Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
File:                     sCQrfkMFPJE9Yr9duxaC_-a43-I.mft (raw, json)
Hash identifier:          IWni4hGWimoo1slblOlhtEEhaWMICbYa/tVXEzcNdPM=
Subject key identifier:   C4:54:F6:EC:47:A4:97:7F:98:CE:4C:3B:FA:31:B6:F9:1A:0A:6D:0D
Authority key identifier: B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2
Certificate issuer:       /CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
Certificate serial:       019EC17FAFFAF16EB2C5524BEAE216E23522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
Manifest number:          12C1
Signing time:             Sat 13 Jun 2026 15:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:31 +0000
Files and hashes:         1: 1--uR84TmxMmj_tqc32k0ls6g_r4.roa (hash: IA0jf36x0dXydwjCq4BOEj93DRAJ8PodXiTOIuTYy3Q=)
                          2: sCQrfkMFPJE9Yr9duxaC_-a43-I.crl (hash: 6hzuiWo8gOdv5mtAFi3OIA54HAVAGK2HrqonTo0vzXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:af:fa:f1:6e:b2:c5:52:4b:ea:e2:16:e2:35:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0242b7e43053c913d62bf5dbb1682ffe6b8dfe2
        Validity
            Not Before: Jun 13 15:00:31 2026 GMT
            Not After : Jun 14 15:00:31 2026 GMT
        Subject: CN=c454f6ec47a4977f98ce4c3bfa31b6f91a0a6d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:1e:12:00:66:12:66:42:e1:22:e4:e7:2f:
                    b4:03:d8:23:e0:88:e0:40:ec:fb:51:11:50:d8:f3:
                    dc:a3:6f:be:02:f4:4f:cc:31:9d:cc:f0:70:f2:93:
                    1c:72:d5:ae:48:60:75:1a:4b:8f:b2:71:8c:8e:30:
                    b4:4f:01:8a:e1:a3:4d:03:e4:09:ba:86:01:11:0f:
                    18:7a:eb:ec:fb:5a:8d:d1:95:a4:10:9d:5e:bf:29:
                    cf:2b:f5:49:b8:5f:ae:ab:5a:1b:21:53:14:1f:da:
                    04:78:4b:93:83:1a:29:87:49:e7:a9:34:04:49:20:
                    bb:a1:ae:d0:09:39:a2:fe:ea:54:30:db:79:f7:41:
                    d1:aa:5c:12:91:64:c4:11:d9:3e:5c:fe:a1:7b:44:
                    94:5e:97:4a:af:b6:42:26:8a:3b:f8:48:09:64:f9:
                    18:d5:4e:fd:db:4f:49:ff:2a:a4:cd:b1:1f:60:d3:
                    02:8b:04:c2:d8:1f:44:d8:18:83:78:ad:a5:8c:dd:
                    29:e6:60:84:b3:0b:2c:27:22:70:1e:25:a3:74:cb:
                    04:d0:ed:f3:a1:f5:9d:e8:d8:da:4d:c4:ca:dd:7e:
                    59:8b:d0:15:8d:ad:54:95:86:51:e6:6d:b9:7c:88:
                    9f:c9:67:05:b1:69:e3:11:80:d1:2a:00:f9:ec:96:
                    63:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:54:F6:EC:47:A4:97:7F:98:CE:4C:3B:FA:31:B6:F9:1A:0A:6D:0D
            X509v3 Authority Key Identifier:
                keyid:B0:24:2B:7E:43:05:3C:91:3D:62:BF:5D:BB:16:82:FF:E6:B8:DF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCQrfkMFPJE9Yr9duxaC_-a43-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/638f28-00d5-463b-b16c-f845bfc42f6d/1/sCQrfkMFPJE9Yr9duxaC_-a43-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:4e:43:a9:93:a1:5a:a4:59:a4:07:c2:83:7e:1d:51:d3:17:
         df:2e:c2:29:ff:c2:e8:b6:56:af:59:04:e5:6b:61:88:03:b9:
         b9:d1:50:5f:57:9a:67:f7:21:95:4b:a3:d4:55:10:ba:93:9b:
         d1:37:ab:c0:32:ef:28:1d:e2:94:53:c6:4e:95:67:1d:e0:cf:
         6a:07:21:60:2a:b1:4a:45:61:31:ae:6c:e9:2f:a5:0f:03:c6:
         e0:a0:53:35:4f:a9:bd:db:ca:41:6e:c2:c4:b2:a0:3f:3b:81:
         d3:61:03:27:7a:af:3c:50:90:5a:74:ed:b9:32:08:0b:15:96:
         f0:60:5a:f7:65:20:80:2b:a0:bc:35:db:a1:c3:f0:a7:5a:eb:
         7c:e4:64:c3:52:b4:0d:b3:e7:6e:35:fa:30:95:bf:8d:52:ba:
         5a:64:f7:8c:ef:70:8d:6d:18:3f:59:3a:08:c2:44:6d:29:6a:
         d9:76:63:2a:b3:c6:13:70:e1:67:c3:11:85:b1:dc:ea:64:2e:
         96:c0:1d:71:ce:a5:7a:0e:de:a9:67:b9:b2:25:90:a6:d0:69:
         75:f6:d6:b3:4b:df:b2:4a:1e:00:36:ed:81:09:ae:52:db:8b:
         b2:72:75:d5:c6:d0:e6:9d:a6:05:98:a1:91:57:ef:13:fe:7f:
         6b:9b:3b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:28 2026 by rpki-client