Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          id8NEqI84c/ePAZHTDDMbC+fnER8FkURQ8dCje1mm88=
Subject key identifier:   00:C4:DC:98:CA:C8:A1:1D:28:5F:94:D1:D9:0E:7E:D4:08:1F:16:C3
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       019EBFC7FA05538F22CC8D8842856F9FF39A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          08A4
Signing time:             Sat 13 Jun 2026 07:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:14 +0000
Files and hashes:         1: 2zOKVHZfMm9AxAnIgk6BSVssqPo.roa (hash: UxUPcLpqbBTjs1BO/RAIL95/BplOFFKqBnWYZsn/g5c=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: 3z2DaaEcxd+PYogx6/gwq75xBfw5hMfJpEix6k9lvAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c7:fa:05:53:8f:22:cc:8d:88:42:85:6f:9f:f3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Jun 13 07:00:14 2026 GMT
            Not After : Jun 14 07:00:14 2026 GMT
        Subject: CN=00c4dc98cac8a11d285f94d1d90e7ed4081f16c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:34:43:26:9f:02:52:73:17:9a:3e:2a:a8:
                    c9:35:bf:1d:be:ae:31:e1:18:4b:e3:70:de:fb:e6:
                    c2:ba:48:02:ff:ba:ee:36:d8:f8:06:7a:63:25:73:
                    a2:f8:0f:4f:f7:85:d0:46:f0:ee:ac:90:9d:ff:2d:
                    f6:c8:75:24:64:59:2b:dd:87:4f:8d:a0:2a:10:4f:
                    0a:72:bc:66:ea:0a:bd:65:e7:bc:66:aa:6f:ad:c7:
                    44:1d:04:79:8d:d6:87:26:3d:a5:9b:e9:f7:ec:f4:
                    ab:91:28:1c:3b:5b:08:76:2d:02:5c:10:46:43:61:
                    0a:3f:2d:35:ff:46:67:97:c2:21:d4:9c:aa:c2:6d:
                    e3:05:69:9e:0b:32:46:99:3b:e5:be:af:5e:fc:dd:
                    44:5f:f5:44:24:8d:65:72:05:90:79:35:64:12:c5:
                    54:bf:3f:ba:32:50:c6:be:38:db:e1:3f:74:17:bc:
                    4c:a7:1d:d0:1f:7e:a3:2f:76:ef:81:38:e0:26:e1:
                    62:bf:26:16:87:7d:16:c5:9a:42:51:7e:6a:e8:49:
                    b6:30:d5:c0:be:cf:65:5e:8f:02:ea:3d:d1:1a:46:
                    67:7c:34:76:43:88:94:9d:2b:34:b0:e1:72:77:6f:
                    62:33:3d:28:e6:99:3d:86:4f:dc:f7:2a:1e:ec:76:
                    e1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C4:DC:98:CA:C8:A1:1D:28:5F:94:D1:D9:0E:7E:D4:08:1F:16:C3
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:73:c0:73:d1:92:71:b3:4a:7f:6f:ac:9c:09:5c:4a:de:fb:
         2f:6a:78:af:17:5f:8d:21:15:10:49:65:70:f1:6f:6a:c7:cc:
         7f:13:18:58:c8:12:ca:b2:20:e2:aa:cc:e6:83:2b:32:8c:0f:
         9c:2b:ce:9b:10:f1:ac:94:4b:cc:ff:99:85:4f:93:b2:61:08:
         d8:8f:0b:58:18:96:42:59:b9:bf:86:47:2e:6a:98:49:ff:d8:
         d7:87:3b:05:ab:78:28:0a:9d:72:b0:13:b8:eb:a7:94:10:ec:
         db:4d:42:1c:28:50:e7:e1:35:42:fd:83:ab:71:79:ce:b9:77:
         12:b0:2c:fd:01:f7:2a:6b:72:41:35:04:9c:f0:e4:13:d9:6d:
         3c:c9:f8:69:e1:9a:ed:d0:00:db:31:bc:18:30:c7:7f:0a:55:
         8e:88:ac:2c:6f:76:ee:c9:f3:b3:e5:5d:4d:9e:c7:15:e5:e0:
         b1:7d:65:41:80:5b:3d:bf:a3:cf:3c:1f:84:27:d7:dc:02:1d:
         f7:09:ee:f6:eb:c6:30:c2:55:f7:93:c6:f9:b4:d7:4d:b7:26:
         39:a7:4c:c0:82:5b:85:ea:61:e1:80:4a:4f:fa:06:98:19:15:
         b0:0f:68:d6:01:6e:ad:45:d6:28:ec:76:5c:43:80:72:3e:00:
         88:61:0c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:10:25 2026 by rpki-client