Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
File:                     6ocBJxa2bugiZCwvChuQFItceyk.mft (raw, json)
Hash identifier:          vJD5YVYXDy7z2zfYjB7uTRLf0d/fSjosr0g4E/TBbKc=
Subject key identifier:   A8:DA:90:04:C7:BE:2F:2F:A2:28:3A:25:18:AE:B7:03:D7:8A:A5:AB
Authority key identifier: EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29
Certificate issuer:       /CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
Certificate serial:       019EBE7F8312F8BBA8DA8349B69081B4ED56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
Manifest number:          10AA
Signing time:             Sat 13 Jun 2026 01:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:28 +0000
Files and hashes:         1: 144eyzU15_7IM3-50Fn3yd-TPPE.roa (hash: CG72Nchm10xuRr8f1Bb+XAZQZQ9cILYiGnedodDRgi0=)
                          2: 6ocBJxa2bugiZCwvChuQFItceyk.crl (hash: z228MU71xrVmif7uZ4jBoQ/+oJJodL33QbpUoZ3t5fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:83:12:f8:bb:a8:da:83:49:b6:90:81:b4:ed:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea87012716b66ee822642c2f0a1b90148b5c7b29
        Validity
            Not Before: Jun 13 01:01:28 2026 GMT
            Not After : Jun 14 01:01:28 2026 GMT
        Subject: CN=a8da9004c7be2f2fa2283a2518aeb703d78aa5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:d1:16:a8:a7:aa:79:12:7f:a4:01:22:3c:
                    27:88:cf:a1:aa:57:ce:4c:8a:a9:28:23:47:5a:1a:
                    a8:e9:c2:fe:ff:5b:8d:60:d0:39:02:5f:bf:06:8e:
                    ac:64:85:9d:f5:85:8a:f4:51:48:b2:08:ed:ec:3f:
                    da:53:b6:50:0a:bd:5c:2a:2a:7d:2e:cc:7f:ee:38:
                    58:75:fd:ba:21:75:91:3d:a6:6f:04:0e:09:d2:21:
                    37:66:2c:75:fe:21:de:5e:40:af:6f:8c:ef:9f:6a:
                    77:6c:75:9e:f8:5c:3c:b7:fa:b7:fd:48:30:89:c9:
                    13:97:2a:d2:bb:8d:9a:bd:be:3b:67:24:f4:1c:0c:
                    a9:bf:8a:bb:07:c0:a2:ce:3e:73:72:61:66:3c:18:
                    4a:e9:da:aa:fb:fe:ac:81:11:de:29:e1:3a:45:53:
                    f7:55:4e:54:bf:44:51:2a:fb:9c:98:b9:c8:3c:5b:
                    56:ca:50:d0:73:5d:79:e5:eb:11:87:48:75:68:a1:
                    ab:d8:c8:a6:4a:06:44:9a:b0:26:fb:7f:55:fe:0c:
                    cf:2c:ba:b7:29:12:fa:2d:e6:37:d4:3d:cc:95:5b:
                    e8:a9:2e:c1:82:c8:d3:e4:9c:07:56:38:43:49:43:
                    1e:65:d9:9d:ee:b5:7e:56:d0:2d:90:f9:72:5c:78:
                    2d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DA:90:04:C7:BE:2F:2F:A2:28:3A:25:18:AE:B7:03:D7:8A:A5:AB
            X509v3 Authority Key Identifier:
                keyid:EA:87:01:27:16:B6:6E:E8:22:64:2C:2F:0A:1B:90:14:8B:5C:7B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ocBJxa2bugiZCwvChuQFItceyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/729fcd-704b-4081-8d25-c9ff1ee6ad95/1/6ocBJxa2bugiZCwvChuQFItceyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:0c:98:8a:94:8f:c0:26:de:64:a5:6f:3b:33:da:c5:fe:
         f8:09:24:71:37:87:41:b6:8e:2d:dd:9a:5c:89:36:78:26:2e:
         55:3f:38:21:6a:01:81:da:34:a6:0b:52:0b:59:60:9f:c2:ec:
         0e:b4:f9:09:d8:fc:6b:68:5e:cf:d8:b2:33:97:b0:24:c0:ae:
         29:46:db:a3:76:a3:f0:95:8a:dc:b7:e0:09:87:32:ab:0e:64:
         ee:a3:1f:d8:01:9c:0e:d1:a7:56:78:7b:4b:42:c1:84:36:0b:
         e6:84:0e:10:62:d9:59:c3:3f:24:9f:a5:f4:8c:cc:2e:94:ec:
         84:2b:e9:3a:f0:1b:c3:bd:87:24:02:ec:cf:a0:39:bc:eb:4f:
         3d:f5:5d:f7:3d:3b:05:4a:6c:df:da:7d:f4:5b:4f:bc:da:e7:
         fe:61:dc:a8:60:6a:d0:a6:de:57:79:0a:c3:73:7a:a5:99:e1:
         39:53:b7:00:6e:6c:d1:f8:c7:cd:0c:f7:40:a5:63:df:10:98:
         ea:48:da:15:dc:c3:b4:d9:50:44:53:3a:6d:46:29:68:ed:ba:
         af:9c:e5:36:9b:87:57:6d:1d:d6:35:fe:b2:fa:87:ab:fd:98:
         ef:90:68:ac:0a:ee:5e:75:4c:1a:15:00:0b:ba:cd:35:aa:43:
         8e:24:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:19:31 2026 by rpki-client