Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
File:                     Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft (raw, json)
Hash identifier:          zC6Zan1Tyo3tM62voDrML8rSju4Ng2EqVkpg7KGJs7E=
Subject key identifier:   E9:FE:08:46:2A:99:B4:8F:6A:50:70:84:48:D0:C2:DF:79:67:9C:94
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Certificate issuer:       /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial:       019EC1125F96741CF59E22E76D85A673F726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
Manifest number:          10E0
Signing time:             Sat 13 Jun 2026 13:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:07 +0000
Files and hashes:         1: 1jOzSXBij5_0E-f2suF9FA2ns6E.roa (hash: Nc0F7T+rokFZEGPWl4wCwZ72VzEoKQta+d5LVxuMNuk=)
                          2: Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl (hash: Pvo74YISDpeP9XPpkehSdxWkzZWAsUcxRfAEUWIPrkI=)
                          3: VJzsM7xLy0BvWv62rRogwgx0xmY.roa (hash: r5eVuV7raUZo7rWfONsinf2tvmGiQxP2qwK0CFC96cA=)
                          4: Y1T4r7Fs3xLnU467yBjXxVxADek.roa (hash: 2REreg0NGysFv7m8SRA6AFjBorpvVS4eSFiK4h3b/NE=)
                          5: axPxdnGXgCRwQaSqTXZuNt_ZeRQ.roa (hash: 19+634b7ERlCmGPvTLiIQL850moJR3rSQ5I/u031cHQ=)
                          6: bQ8c-7koeiWAMWWzaWJffyBBvZc.roa (hash: hLJwj4Ja3tdG52rHBUCVD/JD4mLF045qQKob1dFnaXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:5f:96:74:1c:f5:9e:22:e7:6d:85:a6:73:f7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
        Validity
            Not Before: Jun 13 13:01:07 2026 GMT
            Not After : Jun 14 13:01:07 2026 GMT
        Subject: CN=e9fe08462a99b48f6a50708448d0c2df79679c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:5b:23:2a:d2:a2:de:5d:9d:5d:37:98:3d:
                    99:95:0f:d7:1b:e8:fd:cf:4d:7b:f5:cc:b8:dc:9b:
                    e9:31:d4:ea:7c:54:a3:b5:c9:96:e5:cc:f9:fa:ec:
                    cc:9e:c2:f9:64:a4:2c:19:65:ac:ec:de:45:8d:ad:
                    02:0d:46:2d:e7:20:fd:d3:21:a8:45:8f:27:d1:3b:
                    8b:9d:a1:df:6c:56:07:00:60:8c:0e:b7:2c:a0:37:
                    89:34:d6:ae:20:60:13:ae:2d:e4:18:91:f7:6b:5b:
                    8e:b1:c7:89:fe:06:d8:ea:d4:81:9a:0a:b7:61:da:
                    5b:75:77:cc:4c:b0:0d:e5:9a:bd:34:e9:2b:e4:09:
                    9e:11:73:e7:3c:81:b9:c1:3b:ea:44:4d:95:56:9d:
                    a3:03:07:4e:67:dc:da:0e:61:5a:cd:9b:6f:10:36:
                    e6:57:d1:8c:06:fa:81:93:be:ee:70:56:e9:e0:78:
                    28:5d:62:85:da:53:2a:2a:32:0a:96:33:46:f1:05:
                    55:6e:8f:68:52:bf:dc:6b:1c:de:1b:70:b7:d4:d0:
                    d3:1f:d6:55:d4:55:fa:82:bd:ae:08:ca:42:1f:66:
                    40:c6:8b:1d:f8:83:23:67:7f:49:5e:6f:88:04:20:
                    45:f1:9d:75:96:10:99:96:73:6e:f0:c9:e6:a6:49:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FE:08:46:2A:99:B4:8F:6A:50:70:84:48:D0:C2:DF:79:67:9C:94
            X509v3 Authority Key Identifier:
                keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b5:a7:4d:1e:54:60:45:c9:18:70:99:56:9e:db:ed:a7:35:
         ea:3c:99:15:05:1e:22:ab:cc:b4:c7:40:c8:81:80:8f:e2:58:
         f5:9b:a7:27:28:8c:17:11:47:1f:2c:2c:f4:24:62:77:7a:e1:
         c3:32:ec:0c:ab:a8:12:a2:28:78:f3:5d:a7:b0:6e:e0:dd:84:
         fd:b4:52:22:82:c7:0c:1b:b2:b7:fc:df:a8:18:2c:38:45:cb:
         ff:a9:1d:da:7c:6c:d5:97:79:a2:24:d0:00:f6:95:75:a9:11:
         34:01:e6:ad:85:85:f3:99:78:df:c3:2b:5c:fa:03:f1:d7:e3:
         d4:fd:0c:e0:9d:cd:3f:35:06:57:a0:9f:b2:36:dd:2c:82:69:
         7a:45:09:42:f6:23:cc:b0:74:77:bb:7b:41:2b:a1:4a:67:2d:
         e4:7b:62:a2:5c:49:f4:f7:8d:1e:f6:ac:f4:09:9a:dc:7f:70:
         fa:be:02:d4:54:b6:74:7e:c4:2b:57:14:8d:a2:04:6d:0f:92:
         6a:f2:e2:b2:5b:8a:3b:81:0a:88:5c:d4:2d:b4:76:7a:d0:92:
         b1:d1:75:9f:52:39:c4:cd:9f:d9:f8:7e:ab:29:22:c8:4e:dc:
         8a:a8:09:3b:27:09:64:6f:f5:be:11:20:00:a9:ee:95:86:15:
         8f:63:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:41 2026 by rpki-client