Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File:                     G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier:          EtC0GG66/ankrHAulEJrGYR4V4+cRHSdDVlXrecmMgs=
Subject key identifier:   8B:6E:62:46:A8:D1:DA:E9:D8:DD:5D:B5:92:3D:6D:A5:19:F8:CF:86
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer:       /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial:       019ED3862D73257D1BE17C79A0601C6D40B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number:          0C5D
Signing time:             Wed 17 Jun 2026 03:00:46 +0000
Manifest this update:     Wed 17 Jun 2026 03:00:46 +0000
Manifest next update:     Thu 18 Jun 2026 03:00:46 +0000
Files and hashes:         1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: 6qNvrEtcEpL+Zxi9YA8MjqWP19UvJ5jdwfAkt9yDLbY=)
                          2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
                          3: eqG_Lu9K1qeyCezwmD8iSckpXF8.roa (hash: NNiUw+36eLooMz2fegl+jBJENlw1OVfq6vuvVM1umzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:86:2d:73:25:7d:1b:e1:7c:79:a0:60:1c:6d:40:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
        Validity
            Not Before: Jun 17 03:00:46 2026 GMT
            Not After : Jun 18 03:00:46 2026 GMT
        Subject: CN=8b6e6246a8d1dae9d8dd5db5923d6da519f8cf86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:19:81:8b:6e:93:6b:13:af:8b:ea:92:fb:
                    d2:86:f0:9d:77:8c:73:52:81:bb:ae:5a:f0:cc:ce:
                    c7:0d:f0:ef:c2:14:41:42:5a:e6:04:0e:13:2b:eb:
                    97:cb:96:fb:11:7c:cd:1a:59:40:9d:00:06:d9:f5:
                    64:31:0d:70:27:ee:05:35:e8:3d:36:33:ee:f6:6d:
                    32:b0:b2:fa:07:1b:c4:61:be:88:ee:b4:f7:16:27:
                    28:96:86:83:a1:49:8c:16:a6:90:f4:d6:77:a2:81:
                    2b:8e:14:ac:18:1d:79:46:90:3e:f1:06:53:b8:f7:
                    24:be:cc:06:33:c3:36:83:d0:8e:30:ea:f0:00:ff:
                    b4:80:bc:5a:86:02:42:f4:e1:01:be:6c:49:3a:8d:
                    df:53:05:ed:43:fe:d4:fb:b6:db:e0:39:86:b3:6d:
                    ca:96:63:f2:e7:19:88:08:9f:d6:3e:85:98:b7:09:
                    40:12:4b:0a:12:46:4a:cb:5c:e5:7b:96:13:09:9d:
                    2b:09:99:4f:cf:db:66:46:94:21:20:2f:3e:eb:02:
                    c7:53:2b:21:6c:2f:90:81:a2:c9:58:2a:e7:dd:26:
                    b0:64:91:93:89:0f:77:78:98:0e:63:c3:93:91:28:
                    81:ba:c9:e0:22:9b:fb:29:eb:8d:ca:3e:0f:a0:c6:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6E:62:46:A8:D1:DA:E9:D8:DD:5D:B5:92:3D:6D:A5:19:F8:CF:86
            X509v3 Authority Key Identifier:
                keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:3d:07:ed:a0:48:af:e9:44:d0:d2:4a:7d:01:94:13:b0:
         8d:61:ad:e1:47:5e:5c:9c:0b:b2:34:74:cd:6e:42:15:c4:12:
         e1:bf:71:ff:8c:f5:d9:cd:bd:30:d8:d5:42:93:23:09:1a:e5:
         45:23:49:ff:6e:a6:b1:32:60:f7:dc:11:81:92:f0:7f:d4:bb:
         63:35:c8:e9:6e:12:4e:97:e6:c5:3b:73:e4:f0:be:7a:56:ac:
         8c:ee:ff:5c:2c:60:73:99:b9:ff:b5:c6:55:7f:61:51:e0:6b:
         b1:c8:0a:a8:d0:ba:f1:7a:3c:45:45:d6:c1:78:30:be:4d:5b:
         00:f0:a7:62:23:71:c1:b1:78:b4:b2:c4:b2:29:67:8a:9e:b9:
         80:d7:b2:14:a5:19:c3:d5:44:6f:a2:7f:53:13:1f:dc:93:ec:
         be:00:36:43:a0:34:bb:30:aa:b4:c1:f8:af:1b:c9:e7:4f:7b:
         d2:50:44:f8:e1:0d:ea:aa:a6:bc:c4:c8:26:a1:c9:f8:94:c6:
         49:0c:c8:df:d1:62:a1:21:ba:b8:9c:22:55:59:b1:e0:03:c8:
         26:30:1b:25:c7:0c:4a:a8:77:72:11:4c:87:22:44:d0:89:3f:
         f6:f0:6f:e1:5d:cc:8b:b5:55:41:35:fa:ce:60:fe:fb:ab:51:
         11:5f:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:01:58 2026 by rpki-client