Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          GeDmrvNE8bYIz8oIFwDRpEapc5o5DklF9L/kFh2hY+w=
Subject key identifier:   8A:71:E0:DA:C3:DC:A7:8B:4C:70:FB:12:74:D6:57:A2:70:BE:07:06
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       019EBF5A148DA28B556F1B7C96221D84EB66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          08DD
Signing time:             Sat 13 Jun 2026 05:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:12 +0000
Files and hashes:         1: 0P1RjYkUunzUVQsRql-6_fKRzc8.roa (hash: QQ0zolHUVpVnhMPlw+ijSEm88671++BfofXDGkViKYk=)
                          2: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: veHKea5B0G/YqDf/ittU69qf73IwO5BCSkM8TGf7myM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:14:8d:a2:8b:55:6f:1b:7c:96:22:1d:84:eb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Jun 13 05:00:12 2026 GMT
            Not After : Jun 14 05:00:12 2026 GMT
        Subject: CN=8a71e0dac3dca78b4c70fb1274d657a270be0706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:de:6e:86:12:cb:af:44:99:c9:8a:e9:8e:
                    4f:5d:00:69:b2:1c:cc:1e:21:bc:b8:6f:7c:c5:13:
                    58:4c:c2:53:bc:04:de:f9:57:71:bb:aa:7a:b6:a2:
                    ae:da:24:91:a4:eb:77:17:ff:84:17:c7:d3:2f:e5:
                    c6:08:c1:a9:23:e3:5c:0d:15:17:e5:14:cd:02:5e:
                    16:ed:75:e0:32:7e:ea:b6:53:6a:63:fa:71:c2:18:
                    66:dd:f5:ad:5d:00:cb:fc:d7:fe:be:f6:4d:8a:b1:
                    75:d2:18:c2:67:c9:d9:5a:06:7c:54:19:fc:4a:83:
                    0e:88:8e:06:c1:ca:83:b6:c1:d8:60:73:32:08:18:
                    63:b8:ed:a4:47:12:f8:d0:fb:ce:8a:bb:83:ff:72:
                    25:58:23:60:45:0c:b9:9d:f1:b2:e3:bb:cf:e8:8a:
                    8d:d5:ae:b7:34:2c:61:56:da:67:db:dd:65:32:10:
                    47:4d:ea:0d:a9:f1:67:f9:20:5e:39:4d:79:30:4a:
                    1c:b2:42:0d:7b:d9:8d:04:e5:a6:5f:00:26:4a:ac:
                    e3:c4:cf:29:22:a7:50:42:a1:e8:70:d3:58:21:d6:
                    7f:4f:5e:4d:c4:9c:52:0b:ad:ef:90:63:c6:03:4d:
                    e4:fc:d7:ae:dd:74:f7:27:36:01:7c:c3:31:d7:10:
                    1f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:71:E0:DA:C3:DC:A7:8B:4C:70:FB:12:74:D6:57:A2:70:BE:07:06
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a5:ea:f3:91:9a:51:4a:ba:0d:dc:b9:6c:e6:6f:7a:e9:05:
         df:c7:1e:f4:d2:ae:cf:75:66:b0:07:7d:77:10:f4:ef:a7:17:
         8c:13:20:6b:7a:ad:00:22:50:5d:43:7b:78:51:93:55:d0:44:
         be:b3:6d:c4:25:f3:66:9c:62:09:7b:06:1f:c1:e7:2f:bb:d4:
         ca:75:bf:bf:30:88:5e:b4:fc:ec:5a:be:06:d9:4b:6b:83:a7:
         18:c5:2a:d2:69:d0:90:7b:aa:3b:e8:0a:f5:af:52:53:39:fd:
         00:29:9e:28:78:eb:bd:4d:32:a6:70:34:37:54:91:38:90:6d:
         4e:9d:aa:58:b1:fb:ba:4e:4b:ec:92:84:f2:1b:1b:ab:ce:fb:
         05:d3:8d:dd:b1:8c:ac:e4:c5:47:f3:53:ac:08:16:c9:39:be:
         9b:39:b2:6a:d9:c2:c2:1f:a6:03:61:25:0d:cf:ee:b6:77:0b:
         06:98:e2:4a:ef:bc:04:cd:af:70:91:42:b3:68:aa:2c:a6:ee:
         b3:32:99:75:cc:90:6b:fb:84:ef:1a:ef:c7:16:cb:29:8c:0e:
         67:b2:a6:e2:38:38:7c:a4:ff:4c:ff:98:90:16:29:52:20:49:
         c4:e7:ab:b1:14:89:5e:95:27:1e:dd:1e:29:24:c7:27:d7:ca:
         0d:7a:ec:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:06 2026 by rpki-client