Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          +P+x5+/2rnrrnPTfbrgPVcwAgsufLpeqZOJ6oDyUKM0=
Subject key identifier:   72:42:5C:F5:71:49:55:FF:59:35:78:3E:0D:9C:FA:43:52:49:9F:4E
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       019EC06D72D5574E566D6A9D1B376BB1CB88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          10AB
Signing time:             Sat 13 Jun 2026 10:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:58 +0000
Files and hashes:         1: 3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa (hash: jTuElWfRQSD5SofMMRCQ0LeEwPmYlDKmyuYEtvYSFDY=)
                          2: C-g37o81zdQC9_zopBXPpyRUrjU.roa (hash: 2ZRtUbahVnYhC9Kf/nNbZfgsN5/nT4ars1+NMI+6Czk=)
                          3: W5VTroF4zcGApX3Giz89KR2_wWg.roa (hash: GNfQgd1tr7xOtZa17O8ZeusFNmCf6n9fTIUFI6Sv0mk=)
                          4: cWuGeJ6gM-3ve4HkKVmEZUSc7S8.roa (hash: P0kghOMwSQUMU4gKXJ4ASB+7Zwvt3QGVEmH46AdBNrw=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: by1xiI2qj2K9XRWJQVBdo+WE1tNuHQT2Q5X5arOolT4=)
                          6: mI1bOyES1SUvd3jXkMpsFL9UDNs.roa (hash: G8pWjV9esRmq6YgXU83pAW+6b6j1UXEhnMOTBHJgNSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:72:d5:57:4e:56:6d:6a:9d:1b:37:6b:b1:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Jun 13 10:00:58 2026 GMT
            Not After : Jun 14 10:00:58 2026 GMT
        Subject: CN=72425cf5714955ff5935783e0d9cfa4352499f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:5b:77:57:a4:39:10:64:5d:3b:0d:1f:4c:
                    2b:76:0d:1a:af:a5:3c:06:51:38:34:48:08:dd:18:
                    7f:36:92:a6:ee:30:6a:fe:e5:f5:84:9c:39:e1:b9:
                    7c:b4:aa:0a:c0:49:e0:e0:01:42:69:af:7a:ee:a8:
                    29:80:1b:dc:6f:4d:0f:fb:34:ab:0c:5a:d6:7c:99:
                    9d:93:ff:af:42:55:3e:08:c8:9e:46:ae:4c:3e:e3:
                    d7:34:02:69:5a:f1:22:dd:66:54:27:5d:cf:b4:2c:
                    0b:3b:3e:08:06:1c:a4:94:5c:52:19:55:e4:93:1d:
                    d5:bf:1e:1f:f0:59:32:3c:44:a3:6b:aa:e0:66:c9:
                    53:30:69:08:63:98:cf:54:d5:1a:f3:76:ae:15:ff:
                    6b:9d:3f:1d:f3:a6:dd:6f:c0:bd:7a:09:c1:cf:dc:
                    9d:9d:32:3b:6c:ee:c5:66:5b:f6:bd:85:c3:7e:ec:
                    ad:cc:2b:ed:a0:6c:c7:94:cf:8d:e2:50:3a:b7:60:
                    75:b7:63:18:a8:20:fc:71:c3:69:b5:f9:c8:cf:15:
                    d2:a5:72:b8:65:83:31:b0:d8:d3:e0:ad:5f:e7:c8:
                    af:45:f1:ec:26:a4:20:45:c2:e3:6c:77:89:7b:06:
                    16:97:fb:60:14:17:77:24:4c:ef:38:59:13:12:92:
                    dd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:42:5C:F5:71:49:55:FF:59:35:78:3E:0D:9C:FA:43:52:49:9F:4E
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ef:72:7f:49:c7:25:e8:72:c8:a7:70:28:cd:53:5c:1a:19:
         b3:22:e2:5f:ac:84:b4:84:a1:72:7d:38:99:87:08:e6:e5:09:
         70:4a:b7:c1:ef:c7:5d:67:03:1c:47:50:f2:26:6b:d1:35:a5:
         26:76:69:9b:38:04:ec:87:3e:89:a4:5f:b5:1e:3c:cc:73:7a:
         2b:47:ab:64:b8:07:1a:c2:a7:74:c2:25:58:06:dd:8a:f5:b4:
         fe:6a:c4:df:ca:63:47:28:fb:b6:e9:c3:b6:94:22:4b:b7:8b:
         c6:be:a3:56:4a:4c:b0:96:75:3d:a2:a5:4d:50:f6:34:24:a3:
         fd:b9:24:05:6f:83:d7:77:60:f5:43:2b:9c:71:e9:8a:78:a1:
         15:15:7d:3e:7d:41:25:1e:39:1d:7c:f0:02:64:ba:ec:f5:45:
         cc:99:4f:80:1a:d3:d5:c8:f9:98:df:40:75:d6:0f:69:3a:53:
         7b:94:b9:42:f6:7d:11:ec:c9:9d:6f:ef:ca:d8:c6:1c:41:b0:
         c1:8e:c5:14:eb:56:d8:b4:4e:01:12:d3:4d:e0:c4:38:be:18:
         8f:7d:d6:e9:f0:24:52:ab:dd:37:64:05:96:de:86:79:70:c8:
         4a:de:0f:f4:7c:7f:f3:f8:ab:b9:53:a9:47:28:86:58:94:30:
         fe:b2:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:34:04 2026 by rpki-client