Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File:                     rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier:          ot7Ko8MOHLwIopJ7xppRlHPgR2/Qvz4D8z5R9wPFS3w=
Subject key identifier:   92:31:FE:92:A7:5C:0E:3B:AD:F4:54:61:B2:30:DA:1B:5A:8D:74:CA
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer:       /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial:       019EC2CA13010A55ED8C97435DF6C27C69F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number:          0792
Signing time:             Sat 13 Jun 2026 21:01:23 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:23 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:23 +0000
Files and hashes:         1: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: /CjqahivQm8MHXz6/TZ7gA4RBEQBYX2fP0ePS2Zktcw=)
                          2: sKXut25F8mstcMlebmCBZ3ash14.roa (hash: WdcSiIGfJAIq+j/hEE113/iMWyToETbAb54DBmpGZ9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 21:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:13:01:0a:55:ed:8c:97:43:5d:f6:c2:7c:69:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
        Validity
            Not Before: Jun 13 21:01:23 2026 GMT
            Not After : Jun 14 21:01:23 2026 GMT
        Subject: CN=9231fe92a75c0e3badf45461b230da1b5a8d74ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:11:ad:55:42:88:b8:3b:71:c0:e4:2a:e3:
                    f5:78:62:4b:04:d5:4e:aa:f5:20:97:b3:62:58:e3:
                    cb:e8:db:24:5e:6e:fb:6e:11:a9:2a:9f:dc:9b:2f:
                    67:6e:4d:a9:2c:b6:ff:ca:e7:d2:5e:6f:39:d2:ff:
                    c1:af:21:4c:aa:39:cd:74:0a:6f:0d:6d:bc:70:f1:
                    7d:1b:1e:97:20:9b:a0:15:58:17:56:42:d4:b6:69:
                    25:2a:93:12:ef:06:b6:eb:1c:ae:fa:a8:57:9c:76:
                    c9:4c:f3:2d:f8:3b:c2:d6:a3:38:1b:fe:ff:53:45:
                    0c:1c:1e:3b:be:68:65:24:2f:79:57:f5:d1:58:13:
                    e8:e8:49:cc:1b:a4:6e:bd:fa:90:7e:3a:cb:d2:26:
                    34:d8:eb:57:78:40:10:6b:79:6e:54:77:a1:5a:3a:
                    9d:32:dc:4e:ca:a9:76:ab:94:6a:0a:a7:f7:08:d0:
                    ec:37:97:d4:20:64:75:6b:d5:73:67:4f:97:a0:9e:
                    91:4c:7a:cb:f8:21:03:56:66:30:87:3e:93:82:b0:
                    ab:f2:49:c4:06:2f:18:1e:62:72:a4:7d:c0:20:61:
                    57:b2:f8:0b:7d:a7:40:09:0f:86:fe:c9:70:f6:28:
                    cd:30:25:44:89:88:94:e7:15:e8:84:da:d7:c4:10:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:FE:92:A7:5C:0E:3B:AD:F4:54:61:B2:30:DA:1B:5A:8D:74:CA
            X509v3 Authority Key Identifier:
                keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:6f:51:f5:73:28:4c:97:96:d7:4b:02:91:de:98:d9:ce:
         c8:db:88:b0:8b:b3:13:e5:4a:22:78:f5:f2:ba:99:e4:ec:b9:
         cb:13:41:88:7f:04:30:5f:c6:73:a5:56:b8:fb:10:50:59:95:
         5b:02:58:cd:50:2b:67:3d:8f:95:cf:49:da:b3:cb:8a:69:80:
         64:1b:2c:09:70:e4:b8:47:7e:4f:c0:7c:70:d9:f5:1d:70:bb:
         e1:11:5e:98:d4:7c:ee:d0:0d:a4:ba:d0:7d:a8:cc:df:ae:99:
         bf:ee:4c:77:42:4f:57:9f:4d:9f:04:02:af:5b:2a:f1:e2:09:
         16:47:58:49:f5:27:96:6e:ef:da:f9:31:ec:e9:66:25:8b:52:
         38:e0:d3:f9:38:de:ad:43:2e:15:76:30:50:4f:27:d5:1e:4d:
         eb:2e:b7:73:61:45:5e:5b:df:cd:67:f9:78:18:0d:b1:a5:6c:
         17:0d:5c:ac:e6:44:70:48:19:f7:e0:7d:10:32:20:cc:eb:c3:
         ea:6a:9b:0c:9c:62:8c:53:7e:e3:17:eb:24:be:17:ae:c4:e3:
         65:03:1e:f6:a5:a2:35:4d:e9:70:d8:57:4a:5e:59:57:9b:05:
         e3:7b:51:2d:73:3d:81:99:8a:dc:7f:00:ff:71:0b:a2:93:7a:
         58:12:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:48:27 2026 by rpki-client