Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File:                     mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier:          jXXomb75wGSb0MrvCeOrvdFjN95FkqSckgwooau/K7Q=
Subject key identifier:   97:8A:90:B7:50:E1:C2:96:30:50:A2:8A:6A:99:E4:98:49:C1:54:80
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer:       /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial:       019ED3F4673836BB38E2C1193EBFC15B009B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number:          095B
Signing time:             Wed 17 Jun 2026 05:01:10 +0000
Manifest this update:     Wed 17 Jun 2026 05:01:10 +0000
Manifest next update:     Thu 18 Jun 2026 05:01:10 +0000
Files and hashes:         1: BR_BUevx2sg_8tyRkbQkeVhjNsQ.roa (hash: DcW4cVxJuDUK3IKLW2cbHxN+qa5e/QUPCI24FuVBujI=)
                          2: NE_RBgLN-WEZ1pofTZpRWHKQLhU.roa (hash: nHBSYWCWMkjsq8eIHvyxI7K4o3nKXMreU+r6LsPFSas=)
                          3: f-WzYrTcVspbvV27XUH8n69DSig.roa (hash: dPXvzRcp3N5snJFT4/YTmjC8NO5nN1yqw4UaUWODI/0=)
                          4: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: 3DWIhyVjGu+UbtFT2+KfDVk+CnBYaXxktvxVLw+mams=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:f4:67:38:36:bb:38:e2:c1:19:3e:bf:c1:5b:00:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
        Validity
            Not Before: Jun 17 05:01:10 2026 GMT
            Not After : Jun 18 05:01:10 2026 GMT
        Subject: CN=978a90b750e1c2963050a28a6a99e49849c15480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f5:91:76:d9:be:f5:30:0a:1c:1f:a7:1e:ec:
                    38:5e:9b:88:ab:e7:c2:a0:0a:a4:12:a8:1e:61:3b:
                    d4:ef:5d:01:97:83:10:c5:2a:df:64:46:9a:50:2e:
                    9d:62:b9:0e:a4:1d:8b:96:a1:1a:da:c1:01:f0:1e:
                    5d:b1:1b:5b:09:9b:ef:53:c0:cb:e7:e4:7d:19:79:
                    19:32:0d:ec:25:b0:f1:c2:86:56:32:b4:9c:6b:a4:
                    7f:3b:63:c8:d3:1c:02:82:43:d7:b2:b1:20:21:1f:
                    74:ac:82:3a:53:0d:eb:7f:95:f5:75:61:2f:82:1a:
                    e5:2d:70:ae:8e:f9:3a:76:3b:b7:f7:41:e0:b6:fc:
                    e6:ef:77:de:3b:9b:f8:e3:ad:2c:0b:ec:52:5e:de:
                    cb:55:df:f5:31:13:c6:44:12:13:d3:60:99:5e:17:
                    0c:28:ab:39:ae:5d:85:42:44:26:ea:1e:5f:c8:17:
                    fa:db:60:5b:87:10:48:54:b4:45:f6:5a:ca:9c:16:
                    a7:d7:17:4b:7c:ab:dc:db:d8:fd:f4:3a:d5:a6:3f:
                    14:f8:95:49:3d:80:66:41:ba:2e:4b:f0:c7:9e:7c:
                    56:c1:35:4d:09:dc:18:c6:fd:4d:1c:42:3a:00:be:
                    f8:b4:f6:f2:91:87:55:46:b0:85:20:e9:4d:32:87:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8A:90:B7:50:E1:C2:96:30:50:A2:8A:6A:99:E4:98:49:C1:54:80
            X509v3 Authority Key Identifier:
                keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:68:de:75:a6:b3:c3:54:73:93:2e:a3:7c:c1:24:98:9b:52:
         4d:ca:2c:c0:11:33:bb:99:31:15:ce:bb:81:e1:df:17:26:a9:
         b8:c5:75:1d:8d:bd:6e:fa:74:d2:e7:93:fa:6b:73:bb:a6:4c:
         05:10:85:bc:10:30:d9:1a:9f:72:1b:69:ec:af:1c:e9:ad:46:
         8e:ad:31:64:fd:a5:4a:95:8b:e9:72:a8:f5:7d:9f:26:b2:52:
         78:09:5d:d6:6f:e7:1e:81:ef:5a:df:a3:12:f9:9d:28:92:f1:
         ed:0a:fb:19:74:fa:b5:e7:1a:66:60:bd:ec:c2:3f:c7:bc:4e:
         9b:a3:03:d0:94:3b:3d:bb:9c:09:5a:06:8d:62:67:e6:a2:39:
         cb:be:d2:8a:3c:46:45:25:9c:35:20:57:57:38:60:64:4b:8a:
         2d:c4:76:0a:83:21:05:95:0b:23:92:f6:85:0a:a3:26:79:4b:
         ce:82:8d:d8:3d:e1:81:6e:d5:51:ac:c3:19:8f:22:c8:97:6d:
         38:76:60:bb:05:df:97:14:43:5e:d4:f2:63:9d:a1:52:42:c1:
         21:1a:3c:20:13:50:f4:7b:6d:12:fe:a8:c3:1e:e2:13:75:f7:
         8e:d2:c3:c7:bb:88:78:6d:35:3a:ac:b2:7e:64:5a:c0:20:2a:
         27:ba:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:49 2026 by rpki-client