AF:FF:19:85:5F:F9:60:69
Authority key identifier: 20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94
Certificate issuer:       /CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
Certificate serial:       019EB958BC731905D2EB766B42296EB67377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
Manifest number:          0359
Signing time:             Fri 12 Jun 2026 01:01:00 +0000
Manifest this update:     Fri 12 Jun 2026 01:01:00 +0000
Manifest next update:     Sat 13 Jun 2026 01:01:00 +0000
Files and hashes:         1: IOI90FhJzIEyVauNG4U_ucRdhpQ.crl (hash: pexHXJm12qiwLBobzBeAaydzRaL+vtS1ztbRz3oS4Uo=)
                          2: ZVUh7y26ToxL-oq8YITOKQgfF08.roa (hash: mGiVKv+1/ai9DnwEadL7YecZ7TPX9VgOuJDaNOyNIA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:bc:73:19:05:d2:eb:76:6b:42:29:6e:b6:73:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e23dd05849cc813255ab8d1b853fb9c45d8694
        Validity
            Not Before: Jun 12 01:01:00 2026 GMT
            Not After : Jun 13 01:01:00 2026 GMT
        Subject: CN=6c5116e169c3e44fd0dfc8f0afff19855ff96069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:d9:ae:9e:7e:12:4b:b5:a9:37:c1:ac:18:
                    72:e6:23:ed:42:09:3e:71:90:00:8a:e9:37:04:e1:
                    33:00:1e:fc:dc:f2:ad:d4:85:fe:a1:88:f6:47:10:
                    72:75:76:e2:f4:90:49:ec:f4:17:b4:56:fa:d1:bc:
                    7e:b6:45:ba:91:58:79:82:ff:12:b3:74:c6:7a:cd:
                    22:a4:53:08:7e:94:9e:89:1e:75:2d:e3:24:30:eb:
                    26:4b:13:cf:3a:dd:4a:51:9b:c8:46:2b:51:fd:49:
                    d4:fd:a1:1a:48:d2:30:b9:dd:e8:b4:4e:96:9c:f5:
                    3c:63:b8:3f:27:a7:a9:45:09:90:be:76:15:b3:a2:
                    43:96:6c:00:2e:ce:94:4c:b4:c0:f9:6c:ba:47:3d:
                    17:fc:29:a0:d6:51:aa:1d:b0:91:6f:7b:c7:00:43:
                    b1:4d:52:97:8a:e3:34:92:ef:63:84:23:8f:22:11:
                    69:95:a9:a9:6c:40:ef:5f:9a:bf:fc:d9:d1:10:67:
                    72:bb:0a:4c:e3:28:48:05:29:c2:fc:bb:0a:44:52:
                    3b:e9:8a:4d:ac:2b:01:67:ee:48:f1:74:d3:bb:b3:
                    62:c5:95:e0:28:db:9c:66:83:cc:c2:a4:67:f1:6f:
                    3e:5d:16:f9:46:cd:88:07:1b:6c:c3:8b:1e:c9:3e:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:51:16:E1:69:C3:E4:4F:D0:DF:C8:F0:AF:FF:19:85:5F:F9:60:69
            X509v3 Authority Key Identifier:
                keyid:20:E2:3D:D0:58:49:CC:81:32:55:AB:8D:1B:85:3F:B9:C4:5D:86:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOI90FhJzIEyVauNG4U_ucRdhpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c16717-855d-4391-b79f-b888a3124454/1/IOI90FhJzIEyVauNG4U_ucRdhpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:49:06:c8:33:09:52:c6:55:6a:44:f9:d7:e8:6f:59:1e:
         e1:18:11:2b:0b:10:c1:19:d0:b7:cc:cc:9e:bf:17:ba:8e:de:
         3d:81:f7:a3:8e:b3:b5:b3:9b:2f:a9:1f:e5:05:82:3b:00:d3:
         ef:81:1c:a0:e0:0c:7b:82:89:21:a2:8b:13:c4:1d:71:dc:64:
         65:3d:a3:b9:ed:4a:03:10:1e:15:52:1a:4c:f8:9c:30:3a:5a:
         69:32:07:3a:d1:e2:71:cb:3a:5f:08:14:f4:a1:20:d7:e1:3e:
         09:eb:9b:18:91:91:c1:8e:af:b7:d6:a2:9e:24:65:b5:4f:80:
         45:f9:a2:73:8b:01:78:7d:cb:c8:1f:1d:4f:1f:87:a9:93:a2:
         37:68:59:1a:1c:d1:f1:94:6d:5e:dd:0c:f4:9e:93:17:1b:f1:
         dd:33:af:1c:15:b2:71:5f:21:af:38:81:c3:93:1b:f0:63:0e:
         03:21:a2:a6:1f:8a:56:ef:93:4f:08:63:db:6b:6f:ad:33:e3:
         51:62:73:c8:25:ec:a8:a8:2b:bb:f2:5c:3c:f9:7f:e8:16:d5:
         42:13:66:59:60:bd:f0:c2:2a:1f:57:7b:16:f8:a1:ce:e6:0b:
         a3:ad:d2:9b:c9:c5:b6:b9:d2:31:ee:e3:64:dd:c7:30:23:66:
         2a:8f:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:29:07 2026 by rpki-client