Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
File:                     0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft (raw, json)
Hash identifier:          YuC6sfetFzkUprDywlPCb/Gzta7/dBW2Nps79G7Jajw=
Subject key identifier:   C1:AB:4A:31:C6:BD:8B:5E:1E:E5:E3:3E:82:6B:13:3F:3D:56:90:88
Authority key identifier: D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D
Certificate issuer:       /CN=d0937eb6a89984e8c00b53b1681de09005adc99d
Certificate serial:       019EC180099D6AB7FA58BBF587DC935B46C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
Manifest number:          0BE4
Signing time:             Sat 13 Jun 2026 15:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:54 +0000
Files and hashes:         1: 0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl (hash: ZgI50TA91V97lpAwtZfl/166kLcKVIiueNkBgrPihcU=)
                          2: StMUvEenw_x5lHCzPw_YMF_URiY.roa (hash: ENHv8rZKdjNZdtVZ7QRD0qvto/6QSsxusDFFUShLO+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:09:9d:6a:b7:fa:58:bb:f5:87:dc:93:5b:46:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0937eb6a89984e8c00b53b1681de09005adc99d
        Validity
            Not Before: Jun 13 15:00:54 2026 GMT
            Not After : Jun 14 15:00:54 2026 GMT
        Subject: CN=c1ab4a31c6bd8b5e1ee5e33e826b133f3d569088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:45:a5:b2:26:89:fe:72:4c:01:6b:f1:e2:
                    75:df:94:7f:c7:74:38:f4:b0:3e:7d:6c:41:d8:10:
                    e0:66:1a:be:26:a4:94:8b:62:83:72:50:0d:0f:a8:
                    58:fa:13:10:8e:d4:e7:86:a9:89:48:09:87:a4:8b:
                    70:35:1c:de:9b:a5:cf:98:9e:3c:b0:2c:d5:9c:be:
                    a5:fd:d8:05:6d:44:a9:cb:87:6c:3f:fe:51:1a:92:
                    95:16:07:2b:b4:3b:b4:c9:50:54:42:6d:71:94:9d:
                    cd:a4:7c:b5:aa:14:19:2a:8b:3f:26:48:5d:ba:8a:
                    8c:96:6e:31:9d:9a:9e:2a:32:80:3f:2e:16:b2:9d:
                    4e:cd:fe:89:de:34:41:81:09:b1:64:e6:52:49:06:
                    ce:84:cb:15:a9:68:85:a6:81:04:91:32:45:76:b7:
                    30:b7:d2:28:79:e2:2f:d3:10:c5:df:b5:6f:03:27:
                    63:73:d6:94:d4:af:66:a0:5d:87:59:22:9a:c3:20:
                    31:bd:1d:bc:7f:66:2a:9d:83:9a:5e:b6:bb:80:29:
                    cf:ec:a5:9a:af:7a:26:39:52:90:e1:1f:ba:3b:4c:
                    bc:20:4d:35:d4:fd:ca:ff:26:ae:68:d9:3c:c0:5f:
                    71:66:39:cf:e5:cd:80:b0:20:e6:9e:25:5b:42:16:
                    25:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AB:4A:31:C6:BD:8B:5E:1E:E5:E3:3E:82:6B:13:3F:3D:56:90:88
            X509v3 Authority Key Identifier:
                keyid:D0:93:7E:B6:A8:99:84:E8:C0:0B:53:B1:68:1D:E0:90:05:AD:C9:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/2cc094-2081-4ff6-a9de-d621a891fb80/1/0JN-tqiZhOjAC1OxaB3gkAWtyZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f5:6e:3a:16:f7:64:0e:ac:1f:f5:5e:e9:60:7c:ef:cc:b2:
         ff:3f:a7:29:12:49:97:20:ef:36:db:2a:55:1d:49:4e:11:83:
         a6:e3:0f:68:8e:c6:92:a4:74:8d:16:9f:2d:5f:53:52:04:9b:
         b4:a0:97:50:ee:7b:a8:78:c7:d1:2c:b3:86:f6:f1:54:55:1c:
         ef:df:4b:73:7f:d1:57:6f:42:06:ff:91:bd:57:54:13:78:2a:
         4e:c1:48:bd:2b:1f:5d:5c:ff:35:3f:34:10:0a:b1:0e:9a:bf:
         b3:cb:db:f4:72:20:21:39:a4:12:08:89:67:30:ac:2a:07:3c:
         4d:55:56:52:50:bf:c0:ca:ec:e1:51:4a:05:3b:58:f5:33:cf:
         79:39:2f:b8:a6:15:8c:19:f6:a8:b5:ed:0b:c7:31:5d:52:15:
         f2:cc:50:22:cc:a9:32:75:53:9d:d0:83:a6:66:4f:87:21:04:
         af:c4:5f:37:33:89:b1:1e:b0:17:1d:d7:0c:a9:01:c2:32:fe:
         7b:a4:86:54:0a:00:e1:ef:10:70:e4:f7:15:a7:c7:79:26:5c:
         e5:c8:2b:59:d9:18:82:46:6d:22:19:15:19:a7:e6:d9:fc:4a:
         17:1d:19:85:73:82:e2:9a:50:55:ba:33:0b:87:65:36:38:b2:
         34:6a:43:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:27 2026 by rpki-client