Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File:                     Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier:          bCNxlUBhBrNCUzjW0ivwVbaDHsEze3kb93cLBHTIcJw=
Subject key identifier:   8C:D4:12:37:0E:B8:2E:9F:FF:91:10:AC:7D:6B:88:C4:C2:88:CE:1E
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer:       /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial:       019ED27433423168C82EEC79DDB3C71B8A31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number:          0AAC
Signing time:             Tue 16 Jun 2026 22:01:31 +0000
Manifest this update:     Tue 16 Jun 2026 22:01:31 +0000
Manifest next update:     Wed 17 Jun 2026 22:01:31 +0000
Files and hashes:         1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: N4ojLltkLVcVA/vh2WxGd+AVC/DFd21NsIy+DNQQawQ=)
                          2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
                          3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
                          4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:74:33:42:31:68:c8:2e:ec:79:dd:b3:c7:1b:8a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
        Validity
            Not Before: Jun 16 22:01:31 2026 GMT
            Not After : Jun 17 22:01:31 2026 GMT
        Subject: CN=8cd412370eb82e9fff9110ac7d6b88c4c288ce1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:2b:0d:d7:95:b2:1f:9b:d0:99:7e:84:60:
                    ce:cc:34:89:37:5c:c3:25:b4:f7:3e:e1:97:6c:14:
                    a3:b6:98:45:8a:74:a7:ab:81:39:6f:0e:38:e4:8d:
                    1a:55:12:d1:0e:ca:ad:f1:eb:94:e8:58:c1:94:fa:
                    77:da:1c:e7:cc:94:32:71:8b:b2:80:ec:63:ba:d7:
                    2d:02:5e:dc:60:43:fe:03:ba:e8:1e:be:b9:a3:b7:
                    3f:94:d4:ba:6a:44:be:96:85:2c:aa:fa:83:7a:a7:
                    3f:57:a8:54:12:66:e1:2c:9b:7a:81:67:af:74:f7:
                    36:a9:ac:6b:cb:e8:6a:82:d8:a8:e0:6c:dc:8b:d2:
                    f1:6d:98:28:ab:00:65:fe:91:33:81:f8:a1:ed:21:
                    16:25:59:73:63:7f:9f:96:34:98:fe:95:1c:a7:c9:
                    2b:47:ab:7f:f3:64:e2:16:1a:02:10:a4:4c:d8:fa:
                    09:1c:0d:7c:81:e5:27:b4:fc:3d:8b:b2:22:09:3c:
                    d8:e5:e4:2d:e9:18:2d:57:f3:b1:98:e8:e9:d6:b8:
                    a5:89:ff:d0:f1:0a:29:ac:be:6c:f6:3d:8a:49:d6:
                    3d:10:73:01:37:25:bc:32:1d:e4:68:fd:0b:69:64:
                    e7:2d:3d:7e:62:a3:88:cd:c3:e9:f8:b0:7c:38:b8:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D4:12:37:0E:B8:2E:9F:FF:91:10:AC:7D:6B:88:C4:C2:88:CE:1E
            X509v3 Authority Key Identifier:
                keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:33:63:65:d7:f7:6a:28:a8:c7:53:e7:65:4c:a1:a0:a9:85:
         7a:41:93:ea:92:cd:5d:de:b9:66:26:44:8e:ce:f1:f4:33:07:
         9c:f3:f7:8f:a8:19:5a:ce:46:da:f4:5b:7d:b5:b7:79:b2:3b:
         38:9b:ef:fb:38:1e:b5:8c:6d:42:45:c3:9d:7d:67:c3:3a:56:
         2e:bb:5c:53:60:a7:fc:52:f5:7a:cd:77:fd:6c:96:d2:da:ff:
         06:06:84:29:bf:23:99:34:ee:55:6f:ae:d6:39:dd:aa:8a:02:
         93:4c:d2:d9:5f:79:bd:5d:08:32:38:83:86:8e:a5:04:cf:8d:
         49:a7:2f:47:7a:68:f1:b5:6d:1f:9f:67:fa:66:33:2a:08:ad:
         d2:07:1f:6a:fa:ac:6d:c3:4d:31:35:fa:07:a1:4a:17:b7:2d:
         d5:01:c3:1f:09:88:13:f7:0d:26:d3:61:e0:7b:ad:51:5f:cd:
         87:44:26:f0:7b:8b:28:8b:b1:e4:67:7a:fa:f7:17:cf:0a:e5:
         ee:d5:8b:1e:35:90:2d:58:68:68:9e:a1:a5:57:9b:06:f6:07:
         b2:58:5b:73:4a:e6:13:b2:88:86:c8:19:2d:c3:1f:3d:a9:bb:
         85:37:13:54:28:b3:b1:a7:b7:d0:c0:af:68:d7:3e:49:d5:ca:
         df:02:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:00:43 2026 by rpki-client