Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
File:                     jHsYNFo5NBpyYndRMIwc4C9GoLs.mft (raw, json)
Hash identifier:          uBD+KSo92d004OX2DLuJRydOyfJxqiGglk0qsp56vfs=
Subject key identifier:   C8:A7:02:8C:89:3F:B0:51:76:98:0C:D6:6D:98:F2:FB:7D:61:0C:18
Authority key identifier: 8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB
Certificate issuer:       /CN=8c7b18345a39341a72627751308c1ce02f46a0bb
Certificate serial:       019EC06D0F89BB5FA6E8AC42A9661F10F372
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
Manifest number:          0A74
Signing time:             Sat 13 Jun 2026 10:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:33 +0000
Files and hashes:         1: AYUN6ILq1JnFNEGuiy9hczdbqfk.asa (hash: bnGV0TOXh2rgHledmfvQi6p7Cgl6Yx1IR8kXhvgGxxg=)
                          2: jHsYNFo5NBpyYndRMIwc4C9GoLs.crl (hash: B3Z+jSO0wqqckSFasUKESVB2emK8learYtIuTpr8qDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:0f:89:bb:5f:a6:e8:ac:42:a9:66:1f:10:f3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7b18345a39341a72627751308c1ce02f46a0bb
        Validity
            Not Before: Jun 13 10:00:33 2026 GMT
            Not After : Jun 14 10:00:33 2026 GMT
        Subject: CN=c8a7028c893fb05176980cd66d98f2fb7d610c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:16:aa:fe:6e:ae:11:db:0a:7e:42:32:62:
                    53:0b:85:0f:a6:84:21:45:69:d7:c3:ee:24:b8:7d:
                    8c:52:89:9f:33:cb:2f:6d:2d:63:41:8a:93:50:52:
                    2b:42:a3:1e:9b:cc:c7:b7:4a:62:4c:fd:91:5d:eb:
                    bd:20:71:35:b2:89:08:e5:63:6b:26:be:00:f4:08:
                    ac:b6:cc:ab:28:6c:d1:c3:5a:7e:38:55:6e:7c:54:
                    94:e9:ec:29:26:0b:79:eb:6b:25:f5:f3:1d:1d:05:
                    fa:43:3f:57:e8:6d:e6:0b:ad:fb:a3:ba:fb:c8:66:
                    f6:c4:bf:b7:32:31:e3:79:d9:89:ac:30:6e:9e:71:
                    7b:30:a8:b8:e0:50:08:a3:f6:40:d7:21:5a:e6:b3:
                    c4:a3:9a:cd:1d:e8:9a:08:20:4b:8d:20:47:42:b0:
                    ca:20:70:5a:ac:63:8d:ca:e8:91:b5:3a:e0:f7:2b:
                    64:da:46:bd:49:0d:f3:40:73:fd:58:94:d6:75:84:
                    23:8e:65:1d:8d:6f:1f:e1:34:f4:0a:5a:af:bf:03:
                    7c:66:f9:07:65:73:c9:b3:32:90:72:ac:92:ae:15:
                    8a:5f:68:fa:23:4d:d8:e8:ca:8c:1d:c8:75:8a:6e:
                    ee:f6:47:3c:06:8a:34:f3:30:88:0c:be:f8:10:cf:
                    fc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A7:02:8C:89:3F:B0:51:76:98:0C:D6:6D:98:F2:FB:7D:61:0C:18
            X509v3 Authority Key Identifier:
                keyid:8C:7B:18:34:5A:39:34:1A:72:62:77:51:30:8C:1C:E0:2F:46:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHsYNFo5NBpyYndRMIwc4C9GoLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ff4f12-5290-432d-b1db-53ca0d65dd5e/1/jHsYNFo5NBpyYndRMIwc4C9GoLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3f:59:2f:c9:b6:c2:41:b6:97:27:1b:a8:63:d5:97:67:c7:
         66:de:48:7c:00:e1:d8:63:57:8d:a6:61:37:63:01:4f:77:b3:
         ee:ba:c7:4a:72:81:1d:be:d4:3e:ad:c9:6e:f3:ee:79:f5:3c:
         88:6f:c1:fc:53:1c:be:c8:98:78:96:b5:8a:cb:fc:fe:e1:c4:
         c8:9f:ff:cd:2f:67:39:ac:2c:b7:1b:3b:3b:73:62:ba:7f:27:
         c8:72:ae:60:2f:2a:ff:93:c0:d7:91:88:7b:7c:44:a0:22:83:
         24:c5:0d:1e:67:ef:af:c0:77:50:49:7e:65:cb:32:03:b0:9d:
         22:9c:1d:d5:2c:35:2b:ed:4e:08:57:64:e9:23:bc:e9:ed:f0:
         db:86:58:e6:92:d2:b1:25:16:af:b9:6c:ec:f5:72:66:6b:5f:
         5c:c9:88:05:fd:f2:84:e1:4c:a7:fa:69:06:34:38:93:84:7a:
         07:4b:bd:74:99:f6:0b:c0:ee:b7:7a:83:41:c1:87:cd:ba:02:
         41:5a:17:9f:f8:fa:6c:70:81:d6:07:02:b7:31:bd:bf:e7:08:
         f9:7d:ed:ae:0d:ca:84:de:52:f9:44:d2:50:60:5b:c4:46:5b:
         f3:8b:d8:ba:29:88:a6:88:bf:52:27:b8:85:08:ba:18:00:b0:
         14:dc:78:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:13:49 2026 by rpki-client