Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File:                     CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier:          fa3SnhP2LMoPDRCWNZXLCo65Qk/ILzEE4OHOMs5OPYo=
Subject key identifier:   B4:39:FF:FE:C5:90:67:03:FD:7F:50:E7:61:86:D8:04:BA:CE:6A:37
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer:       /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial:       019E9B171F27B9C30692897113EE35A6805A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number:          15DA
Signing time:             Sat 06 Jun 2026 04:00:44 +0000
Manifest this update:     Sat 06 Jun 2026 04:00:44 +0000
Manifest next update:     Sun 07 Jun 2026 04:00:44 +0000
Files and hashes:         1: 9YkWGVXxcEeUFhntlgOJ2k6-P60.roa (hash: mFqo2vRCJnr/fzWY2nuNTTUS7HuuftZH6HRgAXJSWGw=)
                          2: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: PxVSF6TI6zyRFgYF84P7aHc+MiWgvD9ITfCIMnJJgoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:1f:27:b9:c3:06:92:89:71:13:ee:35:a6:80:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
        Validity
            Not Before: Jun  6 04:00:44 2026 GMT
            Not After : Jun  7 04:00:44 2026 GMT
        Subject: CN=b439fffec5906703fd7f50e76186d804bace6a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:c0:6b:43:48:b5:93:da:eb:ad:48:03:a9:
                    4f:e6:bf:70:06:46:2c:74:ef:ef:1e:89:63:d7:3b:
                    cc:de:fb:53:6e:8b:d4:55:cb:38:a6:07:74:db:f0:
                    dd:9a:1e:6d:c4:ef:c4:e4:ba:94:5e:79:cc:0d:62:
                    c2:5b:22:0a:da:c0:35:21:15:b3:cc:a0:ab:75:b2:
                    97:70:24:4f:b9:6d:7c:c9:ae:2a:a7:b2:8c:55:35:
                    c8:a6:45:9a:06:c7:ee:7f:de:4c:eb:c5:7d:ef:43:
                    51:4e:60:7b:91:cd:d2:fb:51:20:7c:24:58:14:7a:
                    c9:11:cc:27:29:a2:34:b0:13:17:40:d8:6d:4b:66:
                    31:f4:4c:5c:e7:5a:01:f4:91:b9:5a:ac:d5:05:11:
                    e8:f8:c6:84:27:c9:ce:60:97:3e:f5:ce:0c:1c:95:
                    20:8b:c3:4f:30:ac:ea:86:60:0c:31:e9:18:08:ec:
                    b5:70:58:55:91:98:99:e1:da:ed:27:2b:1e:08:76:
                    92:87:0f:12:e2:f4:09:00:18:4f:c2:4e:d3:2f:87:
                    87:bb:c7:42:ff:0d:b3:e2:ee:d8:ed:1a:57:50:b1:
                    07:0c:a1:96:1e:19:c5:12:aa:e3:00:e2:63:f3:28:
                    36:07:5c:c3:bd:81:b5:25:eb:d1:8e:8b:f0:db:65:
                    d4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:39:FF:FE:C5:90:67:03:FD:7F:50:E7:61:86:D8:04:BA:CE:6A:37
            X509v3 Authority Key Identifier:
                keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:3c:61:03:08:96:95:20:62:08:41:67:b1:da:14:95:42:90:
         2e:35:d6:f6:57:c4:5d:76:8d:93:2d:b7:f2:a0:23:82:91:69:
         5c:03:9b:1b:7d:76:83:e8:c9:9e:e9:8f:45:e1:29:96:72:19:
         4d:9c:54:73:bf:9b:a8:a2:e4:e9:f8:dc:38:f6:1c:03:06:79:
         0c:0d:20:0d:02:9a:3a:4c:d2:fe:00:50:fe:98:3b:a4:fa:2d:
         c0:43:0a:a0:86:e7:86:b0:89:28:97:b9:73:4f:2d:5e:33:5c:
         4c:e4:22:b5:61:2a:a9:ce:6e:01:f0:07:bc:4e:47:1e:f1:0f:
         ea:16:53:0c:03:99:06:40:10:01:3e:1d:d0:cc:ec:c7:5b:44:
         c9:23:bb:fc:27:b7:95:33:82:e0:c2:18:b1:05:c8:87:99:20:
         a8:cf:fa:cb:fa:8e:ab:43:30:56:d2:77:ec:b3:45:ac:6a:5a:
         03:00:70:14:45:32:5b:7a:98:82:56:df:f0:8f:39:9a:84:03:
         e0:88:99:e6:48:8a:da:45:53:3e:22:95:f9:c0:39:3b:56:ca:
         7d:ba:4b:ae:28:1f:d8:ca:86:7e:47:c3:b8:82:0c:74:f4:cf:
         16:7c:b2:19:75:44:c8:11:86:d5:95:7e:ad:18:60:00:21:fe:
         1c:d4:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:25:28 2026 by rpki-client