Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File:                     8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier:          4lXvF0jhYviaZBMwYZ1wBWSmg57M8n0kv6FVtXIxFoI=
Subject key identifier:   A7:0E:13:91:D8:1B:77:F1:0C:8A:8F:E0:10:F7:21:D2:36:40:E2:09
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer:       /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial:       019EBFC9570951AC1B9F3C3842283F39E27A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number:          0D5A
Signing time:             Sat 13 Jun 2026 07:01:43 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:43 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:43 +0000
Files and hashes:         1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: l5WyvwehIF73jxAWJoV+kRdqlshP/aOECnuX0udnRBg=)
                          2: uBozqFCRP6q6-fMqqEdxvia5s2w.roa (hash: 7my1TEAY49gz3OCc/3WBB7kXgHGx+R9z5VTiKjlGzfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:57:09:51:ac:1b:9f:3c:38:42:28:3f:39:e2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
        Validity
            Not Before: Jun 13 07:01:43 2026 GMT
            Not After : Jun 14 07:01:43 2026 GMT
        Subject: CN=a70e1391d81b77f10c8a8fe010f721d23640e209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:6f:92:12:c6:bb:a5:34:d1:8e:79:9d:d1:
                    db:a8:af:f0:e6:df:34:5d:4c:8b:41:0f:a4:6e:18:
                    62:e2:51:c2:52:b7:e5:8c:a9:66:c6:ec:bb:59:8f:
                    a5:c0:b3:ac:9d:98:3d:30:0b:c0:2b:ea:a1:75:35:
                    66:df:b5:31:fc:a6:d3:e7:9b:7e:5b:56:2d:15:90:
                    b3:f1:fc:ad:55:67:63:77:9b:f4:4e:03:ac:a1:6e:
                    33:6f:ac:1c:07:a1:87:6d:2e:cb:c2:5e:0f:4a:b8:
                    51:d9:c5:dc:22:5c:98:a8:ed:22:52:f6:77:07:7e:
                    70:d3:6c:20:fe:9a:48:9f:5c:39:cc:3e:cb:cd:78:
                    6b:e3:9b:3a:f0:84:94:f1:7d:83:e3:cc:f3:05:9a:
                    22:66:2e:55:c4:43:d6:fb:92:90:b0:9e:c0:74:8a:
                    fd:74:2f:a9:47:bf:c2:a5:f9:99:bf:9d:e9:f4:99:
                    e5:e8:12:65:2d:32:f6:e5:24:4a:5f:1d:49:9e:60:
                    09:4f:3d:75:9c:5b:b2:de:1e:a3:44:a0:1a:34:47:
                    99:57:e9:bb:bc:08:c5:c0:66:a0:71:79:96:39:e9:
                    53:25:02:41:6a:f7:08:86:d8:b8:b2:eb:67:da:49:
                    2b:98:fa:b4:c9:75:55:78:9f:1c:5f:9b:a8:33:b2:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0E:13:91:D8:1B:77:F1:0C:8A:8F:E0:10:F7:21:D2:36:40:E2:09
            X509v3 Authority Key Identifier:
                keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ce:58:db:38:02:0c:77:54:55:ba:07:eb:29:65:59:bf:f5:
         bd:e2:d2:c8:94:af:16:ec:70:f7:8d:2e:64:bc:46:5b:d3:2f:
         30:17:14:10:8a:ba:af:58:88:30:d9:1d:01:fc:f4:30:f0:a2:
         3d:e7:74:3c:d0:a7:11:a5:7b:6a:4e:18:b0:10:50:9c:46:02:
         a1:f3:00:ad:85:4c:0b:ee:ab:dd:59:ff:f7:4d:3a:e3:d6:d5:
         f8:88:ff:0c:61:1f:b0:3c:18:88:ee:04:61:47:21:12:d9:c1:
         b9:0c:bb:0d:27:f8:a5:e3:81:3c:6e:87:9d:ee:98:5c:d1:ff:
         ce:48:6a:40:e8:7d:63:57:45:1d:5a:67:18:c7:cd:7d:0e:90:
         0f:5c:9c:f6:f5:d4:a1:d5:f6:65:b7:fd:9a:8b:27:18:fb:23:
         e9:98:2c:c4:a1:e6:31:27:8e:7b:91:fd:37:05:67:1d:7f:47:
         47:ee:86:49:9d:f4:c8:37:0f:61:29:b0:d6:89:d1:9b:c4:5a:
         f5:ca:43:8f:fd:0d:b5:ad:3a:84:a5:ad:2b:2c:35:95:64:83:
         f8:e9:8e:c1:99:f2:4e:78:32:25:50:f1:be:44:2b:14:fd:97:
         04:7a:95:dc:ac:e0:f2:3c:95:9c:c9:f9:ea:00:87:68:bf:e7:
         14:39:cf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:16:00 2026 by rpki-client