Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          jPcZEo4rrz+jvltkePWDNnT4vfba7Qj4uguznLdX4fM=
Subject key identifier:   71:AA:6A:CE:55:13:9F:3B:A4:C0:23:60:9D:32:8D:8B:5D:C6:FE:5B
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       019EBDDA1936A76B58708E2A7A2A3FD0A988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          05C9
Signing time:             Fri 12 Jun 2026 22:00:47 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:47 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:47 +0000
Files and hashes:         1: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: VV3yix7OHZ9KxPiPXRFV62T5N0bt7HC8tBcMQpOqG6I=)
                          2: EkaMEHFXzVXgvijJ-hXSC2h-u7I.roa (hash: JZppuXOA54xhCxrPeBXaCqhSYeNgkIyj6hJkt7FdiSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:da:19:36:a7:6b:58:70:8e:2a:7a:2a:3f:d0:a9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Jun 12 22:00:47 2026 GMT
            Not After : Jun 13 22:00:47 2026 GMT
        Subject: CN=71aa6ace55139f3ba4c023609d328d8b5dc6fe5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:59:57:c6:36:59:67:1e:10:36:38:98:c9:
                    c3:29:de:3e:7e:9b:40:d6:f8:b8:0a:ef:50:6c:b8:
                    be:96:5c:8c:5e:f5:5f:26:08:df:e9:78:ce:55:80:
                    5b:16:5e:c4:03:57:0b:1f:f5:b9:72:da:47:06:fe:
                    59:62:68:54:43:85:7d:13:76:0c:48:c9:a8:cb:07:
                    d1:72:67:2e:75:cb:79:31:6a:55:93:34:08:f1:ab:
                    66:08:d5:72:e6:4c:b8:58:dc:5c:be:be:88:07:24:
                    2b:61:df:4b:e5:0a:4b:cb:7f:f3:d8:a6:b7:4c:8e:
                    a6:f9:2e:c3:56:31:74:6f:bc:6c:e0:3a:5f:89:62:
                    64:1f:cf:39:c3:ec:ae:7b:1d:1b:94:1d:3b:7a:e8:
                    fc:2c:85:e0:28:55:b8:20:57:a4:aa:bc:ad:dd:9d:
                    fd:cb:e4:78:82:97:85:be:c1:98:af:52:2d:bc:0f:
                    db:59:c0:52:1e:05:91:d1:c1:c6:af:a3:7b:ea:d3:
                    6c:27:57:5b:9c:ff:a2:29:82:35:04:b7:bc:78:7b:
                    78:a0:dc:25:80:3c:2e:ff:79:75:c5:8a:2a:29:ec:
                    69:a0:91:d0:0b:40:35:9a:1c:76:54:35:89:d4:d7:
                    ac:8c:8b:c0:fa:e7:41:7e:f4:67:39:c2:e5:52:8e:
                    5e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AA:6A:CE:55:13:9F:3B:A4:C0:23:60:9D:32:8D:8B:5D:C6:FE:5B
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:41:c5:82:19:00:6a:f3:ec:ec:23:b2:7f:ad:ff:0a:08:23:
         4a:b6:16:0b:8b:fd:3b:72:f6:78:e2:9a:4c:63:df:12:bc:ef:
         69:0b:a7:85:de:54:d0:b4:69:66:45:53:a4:1d:c5:18:05:e2:
         43:db:dc:65:1d:28:03:a2:58:65:de:4a:26:1a:7e:5c:39:9e:
         85:35:71:f5:50:62:30:ed:56:40:c7:fa:02:d6:83:20:e4:41:
         26:66:27:70:95:b7:88:75:f8:6f:13:09:a9:7f:d2:7c:4a:16:
         83:62:2f:07:ef:df:0b:78:eb:ac:55:d9:31:d8:f9:a5:86:9b:
         52:88:e8:f9:84:d2:ae:de:0e:b8:80:cf:06:db:59:f4:d4:94:
         2f:02:1d:d9:b4:23:3e:b6:0a:82:8a:ab:d3:6a:f4:68:08:ff:
         b8:27:7e:4c:47:14:77:31:c6:e7:fa:fc:4e:ba:ff:82:48:e6:
         dc:93:6c:04:00:b1:27:d5:74:fc:70:2a:67:84:b7:f2:b4:9e:
         1d:34:59:9c:a2:88:74:2c:11:9c:b8:66:20:ce:83:e6:1a:8f:
         55:60:44:e4:2a:38:9e:6f:f4:99:ee:f2:71:9f:f7:0a:a5:8a:
         32:b0:20:6a:8f:63:66:86:69:4a:38:98:17:53:23:28:6d:3a:
         60:75:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:07 2026 by rpki-client