Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
File:                     CiebQDjgAue9ZOUHbRo56-lvI8Q.mft (raw, json)
Hash identifier:          Cgb7TZyd5b8sFKiXBKwUyP76Zr/juO7wDJIaNtw8+YU=
Subject key identifier:   EA:91:4A:E4:DD:8D:DA:00:FD:FC:FC:A2:58:6A:1A:56:65:B0:C8:6C
Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Certificate issuer:       /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Certificate serial:       019EBE483767452D80E339BDAE9223B9BF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
Manifest number:          0A08
Signing time:             Sat 13 Jun 2026 00:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:04 +0000
Files and hashes:         1: CiebQDjgAue9ZOUHbRo56-lvI8Q.crl (hash: i33l1PblOm8y5F1moUavlxIBPxh0OJEOySrQyp7O9No=)
                          2: INTBCoLNdz7dS74vmemjPaj4YZM.roa (hash: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:37:67:45:2d:80:e3:39:bd:ae:92:23:b9:bf:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
        Validity
            Not Before: Jun 13 00:01:04 2026 GMT
            Not After : Jun 14 00:01:04 2026 GMT
        Subject: CN=ea914ae4dd8dda00fdfcfca2586a1a5665b0c86c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:e8:6b:c3:e7:e6:67:65:87:14:5d:75:99:
                    34:df:bb:de:f5:8f:ec:cf:79:dd:9a:cb:35:38:6f:
                    56:3b:90:6f:3d:6e:e6:da:20:7e:08:d3:cd:03:82:
                    9a:ba:75:44:65:51:39:a9:48:66:6d:65:02:67:25:
                    69:c7:c1:dd:9c:ce:01:11:bc:2d:6a:03:3d:e3:12:
                    5c:e7:c4:32:8f:3c:1e:e6:e1:1c:40:8c:7e:63:52:
                    5f:25:21:65:d0:dc:a2:dd:e4:01:ce:73:64:28:c3:
                    25:04:9f:65:91:e2:4e:a8:b0:9f:33:46:f3:86:4e:
                    b2:f0:69:64:62:99:89:76:f2:00:1f:72:af:94:f0:
                    fa:c3:32:30:67:3b:46:fd:a6:a1:3b:dc:b1:06:c8:
                    d8:0c:bb:3c:42:dd:73:4b:b5:7e:ad:7e:bc:9a:bc:
                    3b:36:b6:56:e4:89:22:39:29:ae:e4:35:7b:ca:21:
                    99:f3:13:a1:1b:74:8e:50:cc:77:60:6a:87:ba:6b:
                    72:07:07:92:0e:86:b9:38:34:96:2c:53:62:04:e2:
                    d2:e7:2d:55:66:0f:89:d9:21:68:c0:5d:e2:d5:9c:
                    1d:37:83:0a:77:0d:a0:6c:32:77:10:36:01:50:9d:
                    73:a9:97:b3:65:52:23:f9:a5:7a:f4:82:d2:33:23:
                    4c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:91:4A:E4:DD:8D:DA:00:FD:FC:FC:A2:58:6A:1A:56:65:B0:C8:6C
            X509v3 Authority Key Identifier:
                keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:6c:ee:23:4b:d9:7e:68:ce:08:21:48:18:8c:ad:d1:81:10:
         de:12:05:e3:0e:e6:6c:a6:f7:56:13:c1:64:32:d2:98:98:96:
         ce:1e:16:32:a2:49:29:02:17:c1:dd:be:e0:cf:b1:f4:8c:ea:
         5d:40:25:bb:b2:12:27:20:b8:57:5f:88:bd:76:6f:e9:10:ce:
         0f:3e:b7:b6:56:52:fd:e2:41:df:df:e1:2e:c6:b3:37:99:cb:
         73:be:9d:48:6d:de:e3:21:29:b8:64:58:37:a2:f0:03:1d:f6:
         48:06:86:d9:3a:13:65:1c:59:b2:67:41:2b:57:7a:72:f5:a3:
         af:d1:c4:1d:89:a9:4e:ce:e7:58:74:5c:42:83:41:89:cf:d9:
         6a:2b:79:3a:58:48:84:54:4e:70:92:5a:8f:95:67:32:0f:3e:
         20:09:ac:00:d0:d2:86:47:7d:9d:ba:5a:47:01:19:57:4f:cd:
         16:47:e0:9f:f5:c6:56:11:a1:96:c9:5f:dc:10:2f:50:e2:3c:
         b3:b1:5c:0c:38:04:df:5a:aa:0e:af:49:b7:bf:2b:0d:fe:26:
         c5:f7:b4:da:45:7c:10:e7:64:6d:e3:bf:a4:12:e4:5e:86:e6:
         49:2a:a2:29:45:ae:28:fc:0a:96:f4:48:28:89:05:fd:4d:87:
         5a:69:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:39 2026 by rpki-client