Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
File:                     pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft (raw, json)
Hash identifier:          582Q+/fXY6b/jKowrz3ApBpvAN7n+6kcPIpbjERMNYY=
Subject key identifier:   C8:37:21:DE:3B:F4:D2:54:4F:A1:B5:53:55:27:77:C3:92:95:BA:77
Authority key identifier: A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
Certificate issuer:       /CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Certificate serial:       019EBFC90053F758B402BFF57E90954B3431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
Manifest number:          01BC
Signing time:             Sat 13 Jun 2026 07:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:21 +0000
Files and hashes:         1: WlMbZGmn7ELXlYYDe9GRZvGgMVU.roa (hash: YxkhfO0kcIItDFF9reiDtyKSrNleRYkzff6/T+LQRME=)
                          2: pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl (hash: 00vCN3eXh0MFAV/N624T4tyKpLG30wLN0nuJMMK3KRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:00:53:f7:58:b4:02:bf:f5:7e:90:95:4b:34:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
        Validity
            Not Before: Jun 13 07:01:21 2026 GMT
            Not After : Jun 14 07:01:21 2026 GMT
        Subject: CN=c83721de3bf4d2544fa1b553552777c39295ba77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:cc:2e:a1:a7:3c:7d:12:3b:59:3b:92:13:
                    ad:b6:e7:e2:18:1a:53:ca:17:98:30:4a:15:ad:6e:
                    ff:76:66:51:75:61:87:89:40:48:03:05:5b:f0:fb:
                    1f:49:ef:e7:af:3a:be:84:b9:99:84:e7:33:6c:c9:
                    7c:75:ab:8a:7d:c4:93:87:be:51:b2:a1:10:21:dd:
                    5c:ed:a1:fd:20:04:61:68:b0:25:33:3f:8e:4d:3b:
                    2c:cb:9e:f2:0b:1c:b4:8a:a2:8d:b8:07:c4:e9:b9:
                    94:88:1f:65:65:ea:ec:bc:6f:6e:32:c9:40:b4:3d:
                    b6:4b:48:db:d6:69:f4:5c:e7:26:6e:0e:06:be:5f:
                    fe:48:e3:21:ee:6b:37:e9:72:7b:dd:23:ad:34:9b:
                    12:4e:ad:46:26:40:64:c6:1e:24:1d:ae:78:7d:ac:
                    7f:66:88:48:c2:55:19:d6:b1:63:2e:99:f2:71:b0:
                    fa:32:d7:1d:0d:46:44:fe:7d:ed:18:e2:36:df:7c:
                    c4:ba:7b:ee:cb:7e:f8:36:9a:50:dd:85:97:84:fd:
                    cd:23:ff:03:ce:86:25:9c:32:aa:4c:07:b1:96:02:
                    73:b4:07:da:c2:d5:39:08:a2:6f:dd:c3:cb:2a:8b:
                    f1:80:e7:6b:bb:d1:de:0a:79:fb:07:1e:70:5f:79:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:37:21:DE:3B:F4:D2:54:4F:A1:B5:53:55:27:77:C3:92:95:BA:77
            X509v3 Authority Key Identifier:
                keyid:A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:89:86:f9:de:5f:48:66:66:d8:96:84:9e:4f:69:56:1e:10:
         71:e2:3c:0b:b8:d7:19:63:dc:92:bb:09:df:69:26:42:c0:b2:
         e8:01:40:6b:18:2c:6c:9d:83:c5:38:e5:f0:91:99:dd:60:59:
         0c:a6:9d:0d:bb:dd:5f:4b:d2:10:d7:4d:ea:c3:48:43:31:e3:
         e1:9a:ae:19:58:5a:ac:01:d4:ea:64:20:40:69:52:b5:21:43:
         61:fa:1d:26:00:a1:50:df:87:6c:55:c8:1b:cd:d3:3b:b4:e1:
         cd:62:3b:62:0d:a2:17:73:ba:42:b4:5d:23:ed:76:b1:93:d8:
         9b:cc:66:f7:ac:9d:fe:ad:0b:bf:da:65:ff:0b:d3:02:9f:90:
         4f:85:ec:df:19:70:5f:bd:94:1c:d5:b4:e2:10:e3:63:b6:29:
         4c:e8:48:60:26:a3:96:5e:5d:24:71:54:7f:9e:44:8e:fb:01:
         28:84:4f:a2:b0:e5:6b:ff:24:2a:64:55:69:d8:b1:71:c0:54:
         fc:0d:d2:7c:22:87:67:58:82:3a:b8:6b:94:fe:0a:e7:80:81:
         a9:6b:20:9f:9b:0c:ed:a4:86:c0:ef:d9:1f:fb:39:57:76:68:
         1c:e0:ef:58:86:79:99:15:5d:a4:48:95:b0:b5:1e:87:4e:80:
         7f:29:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:41 2026 by rpki-client