Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
File:                     y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft (raw, json)
Hash identifier:          9UeqOOLYxbhpc+OsH2BIlyyjyUaqV+mCOChDIv6VR2E=
Subject key identifier:   96:73:EC:98:E4:EB:FF:E3:CD:63:62:9A:7D:22:38:A5:3F:6D:10:D2
Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C
Certificate issuer:       /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
Certificate serial:       019EBEEC7A6FBFDDC87E6759EE8F3E593222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
Manifest number:          0348
Signing time:             Sat 13 Jun 2026 03:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:29 +0000
Files and hashes:         1: 8MxTJlqau9S1ZV5fA_n_hiU2OjQ.roa (hash: ZFi66z5+x2HZHjEf8Mnf2qe4zKNsSEknPsHvSK6VhIc=)
                          2: DNbiYi8RnmHbs53ufR4Wo4EOQD4.roa (hash: 1O4zlMEhLqsXNNh16SOVPGWJLESJzqVd3J7KSAE8smE=)
                          3: EBV1N0nyc3uDjy8VuxK9uZr58ys.roa (hash: Ua/lKqQMivBauR1brwmNmnYyYEQG+PCmKakmmH7OZoQ=)
                          4: wgW5ViWtyw-hcjNoVsfmKE4EIG8.roa (hash: HhTkFaNAcVHstP72WGd6nJS+mIOkBQF6lfIRGmZJYHI=)
                          5: y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl (hash: YWXgetALfYXb4Rn28YhyEy9U1zbE7aY/c+wcxs9c1OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:7a:6f:bf:dd:c8:7e:67:59:ee:8f:3e:59:32:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c
        Validity
            Not Before: Jun 13 03:00:29 2026 GMT
            Not After : Jun 14 03:00:29 2026 GMT
        Subject: CN=9673ec98e4ebffe3cd63629a7d2238a53f6d10d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:23:19:bf:57:fe:3b:a3:d1:50:1b:9c:7f:
                    d1:5d:c5:60:03:5f:cc:36:5f:5b:13:90:d9:97:6f:
                    39:b5:76:83:39:a6:5f:97:e1:a3:c3:68:19:1d:88:
                    77:6f:de:1a:b0:0a:27:84:7a:ff:48:fc:6a:9f:55:
                    10:f4:04:00:78:ab:66:1a:60:cd:72:4e:09:b7:95:
                    8e:a6:b8:dd:0f:e8:45:44:31:ab:19:b1:b8:31:d1:
                    a1:8b:33:fd:db:c4:a4:77:63:18:4a:66:ae:08:14:
                    af:66:a5:72:8b:69:ac:68:32:41:82:a4:29:32:a7:
                    ae:42:c2:08:eb:18:4f:79:58:d8:c8:51:23:6b:29:
                    76:4d:ed:18:2d:12:7d:26:77:cb:fc:20:2c:bd:ca:
                    ac:bf:cb:e2:02:ea:b3:6b:8d:3e:cd:37:19:0b:99:
                    a8:03:a2:09:37:a6:14:3e:77:85:c0:c9:c4:58:76:
                    92:4b:ad:52:54:c4:0c:2f:e8:93:1d:a7:f4:06:dc:
                    5e:c9:bf:2c:11:de:1d:e6:df:44:c0:62:34:4c:83:
                    7e:60:8a:fb:3c:38:75:fd:c1:8f:ec:99:15:08:79:
                    04:01:91:10:ad:cf:41:ef:ec:f9:dd:a0:4c:fd:63:
                    f0:3a:ac:4b:a3:78:c9:79:0a:31:d4:b4:13:c0:a2:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:73:EC:98:E4:EB:FF:E3:CD:63:62:9A:7D:22:38:A5:3F:6D:10:D2
            X509v3 Authority Key Identifier:
                keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6d:0b:df:81:2a:87:0f:a4:c7:61:1b:fc:00:81:e2:67:1a:
         e3:7c:b7:e0:db:1d:6a:dc:16:59:a7:d5:66:3f:1f:a2:11:d5:
         4e:bb:00:65:7b:24:18:4c:c3:a5:1f:9e:c5:38:fc:89:69:b0:
         01:18:95:e2:5c:be:3a:7b:67:be:4f:e5:69:06:f3:34:73:05:
         d0:ad:62:ae:8a:6c:8b:37:f5:e2:2b:eb:49:a4:1a:f0:e8:a9:
         20:1e:87:14:ed:bf:fe:78:54:d6:4f:9f:58:9f:e3:ad:2f:87:
         20:3c:14:26:49:52:51:35:82:90:04:92:7f:29:04:3d:c6:65:
         84:22:ac:9d:86:83:10:55:db:60:6a:fa:66:42:5e:f8:21:f3:
         5a:5d:83:f5:3e:8e:9d:fb:19:e6:d7:43:63:b0:fe:e0:3c:59:
         1d:db:10:f4:c5:93:92:48:5c:a3:5b:50:0a:f5:ba:b0:56:9d:
         e3:ab:dd:78:66:09:04:43:0e:cd:2e:a4:92:9d:44:09:7e:67:
         80:1d:e0:c5:0e:ee:4e:51:c7:97:21:87:b2:63:e4:cb:80:76:
         59:91:d3:5a:6e:45:74:51:63:65:3d:4e:cb:28:1c:16:fb:b9:
         05:6f:82:4f:4d:a4:74:cd:86:9f:83:91:5a:f1:ea:5d:d6:5e:
         eb:84:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:09 2026 by rpki-client