Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
File:                     sBCzoH7QdoStvu_aRTKhy2g6VpI.mft (raw, json)
Hash identifier:          qM4mnD3iOEbvClpMmQRiXIyuJv1ZQJlOMjWJ3Ps2V8A=
Subject key identifier:   07:B6:CB:54:E2:E6:62:84:55:CC:D2:DE:03:05:41:0A:EF:4A:15:33
Authority key identifier: B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92
Certificate issuer:       /CN=b010b3a07ed07684adbeefda4532a1cb683a5692
Certificate serial:       019ED3BD7D52E6329088AAE3743CF9416EAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
Manifest number:          017C
Signing time:             Wed 17 Jun 2026 04:01:11 +0000
Manifest this update:     Wed 17 Jun 2026 04:01:11 +0000
Manifest next update:     Thu 18 Jun 2026 04:01:11 +0000
Files and hashes:         1: HOsIByRB05sMesPlqYI8THFtGjM.roa (hash: VJopQfVewffY+pivrrV8JLnBTXPO+QkfD3SD6xVxU8E=)
                          2: sBCzoH7QdoStvu_aRTKhy2g6VpI.crl (hash: S5ibg1kWuy0ckF8NcBrLMBzVgNVe5d/joD0StJbC4TY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:bd:7d:52:e6:32:90:88:aa:e3:74:3c:f9:41:6e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b010b3a07ed07684adbeefda4532a1cb683a5692
        Validity
            Not Before: Jun 17 04:01:11 2026 GMT
            Not After : Jun 18 04:01:11 2026 GMT
        Subject: CN=07b6cb54e2e6628455ccd2de0305410aef4a1533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:18:08:87:e4:66:de:f5:18:c6:30:41:37:
                    28:a5:40:91:18:7b:86:1e:b8:ea:9f:46:6a:40:34:
                    c6:a3:c4:96:76:5a:af:4c:3e:d6:71:91:eb:1a:99:
                    12:34:a0:73:8f:c1:b0:65:0b:d9:f5:e9:fb:0a:d0:
                    7c:c0:0a:96:55:c0:9a:b2:29:45:cc:85:31:04:02:
                    3a:32:13:c0:d1:ee:e6:19:1f:dc:4f:5b:3f:2a:14:
                    c7:c7:8d:50:96:96:0e:07:53:62:d3:d6:87:92:f0:
                    4f:ec:8c:d9:37:d9:39:5c:a3:21:97:03:30:7f:e3:
                    e3:70:1c:df:f1:40:eb:f0:d8:0a:b2:47:2f:2c:28:
                    0f:bb:60:70:81:45:7f:47:46:c3:04:db:c3:de:fb:
                    34:10:44:58:4b:c8:cf:83:c2:ed:36:71:b6:11:e3:
                    66:14:b8:9d:72:39:86:17:10:89:cc:a0:8f:cb:74:
                    b3:fa:b2:f5:16:be:3a:16:e9:ae:c0:66:83:d8:61:
                    9d:62:96:13:4b:2a:63:ff:64:6f:38:e0:0d:f8:60:
                    9a:08:d1:2c:ab:81:e5:6c:35:a6:03:bb:30:9c:14:
                    92:95:66:07:76:b6:bf:59:d9:51:89:d0:18:8f:be:
                    dd:4f:d0:f5:ac:c9:39:45:67:cd:0c:33:28:4a:0a:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B6:CB:54:E2:E6:62:84:55:CC:D2:DE:03:05:41:0A:EF:4A:15:33
            X509v3 Authority Key Identifier:
                keyid:B0:10:B3:A0:7E:D0:76:84:AD:BE:EF:DA:45:32:A1:CB:68:3A:56:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBCzoH7QdoStvu_aRTKhy2g6VpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cf1f1b-3d41-4660-aa57-63061f27aaf0/1/sBCzoH7QdoStvu_aRTKhy2g6VpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:4b:31:fe:53:37:f2:f1:f2:7a:e1:43:b8:50:1f:4e:3c:4e:
         c8:de:4f:03:8c:d3:6d:66:d5:18:46:56:81:96:67:bc:9f:b6:
         f7:13:f9:76:13:9e:f4:56:7d:e4:a7:6c:98:67:a0:aa:f8:2c:
         39:8e:ff:76:f8:53:f0:da:63:79:c2:2b:7f:ed:f8:93:52:20:
         4b:94:97:63:79:63:81:a5:6e:a3:50:ad:2e:08:80:29:3d:4e:
         3a:15:44:4a:1c:9b:61:59:2d:d4:ae:a5:a3:22:d3:72:8a:13:
         9a:7a:80:38:cf:35:43:ac:c4:e6:e2:e6:ed:de:a9:e6:42:95:
         e9:e8:0d:48:ee:e0:c4:bc:52:ac:f4:b6:89:16:bc:21:88:75:
         b0:f2:81:21:2b:2f:3e:77:fb:19:d3:04:d9:da:e9:1a:5f:a9:
         5b:bc:a9:01:eb:dd:ca:be:e1:69:b2:1a:19:fe:67:64:74:65:
         54:24:20:2b:4b:a6:78:2e:04:bb:b7:12:42:aa:a1:fd:dc:2c:
         09:a0:20:5b:58:ec:ef:23:e3:d3:bf:4f:1b:a5:a7:7e:54:e2:
         c7:c2:3e:14:ba:d7:d7:1f:0a:a2:e3:89:0a:db:a6:6f:9d:30:
         3d:06:23:7e:ce:07:9d:f4:a3:ce:ac:ae:6a:0b:de:88:ab:01:
         ea:fa:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:17 2026 by rpki-client