Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
File:                     0u0bbMpTCR9vkNGllQzrbVOwOq0.mft (raw, json)
Hash identifier:          c7hr79LJF99OTN0cnbu/OKr3LrMDmkhr7IKVTMB8TjQ=
Subject key identifier:   76:8D:8D:B5:5E:50:9F:D4:64:34:BE:3E:D7:60:16:DB:37:13:02:31
Authority key identifier: D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD
Certificate issuer:       /CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
Certificate serial:       019EBE7F058E10C9E02B22A7AD40128EFF2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
Manifest number:          0D65
Signing time:             Sat 13 Jun 2026 01:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:55 +0000
Files and hashes:         1: 0u0bbMpTCR9vkNGllQzrbVOwOq0.crl (hash: kUSHWd+EYqKD6ZFxylb4CAmP4lg9Cn/1M4nB9FM44UE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:05:8e:10:c9:e0:2b:22:a7:ad:40:12:8e:ff:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ed1b6cca53091f6f90d1a5950ceb6d53b03aad
        Validity
            Not Before: Jun 13 01:00:55 2026 GMT
            Not After : Jun 14 01:00:55 2026 GMT
        Subject: CN=768d8db55e509fd46434be3ed76016db37130231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:71:1e:6b:91:fd:95:71:32:50:bc:78:2a:
                    a0:1b:22:f7:1e:7c:ac:57:99:4b:b3:57:f4:15:9e:
                    8f:eb:ed:b1:ab:b2:06:83:f5:34:14:af:34:0b:4a:
                    a4:93:ac:2e:52:7e:6d:92:85:6c:cb:20:6e:9e:28:
                    00:b5:eb:5e:15:c5:c9:6a:c2:41:40:0b:48:38:95:
                    91:e9:f0:4a:f8:b5:15:f5:fe:92:14:c8:34:09:94:
                    97:6a:8e:4e:34:c0:26:37:86:ad:a1:f0:0f:00:f4:
                    95:18:ae:2d:39:44:5e:d4:73:cf:2d:ff:ed:04:7c:
                    84:8c:c2:f6:b7:e4:e0:8f:e4:34:94:a6:ba:44:41:
                    6f:65:65:02:be:29:dd:33:62:ca:c2:e3:b9:3d:5d:
                    b5:52:a0:fa:c3:59:5d:49:26:0b:b7:e1:c0:b1:38:
                    37:fc:3f:d7:11:66:e6:83:ad:6a:b7:46:f1:65:25:
                    91:be:bc:07:81:5e:b3:a2:ec:15:af:37:f7:fb:34:
                    6c:04:cb:94:2e:3e:e1:65:7d:4b:b3:35:1a:14:a8:
                    c9:b0:bf:c8:67:03:e7:66:cd:59:4d:51:71:89:1c:
                    f0:40:c4:e0:10:8a:96:51:49:3f:f4:88:6a:03:d0:
                    5d:3a:7f:51:f0:53:f4:2d:4d:14:0b:8a:ff:66:4b:
                    fa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8D:8D:B5:5E:50:9F:D4:64:34:BE:3E:D7:60:16:DB:37:13:02:31
            X509v3 Authority Key Identifier:
                keyid:D2:ED:1B:6C:CA:53:09:1F:6F:90:D1:A5:95:0C:EB:6D:53:B0:3A:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u0bbMpTCR9vkNGllQzrbVOwOq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d61ddb-b3e5-40b0-abbe-9437e5fe6db4/1/0u0bbMpTCR9vkNGllQzrbVOwOq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:a6:0a:01:a0:8b:e8:aa:71:71:22:de:fb:80:75:90:99:
         ca:ff:07:7d:7e:7a:13:18:d4:31:b9:b0:c0:27:03:b3:ee:1f:
         d2:08:38:28:50:0b:58:4e:20:1f:c4:a0:52:98:2d:40:04:fd:
         0d:4b:f5:5c:e5:2f:e3:e3:a8:7a:b7:cb:4f:f0:46:a3:71:d4:
         0d:14:99:f7:13:61:15:a1:34:5e:55:3f:35:ed:31:81:a4:1b:
         37:89:41:4b:55:07:d8:ae:61:06:10:99:1d:cc:18:41:e9:64:
         70:1a:f3:df:23:69:5e:71:48:a9:d4:6a:cd:7a:6c:bf:1f:ae:
         51:d3:77:3b:d3:3d:92:95:c0:5a:75:2f:ca:55:0e:f8:67:4b:
         90:0c:4a:1d:f9:ea:d2:c3:97:5f:09:f5:69:91:95:4f:e5:5d:
         d6:92:d7:cb:e1:67:5d:85:10:38:eb:68:13:2b:76:a0:fb:49:
         ea:9c:08:2f:59:6f:a9:12:08:a9:dd:ce:a5:d3:a0:e0:c2:16:
         6b:1d:17:cd:fb:ff:d6:c6:38:fb:61:19:80:91:8a:18:dc:63:
         f5:38:31:e8:dd:7f:58:fe:9e:31:bb:49:6f:f9:85:bd:f7:bf:
         80:69:dd:7b:76:32:40:3b:df:ec:82:c7:10:2b:ad:35:dd:d9:
         e9:75:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:18 2026 by rpki-client