Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
File:                     d27ATX5nmIYhbQe8cijbUo88hv0.mft (raw, json)
Hash identifier:          3DutWhiKSdsGH0k+EGbakkoxdP0x4wWH6Rcey4VMoZg=
Subject key identifier:   A8:00:BD:78:EF:87:5C:68:98:8A:12:8E:4F:79:5A:06:4B:59:CF:3E
Authority key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Certificate issuer:       /CN=776ec04d7e679886216d07bc7228db528f3c86fd
Certificate serial:       019EC3A523933E2134FC23DFDA085A96EF72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
Manifest number:          8C
Signing time:             Sun 14 Jun 2026 01:00:40 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:40 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:40 +0000
Files and hashes:         1: Gesfsa1mPZDnaCG5I-S24-ylDHM.roa (hash: 2IV3q7ceTfOxNOfoF+NvFTTxBpL0Fe+G/gUYs6fQZiU=)
                          2: d27ATX5nmIYhbQe8cijbUo88hv0.crl (hash: Pv6HlQPswFZ2+BbdapkuGCiey+T6UODAyQtZzS+Zryc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:23:93:3e:21:34:fc:23:df:da:08:5a:96:ef:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776ec04d7e679886216d07bc7228db528f3c86fd
        Validity
            Not Before: Jun 14 01:00:40 2026 GMT
            Not After : Jun 15 01:00:40 2026 GMT
        Subject: CN=a800bd78ef875c68988a128e4f795a064b59cf3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:e0:0c:d4:f2:84:81:23:d6:68:0d:8a:16:
                    a5:f1:e5:7a:e1:7d:77:ef:62:1f:4c:d0:da:58:cc:
                    38:47:ed:23:5b:9b:99:d1:c1:6b:0b:49:a1:99:5f:
                    23:78:a9:9e:2f:13:18:d3:9e:69:80:36:d6:7f:0e:
                    64:19:a8:ee:db:a9:03:c2:c1:5a:51:28:fe:b1:4f:
                    8e:5f:85:aa:24:38:51:9f:bb:4b:f7:9e:69:ea:44:
                    95:2d:75:be:b8:bf:cc:ca:86:6a:ed:ae:0e:32:b2:
                    e5:c9:bf:e0:86:fa:29:4c:85:55:44:2a:e6:5a:74:
                    f7:c1:2e:92:50:0a:b3:d1:c9:93:98:18:41:d3:d5:
                    e8:f8:87:1a:a9:6c:3a:b3:cd:0b:db:8a:d7:43:dd:
                    fa:3c:52:a6:f1:06:00:2e:ab:09:f8:56:72:07:4a:
                    fc:1b:f3:fe:d5:65:e3:5d:63:bd:1b:81:59:e4:0b:
                    1c:40:ed:e0:3f:c9:32:18:bb:11:84:61:e7:fb:20:
                    e5:4c:fe:09:ca:88:de:56:8a:5f:ca:ce:5e:ce:e5:
                    e4:09:ca:46:f8:35:6e:f4:dc:e0:16:8a:d8:33:aa:
                    5d:58:9b:09:4d:b4:f6:0d:ac:9d:21:2b:d8:e2:51:
                    d4:21:86:63:d0:2d:67:66:19:49:e5:ef:e0:5e:21:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:00:BD:78:EF:87:5C:68:98:8A:12:8E:4F:79:5A:06:4B:59:CF:3E
            X509v3 Authority Key Identifier:
                keyid:77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:28:af:ad:09:29:3c:e6:ba:19:6e:4d:38:c0:2f:38:8e:b4:
         00:39:f8:65:d6:08:7c:67:b4:a0:13:de:82:d9:c9:f3:86:4a:
         f7:1c:39:bf:86:38:56:95:d3:9b:1d:d6:bf:c1:a5:28:c4:4a:
         5e:44:5b:35:84:60:af:8e:ae:55:c2:69:a3:d7:e8:08:e9:f2:
         96:89:3d:07:ab:e5:d5:20:8e:5a:98:8c:10:e0:96:8e:37:c6:
         84:73:e5:ef:0a:cd:a2:e3:57:60:3b:a9:f1:83:e2:09:81:e4:
         80:7f:89:9d:4f:bc:33:26:96:2c:30:fd:c6:71:0e:3d:58:65:
         11:07:4b:5f:70:d1:0b:17:db:aa:12:df:ff:d5:aa:3c:b8:7c:
         0a:8b:c6:82:38:72:49:50:bd:6a:3c:b7:c3:8a:5c:35:44:11:
         d7:84:86:70:7d:02:0b:35:35:76:b0:75:bc:84:07:f8:28:32:
         5c:8e:fa:de:90:ff:65:8c:88:ae:8f:bf:f3:45:4f:6c:9c:78:
         e4:7e:5f:0f:ab:0b:e8:65:04:64:79:09:69:c1:f9:ab:8f:98:
         b7:ba:13:7c:18:18:43:72:44:54:cd:99:e5:db:5a:c8:c5:9f:
         0c:39:73:0f:f7:9c:bf:3b:63:09:38:a5:91:e4:7a:dd:09:e0:
         cc:c9:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:04 2026 by rpki-client