Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File:                     4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier:          rkHhqthhA8w63y4zO6NajjWkAXdiiIWDc24b8EMYOwI=
Subject key identifier:   9F:79:F7:EE:12:1B:A0:81:AB:06:44:82:39:8C:9C:FC:D6:B7:A8:4E
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer:       /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial:       019EBDDA767D3BD684E7C09D9D486662C69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number:          0B97
Signing time:             Fri 12 Jun 2026 22:01:11 +0000
Manifest this update:     Fri 12 Jun 2026 22:01:11 +0000
Manifest next update:     Sat 13 Jun 2026 22:01:11 +0000
Files and hashes:         1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: jsUp7wqWD74YfmwQ2BlyIc/j/0lT0MPMWGP+L/6DyCw=)
                          2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:76:7d:3b:d6:84:e7:c0:9d:9d:48:66:62:c6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
        Validity
            Not Before: Jun 12 22:01:11 2026 GMT
            Not After : Jun 13 22:01:11 2026 GMT
        Subject: CN=9f79f7ee121ba081ab064482398c9cfcd6b7a84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:06:b2:1b:9b:8c:e2:c9:37:61:d5:5a:2c:35:
                    d8:3c:22:a7:54:81:37:af:a4:3f:f8:a8:21:f3:00:
                    af:80:21:d2:75:65:a2:7f:4d:da:98:2e:39:90:85:
                    c6:d1:e6:34:14:54:6e:87:9d:28:2f:2b:a3:fd:7d:
                    48:02:6f:8e:13:54:a3:b2:75:b3:57:3f:ab:90:90:
                    b9:a9:aa:29:d0:b8:d6:9c:a6:cf:8c:ac:40:58:f8:
                    68:8d:52:ea:5b:e9:fb:d0:66:99:d3:b4:91:a1:e7:
                    6b:d3:b1:81:2e:00:ff:53:54:67:13:42:7b:b1:ff:
                    41:ae:e6:48:8d:c3:78:40:b7:e6:24:4b:92:49:49:
                    fa:0d:0d:5b:4c:39:50:bb:eb:4f:14:36:95:b9:34:
                    16:6d:49:53:46:cc:70:27:38:9a:42:57:da:f6:f1:
                    bb:77:91:cc:ce:87:20:70:79:1c:12:61:c0:4e:d8:
                    a0:0c:df:06:e8:6e:2d:c9:00:3a:46:27:7f:2a:b3:
                    e5:5b:a4:2f:99:de:4e:de:e3:22:db:89:de:60:bc:
                    48:f0:70:13:b9:fb:bd:73:05:e6:19:39:86:71:e1:
                    d7:ae:ba:dd:98:aa:d0:0c:7d:5b:6f:a2:a0:6d:af:
                    28:1e:74:23:78:2a:38:43:35:c4:92:e5:25:02:75:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:79:F7:EE:12:1B:A0:81:AB:06:44:82:39:8C:9C:FC:D6:B7:A8:4E
            X509v3 Authority Key Identifier:
                keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7a:44:e1:5f:c5:4f:b6:c5:7c:5d:f1:ae:15:96:a3:1b:b3:
         fe:ea:50:78:bd:90:29:0a:0d:4b:43:8a:e0:89:ac:ba:cd:48:
         51:a1:69:9e:6a:67:56:3c:f6:72:56:e1:e3:18:f9:53:88:a6:
         19:f1:2a:4b:9d:55:c8:cd:45:e0:37:88:6a:c3:6f:d9:2f:f3:
         2e:49:05:c4:c8:c4:72:49:f9:7a:2b:b3:d1:03:c2:77:08:17:
         b4:2d:24:47:74:56:5d:6b:38:7d:4d:02:f3:35:05:21:47:02:
         4e:66:06:98:93:df:ef:4c:01:e1:17:cf:84:fd:1e:a6:25:f5:
         ca:09:31:3b:42:f5:ea:88:ce:8f:f6:76:4c:a2:47:8a:39:33:
         83:f9:ff:90:94:9d:f2:9b:f6:85:7e:52:43:99:4a:bb:7d:75:
         9f:ec:07:2c:38:c2:2d:d8:b8:1f:85:ea:07:9a:6a:10:c5:d2:
         fc:4e:db:fd:79:d0:02:15:a4:03:27:39:e4:4c:50:bd:1f:1d:
         cb:a9:84:07:38:8a:8f:d2:70:5d:f5:c5:c9:5b:86:02:ce:44:
         aa:a3:6a:65:01:76:8a:37:c0:69:52:53:3d:64:91:51:14:42:
         a8:de:9a:62:f4:1d:4f:b7:17:d8:98:27:d1:54:b4:a5:44:6c:
         8a:b8:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:25 2026 by rpki-client