Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
File:                     gNclN8xUrBC0q_rMcsG3VMFxr48.mft (raw, json)
Hash identifier:          bEFgkJhTAAd3PVdgIW//TDAu3BVrerZ9hvQ8SM3P8WQ=
Subject key identifier:   8F:5E:8B:73:CF:44:46:D9:70:AF:87:88:6C:AC:DA:A3:7E:46:A0:7A
Authority key identifier: 80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F
Certificate issuer:       /CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
Certificate serial:       019ED34F7001C8D236578748A6494DBD2564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
Manifest number:          08B6
Signing time:             Wed 17 Jun 2026 02:00:58 +0000
Manifest this update:     Wed 17 Jun 2026 02:00:58 +0000
Manifest next update:     Thu 18 Jun 2026 02:00:58 +0000
Files and hashes:         1: gNclN8xUrBC0q_rMcsG3VMFxr48.crl (hash: IQ3AyMx1tqY4rP/kNI256vmfOkk24iCP5nwuu4lxcJs=)
                          2: zD728h1UCihkQAXpX92CPXnx1Gs.roa (hash: jxmfADV7fNflCtFxiDKR6culeD+Aw9hg4Dg9BnOAg8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:70:01:c8:d2:36:57:87:48:a6:49:4d:bd:25:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d72537cc54ac10b4abfacc72c1b754c171af8f
        Validity
            Not Before: Jun 17 02:00:58 2026 GMT
            Not After : Jun 18 02:00:58 2026 GMT
        Subject: CN=8f5e8b73cf4446d970af87886cacdaa37e46a07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:9f:03:4c:2a:bd:e1:56:36:71:d9:2a:e6:
                    f2:c8:99:48:de:18:ed:5b:df:fd:56:e1:21:06:43:
                    ea:b3:0d:aa:b6:1c:b3:9c:82:a5:f8:1d:ef:c7:b2:
                    19:e6:42:33:88:21:47:41:84:f1:15:de:16:fe:13:
                    51:e9:28:ea:17:ce:08:ce:15:28:8e:ab:76:e6:a7:
                    74:3a:9a:93:1c:f9:44:93:1a:1a:23:cc:ce:c8:56:
                    10:8c:19:92:df:d6:12:da:a1:e7:2d:43:29:9d:92:
                    6a:c7:2a:cd:8c:ee:2b:1b:1c:f4:f4:23:78:87:a2:
                    15:09:99:a2:cd:ab:ff:75:6c:1a:b7:1d:b8:b3:e5:
                    54:3a:73:ad:72:2d:c5:10:75:aa:62:41:9b:85:e8:
                    b2:ea:40:8d:a6:7d:15:ea:91:5f:cb:50:ef:ae:84:
                    f5:a5:f9:ce:a4:9f:7d:6b:a8:c9:4e:28:f8:ee:2a:
                    c6:29:a6:a0:a9:6f:35:60:48:a5:6e:ac:6d:c3:44:
                    f1:77:bf:40:9e:57:0c:88:ea:11:82:89:3e:d2:23:
                    df:e2:fa:36:37:7a:6c:6f:a6:9b:ee:30:13:ca:8c:
                    84:30:b3:b2:4d:8d:7c:74:94:08:d7:ce:72:08:a6:
                    06:55:44:6d:09:b9:4c:3d:01:db:e5:25:4c:0f:01:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:8B:73:CF:44:46:D9:70:AF:87:88:6C:AC:DA:A3:7E:46:A0:7A
            X509v3 Authority Key Identifier:
                keyid:80:D7:25:37:CC:54:AC:10:B4:AB:FA:CC:72:C1:B7:54:C1:71:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNclN8xUrBC0q_rMcsG3VMFxr48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/200fa4-4578-4ae8-9ffb-2ed269384a74/1/gNclN8xUrBC0q_rMcsG3VMFxr48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:38:b3:8e:51:7a:d6:21:36:e3:b5:1c:1c:1f:bf:46:80:26:
         79:17:db:e8:46:ec:dc:c7:4d:79:93:21:1d:94:79:90:38:3e:
         93:ea:f4:ec:e4:97:02:b6:17:48:02:3a:0f:69:43:11:7d:60:
         c7:42:16:26:1b:a7:01:61:58:bb:07:79:96:fe:31:4d:99:3a:
         17:03:80:ce:e4:4a:56:98:c2:e4:ae:c4:f1:e4:9d:a5:7f:83:
         e5:7c:e5:14:03:29:55:16:c0:33:81:92:a0:c4:7e:96:ff:36:
         d0:9b:62:7c:73:92:dc:6a:63:b2:f9:b7:da:94:ed:1c:40:74:
         df:50:e5:1b:82:0e:58:d4:1f:96:61:03:08:f7:f6:5a:c2:cb:
         6c:16:6b:f0:0d:9e:3d:d7:59:13:4c:62:9e:ed:b6:d5:96:9e:
         8a:01:98:c8:e6:dc:0a:98:bd:01:be:5d:c8:3b:d7:73:1b:30:
         08:4e:1a:36:b5:f8:e6:b0:0b:d5:d3:6f:09:b8:84:41:0e:44:
         fd:55:fb:c5:e5:aa:36:c0:fa:b9:19:56:db:64:68:69:3c:39:
         0c:60:77:56:98:48:6d:c3:cc:70:b8:c6:ae:a6:54:e2:59:c8:
         3b:ed:08:63:ce:04:cc:e6:59:e6:75:c3:3c:40:e4:91:9b:9a:
         7a:a7:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:40 2026 by rpki-client