Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File:                     7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier:          ZmICjr2jUARZc9Ins+Z2QaexZNEHjWkcm2QEspNeuZM=
Subject key identifier:   8A:23:29:6C:6A:33:1E:28:6A:72:64:FD:C3:DB:25:92:4D:62:0F:4F
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       019EC2C9ED3569BE5AD4599A7357A2541E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number:          0AA1
Signing time:             Sat 13 Jun 2026 21:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:13 +0000
Files and hashes:         1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: 5AGB8GvRrguR/PClXExXbj1Ayea6wK9T/ZuhMYfUYus=)
                          2: C77YJP8fJa8-Zz4rlDlE0c9emSo.roa (hash: DN6PsoZ+s4zlPu3wgZ94PNHVaR06pVMEb9575uK0WK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:ed:35:69:be:5a:d4:59:9a:73:57:a2:54:1e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: Jun 13 21:01:13 2026 GMT
            Not After : Jun 14 21:01:13 2026 GMT
        Subject: CN=8a23296c6a331e286a7264fdc3db25924d620f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:3b:23:2f:84:f3:3f:e8:4f:33:9c:06:be:
                    04:9a:20:8e:fe:94:32:26:1e:19:e5:4d:8c:6b:cb:
                    8e:9c:7e:0a:25:5b:a6:f2:f7:ea:e5:0f:75:63:10:
                    25:fd:3e:1d:95:bd:0f:ed:da:29:52:19:9c:43:8d:
                    bd:52:77:2e:3c:ae:5d:ac:24:c2:dc:c5:99:61:15:
                    0e:4c:6c:07:fe:6a:c1:ac:96:a8:eb:4d:5c:cf:7e:
                    f0:04:2a:d8:4c:1a:3a:2e:83:15:0c:ba:d6:f9:70:
                    2d:87:59:6c:42:d4:6f:9f:4f:3e:63:0a:5b:52:4b:
                    18:49:fe:fe:a5:00:d4:d2:6b:56:c2:0a:7e:89:e8:
                    f5:f9:81:a7:8c:73:bd:8b:0e:49:64:e6:68:34:62:
                    72:27:d2:6a:26:ae:2f:01:1a:b5:d2:9a:e1:fc:13:
                    1b:d1:98:49:d8:8d:55:33:72:0d:ae:38:73:55:35:
                    f6:8e:bb:55:4a:f0:0a:15:49:ff:1b:fe:5e:ff:d1:
                    0a:fa:38:f5:da:b9:68:71:ad:76:55:b7:f6:d7:c6:
                    98:2b:7b:b2:5e:0c:0b:84:af:7c:e8:1c:c7:c1:3c:
                    b3:67:71:70:fe:ea:3a:1b:6a:83:cf:37:2a:30:65:
                    d8:10:36:21:11:dc:a0:67:fe:93:1e:f3:a3:97:f0:
                    95:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:23:29:6C:6A:33:1E:28:6A:72:64:FD:C3:DB:25:92:4D:62:0F:4F
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:23:ec:a9:72:e1:15:61:19:d8:c1:47:15:f1:41:f6:f5:41:
         a4:70:be:dc:33:a2:b4:06:81:bd:8e:ef:3c:a7:8c:e1:ae:7c:
         f0:59:80:99:b5:5f:f3:c6:16:0b:77:f4:92:93:16:fb:a9:ba:
         c3:84:26:30:38:aa:20:b9:f6:25:61:3c:89:c6:d1:f3:d0:9e:
         34:bd:cd:f1:5c:d6:d8:40:67:19:a4:58:e9:18:de:65:dd:fa:
         5f:1e:0a:a2:fe:af:3b:7e:12:8d:ee:1b:ef:cd:1b:4d:f3:2f:
         0e:e0:ea:07:76:b0:48:41:8e:d1:78:a8:c9:f1:65:6a:85:0a:
         48:ad:5f:30:06:80:07:83:ef:a9:cd:9f:12:f6:f9:d7:20:63:
         81:94:02:bd:f2:33:d3:6b:3a:b0:47:b6:22:30:f0:58:fe:14:
         14:88:61:4f:84:c5:7b:a5:ed:83:b7:da:8c:ca:dc:ba:f2:a9:
         1f:16:f3:a9:ee:a9:46:f0:1a:ff:04:c2:91:a1:4a:c1:b5:b8:
         ca:b2:fc:c7:d4:07:b7:fb:62:97:fa:72:a7:92:6c:38:d2:98:
         09:f3:98:7f:8e:fc:d3:9f:f9:0c:c8:11:d7:1c:b1:cd:94:ad:
         02:9f:3a:c8:30:49:b8:ed:6b:60:8b:f0:03:ef:21:4a:21:26:
         93:e4:4a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:14 2026 by rpki-client