Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File:                     ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier:          53Td+2PDirwRfgMJrpohwke8NhnzOWp0EhZPfL0Bvis=
Subject key identifier:   2C:44:27:61:CF:54:F3:A0:56:CA:89:07:41:DE:BC:02:DE:0D:64:DC
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer:       /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial:       019EC3A53CD9737F5D12AFABDB85C2ED2532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number:          0E58
Signing time:             Sun 14 Jun 2026 01:00:46 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:46 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:46 +0000
Files and hashes:         1: 3GwgcAPKG43MCPD8y9300VUUE7U.roa (hash: InZ5p01xw0MRhLMDOeL96L2077Wx0d7vpVCiYPBd65g=)
                          2: IGazZEaa03q0gZwkZa-a01KbsAE.roa (hash: kHgUBuHcjhycij9YJiSSXrr0v5v65zQmDRpctF0dSM8=)
                          3: YR_Sklpw1rT1jn14ENZmY_YlgSc.roa (hash: a6i5iaFNJsMyMSeoRuHDFzGc9ROq7AMhUx/2K/zffhI=)
                          4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: YDIUNAdoLUtU8D/zmxzCt7MAit2poiraJ3ulGBXNKak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:3c:d9:73:7f:5d:12:af:ab:db:85:c2:ed:25:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
        Validity
            Not Before: Jun 14 01:00:46 2026 GMT
            Not After : Jun 15 01:00:46 2026 GMT
        Subject: CN=2c442761cf54f3a056ca890741debc02de0d64dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:fc:1b:c2:7d:b0:ed:ad:aa:2c:ed:f0:b6:
                    82:f1:a2:27:50:ae:71:eb:b6:8f:0f:e3:d0:b1:24:
                    91:8e:4d:7a:c9:3e:cb:ed:4c:30:5e:4d:a0:86:ff:
                    dd:e8:c4:1d:65:ee:cb:b0:5e:45:1d:fb:8f:f8:7f:
                    1c:ed:ec:24:a1:02:dc:d3:cd:b7:bd:f2:c2:8f:3a:
                    62:13:af:85:1b:ee:da:c4:0c:f4:f8:d2:c8:ac:b2:
                    fb:2b:2e:a7:e4:37:d5:4f:f7:fe:32:79:fb:21:9f:
                    a7:50:5e:30:7b:e3:35:24:af:b0:28:47:b4:ee:f9:
                    fb:b6:51:c4:8e:92:a8:17:08:1e:d2:ee:e6:40:ee:
                    c1:5c:36:6d:76:ab:4d:14:2b:1a:90:55:12:88:ce:
                    e0:15:e8:0a:2b:d4:6f:73:53:88:b6:e3:a8:e2:56:
                    c5:20:1f:31:08:a0:36:33:23:4f:45:75:c0:54:af:
                    8e:94:eb:90:91:a6:5d:00:8d:3a:13:ea:bc:5f:a8:
                    47:16:4b:7d:a0:8f:af:7a:57:c7:be:a7:bb:e0:ec:
                    42:92:d2:95:20:c9:82:36:2d:e6:0b:dd:97:9a:5a:
                    e4:70:96:15:9d:50:58:f5:72:d6:ae:30:83:d0:f1:
                    22:b5:57:10:8d:83:95:ea:25:f7:58:ac:69:1e:bb:
                    17:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:44:27:61:CF:54:F3:A0:56:CA:89:07:41:DE:BC:02:DE:0D:64:DC
            X509v3 Authority Key Identifier:
                keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:38:42:b2:96:99:ac:92:b5:42:5a:4f:04:b5:7c:ec:e9:42:
         10:89:8d:1b:4b:9c:6f:58:1c:77:99:2f:6f:7f:64:73:24:32:
         63:5a:96:9b:82:17:fe:42:44:a8:6c:4d:69:17:c5:a3:43:32:
         27:d9:68:79:e4:ba:0b:95:8f:b8:d2:86:89:1e:74:11:9b:5f:
         4a:f6:cf:1b:b0:57:c1:fb:d9:fb:c5:fb:e8:f9:d7:d9:84:4a:
         dd:fc:2a:98:8c:45:d0:9a:81:78:6d:5b:03:9b:36:fd:b4:8c:
         ff:4c:c2:86:fb:79:35:bd:2f:fe:65:84:2a:52:56:f6:0e:e0:
         3a:93:9a:54:54:a9:50:ae:f0:e8:7d:b2:d6:62:ba:4e:80:46:
         d5:42:bd:97:b2:4c:bf:ed:cd:eb:4d:6f:85:c0:7a:7d:39:fb:
         9f:5b:03:3a:6c:09:f2:7f:42:69:6c:49:59:44:a6:ba:49:0b:
         2c:c4:29:9e:88:56:e5:99:2d:d0:75:c4:07:64:e5:d1:3f:0a:
         66:5a:6f:64:6f:c4:1e:6f:e4:fb:e5:04:dd:e2:a7:4b:ed:ab:
         d1:c3:e5:c9:04:31:8f:25:e8:fe:dd:ed:58:68:4d:5b:dc:3d:
         f9:5b:b7:6a:4b:03:c2:f3:b4:72:72:eb:4d:c9:2f:a1:a6:0e:
         bf:6a:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:13 2026 by rpki-client