Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File:                     RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier:          PF3bhej9Gs9a/Bzy9nm31OXfpZd0zVcK/0v8ka/2CDA=
Subject key identifier:   43:CF:DC:ED:74:4F:08:D5:FE:2A:D7:AE:18:33:09:D7:49:2A:09:77
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer:       /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial:       019EC03630EF86F4DBF3E3BB80DB91271D29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number:          145D
Signing time:             Sat 13 Jun 2026 09:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:37 +0000
Files and hashes:         1: 2SIXUZTGLSsuNmHnmH_XZgRCYVY.roa (hash: kuoWaUJI+dAA7ih84KRN5TqDkuF9bUAxQjQzkKOCjIc=)
                          2: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
                          3: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
                          4: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: 5rYpC15akELnyHDis4UGgYRIU4PdGn9//cCSnVoy2Rk=)
                          5: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
                          6: oI0gNsAnUZaiiR1_JxvhZXrdyvc.roa (hash: PZhUlF96CrIiZt17nWZPHRO35kGXkmt9vTJKXgGorHc=)
                          7: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:30:ef:86:f4:db:f3:e3:bb:80:db:91:27:1d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
        Validity
            Not Before: Jun 13 09:00:37 2026 GMT
            Not After : Jun 14 09:00:37 2026 GMT
        Subject: CN=43cfdced744f08d5fe2ad7ae183309d7492a0977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:0c:38:1b:0f:12:f5:2a:bf:e6:53:be:21:
                    f1:45:6f:ad:c5:a9:75:88:e5:71:32:64:52:73:3f:
                    8b:0f:99:cf:f2:e3:ae:f8:85:03:1a:0d:89:57:f0:
                    42:93:bb:70:f2:91:a7:7a:f9:33:5a:fc:a3:af:da:
                    35:35:b1:63:0f:b2:63:52:b8:cd:fd:5a:34:44:43:
                    7b:01:1d:34:e0:02:59:83:3b:db:dc:e8:41:f8:f1:
                    56:7b:03:0e:e2:76:f7:a9:3b:7d:95:a7:1c:e9:0a:
                    ab:5d:08:45:13:ff:85:22:8a:a4:49:01:47:74:0d:
                    b3:82:77:07:85:1c:f2:00:da:82:a2:3e:2e:6a:3a:
                    3e:6e:a1:f6:77:03:2d:6c:a5:76:26:10:91:8a:d4:
                    c3:43:59:98:a1:05:5e:97:4a:7b:e6:ee:6b:a8:79:
                    60:42:d6:5c:bc:a8:c3:1f:a2:1f:74:c0:75:1d:9c:
                    6f:43:c2:21:e9:89:0b:80:85:a7:a6:dc:7a:c7:f7:
                    ec:98:e7:4f:80:6e:59:5a:42:6d:af:ee:a0:7c:1e:
                    17:b3:78:e0:ad:c9:b2:fe:7c:09:7f:c8:d7:4f:db:
                    c3:ef:fd:61:45:ad:ca:8c:33:e2:9b:31:77:6c:b4:
                    7e:58:6d:7c:7d:a9:2a:ec:93:c1:53:f8:d6:42:6b:
                    92:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CF:DC:ED:74:4F:08:D5:FE:2A:D7:AE:18:33:09:D7:49:2A:09:77
            X509v3 Authority Key Identifier:
                keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fe:65:60:8d:1b:46:4f:1d:32:7c:3f:77:8c:bf:eb:59:9b:
         51:26:00:4a:ba:ab:c9:83:1f:92:ee:70:6a:1a:d2:52:20:eb:
         24:36:c2:86:69:ae:76:27:d8:92:0e:a8:c8:08:9a:89:2a:cb:
         41:98:66:83:7b:44:aa:b1:4c:02:c0:7a:99:64:75:4d:e9:da:
         13:ce:05:f0:6a:62:c3:a7:b7:8b:8b:4f:e5:07:ae:6c:eb:8e:
         ff:82:8b:be:7e:93:1f:46:b5:17:13:46:92:01:d6:d1:e4:44:
         76:ee:fb:4e:b3:56:72:8f:54:89:f9:08:68:56:23:40:dc:5c:
         b0:5f:7e:5e:6b:a8:22:ee:66:bd:96:62:ce:e4:b1:b0:2a:d9:
         57:f5:9a:d5:2d:97:13:0a:8f:62:59:b6:92:f0:9d:1e:0d:ad:
         04:55:b9:37:43:0c:4d:17:f1:88:90:1e:60:0c:46:0a:bd:25:
         f8:56:5f:2d:29:c1:26:a3:f9:8f:4d:f7:ce:73:ec:40:47:fe:
         97:0a:91:87:e8:01:79:3b:10:f8:df:e3:57:0f:16:38:7b:e0:
         68:3a:ef:73:ce:a1:0f:d9:79:fe:4a:b6:01:c3:b3:e5:4c:e8:
         ca:eb:ef:1c:54:84:a0:e5:b2:0c:28:0c:2a:4d:18:19:1a:06:
         40:72:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:35:01 2026 by rpki-client