Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File:                     5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier:          WvghSzFgPGTEskt41s42B1DGvXrh0esKpOQ8nuHUh4Q=
Subject key identifier:   D9:F2:6B:56:D5:DE:2A:AF:CB:B7:3B:95:48:7B:C7:A1:E4:E3:5E:52
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer:       /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial:       019EC036ADBEED3CF92978D2C88031789542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number:          0E9D
Signing time:             Sat 13 Jun 2026 09:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 09:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 09:01:09 +0000
Files and hashes:         1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: VZqu7gHiKDHBkmoymfVeTchJW8Y93vsXuNErRqEuJJE=)
                          2: YmBgxnOOglEWqDI9vvh0tfVl6fA.roa (hash: 2oqLEwP1fLoivASRJm1VDhmVmyCsjEy83bO8HNzsUEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:ad:be:ed:3c:f9:29:78:d2:c8:80:31:78:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
        Validity
            Not Before: Jun 13 09:01:09 2026 GMT
            Not After : Jun 14 09:01:09 2026 GMT
        Subject: CN=d9f26b56d5de2aafcbb73b95487bc7a1e4e35e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:86:ce:74:b4:81:b8:5c:11:10:cc:9b:90:
                    e8:95:35:5d:8b:af:d3:bd:d8:90:b0:5b:0b:de:a7:
                    7f:ca:6b:3a:0d:41:b0:01:46:f6:76:a7:fd:eb:14:
                    87:5d:84:d9:b9:ce:53:9a:b9:26:e3:60:51:b5:9a:
                    ea:d7:46:b6:22:cd:8d:01:dd:9f:0c:1d:81:e3:2c:
                    60:cd:49:3b:87:be:e0:9a:2a:69:e2:a3:0a:1a:40:
                    68:69:47:b0:98:6a:bc:2f:a6:8d:d8:4c:53:0a:a1:
                    db:c8:e5:9b:c9:e7:7c:a8:d2:e1:7f:f3:32:66:b9:
                    e5:33:3a:36:1c:e3:ae:09:26:5a:d4:d0:f2:c1:af:
                    47:9a:c0:97:17:91:92:9a:9a:b3:79:76:b7:8a:13:
                    ba:a4:8c:ec:f0:db:cb:97:6d:1b:af:56:1b:98:9d:
                    65:8a:80:7d:d6:9f:49:f4:9f:c1:5f:09:0d:cc:75:
                    d9:4a:cd:3b:c3:fe:fe:bb:2f:b0:53:b7:7f:aa:10:
                    6f:7d:51:9e:ae:b9:e7:26:ed:d7:73:6e:67:9c:df:
                    bd:26:1f:f6:5c:08:dd:73:89:44:2f:05:15:4d:b8:
                    ef:d9:4e:de:d4:3c:8b:a2:42:5e:ec:db:9e:6e:51:
                    0b:78:ee:c8:0b:7d:d5:d9:92:bf:cd:c0:81:25:f7:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F2:6B:56:D5:DE:2A:AF:CB:B7:3B:95:48:7B:C7:A1:E4:E3:5E:52
            X509v3 Authority Key Identifier:
                keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4a:8f:d5:7c:9f:5c:f0:4d:c1:48:86:3e:5b:5b:6c:71:26:
         c9:12:32:e1:dc:d4:34:3d:7c:99:3f:c3:cf:f5:9d:20:d5:db:
         11:9f:b5:99:57:65:c4:94:6b:36:d4:43:97:5e:c9:82:12:79:
         2d:9a:0b:8d:82:97:a8:f2:53:d7:b2:1a:b5:47:65:3d:43:82:
         c2:67:72:4d:b3:cd:14:8d:1a:72:30:ca:8b:91:0a:02:12:95:
         2c:89:ae:25:59:65:99:7d:f7:73:98:28:09:58:35:eb:9e:37:
         fa:27:f7:a2:8e:3b:1a:88:f8:06:b2:10:26:a7:1c:7a:b6:7b:
         17:77:02:16:75:be:99:f6:71:ca:57:de:6b:59:6b:d7:6f:34:
         d2:84:86:8d:11:c6:bd:bf:4f:aa:53:31:2a:2a:ee:76:af:a3:
         f8:db:80:54:5f:9a:51:48:1b:8d:25:ba:61:8d:07:dc:b6:bb:
         5b:91:7c:73:6f:3a:d8:a8:9f:f3:62:65:8d:97:e3:89:5f:40:
         f6:bb:50:8a:b6:92:8d:4e:1f:2e:89:ae:83:f6:e2:42:6d:7b:
         bf:b0:56:b5:ce:ba:51:1b:ce:cc:78:45:a8:cd:02:f8:e6:81:
         5e:43:bf:19:c0:2a:e9:de:ae:98:47:16:40:7a:67:a7:ea:b2:
         5b:b5:d3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:15:10 2026 by rpki-client