Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File:                     C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier:          qUGgkxK29YYXbIgMKyXiLcDEFEAII11Su1LgLNcwl4U=
Subject key identifier:   79:E5:80:EF:89:A4:FD:5E:9C:64:31:29:AF:C4:34:2B:0F:4E:28:F6
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer:       /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial:       019EC148749CD09CE6061ADF914BC6CF28F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number:          0729
Signing time:             Sat 13 Jun 2026 14:00:11 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:11 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:11 +0000
Files and hashes:         1: 6ABbzKC7xD3f15f1nL7ehPPdv8g.roa (hash: vm92m0MvDsKxhJur0/wyRBU4n09f3ypTfzNsc2DUitY=)
                          2: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: Hyr2oT864oo/Ci2QWrhVRNdyXHVQv2E0e0FbKc7Ugqc=)
                          3: uWma75PdV6AVC83aCG-d5GXsBTA.roa (hash: l+sIuRGwU1mgUSZbtQoGfvEHgDWDmkYLosWZi/xYnJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:74:9c:d0:9c:e6:06:1a:df:91:4b:c6:cf:28:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
        Validity
            Not Before: Jun 13 14:00:11 2026 GMT
            Not After : Jun 14 14:00:11 2026 GMT
        Subject: CN=79e580ef89a4fd5e9c643129afc4342b0f4e28f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:54:ff:24:89:a1:ce:88:cc:2b:40:cb:c0:
                    59:c9:1d:0f:bd:84:af:fe:4b:d1:93:36:34:66:8a:
                    a4:63:55:1f:2a:8f:15:9c:65:54:d6:3b:c2:9a:7c:
                    d0:e8:e8:66:05:fb:40:f9:df:c9:e2:99:98:5c:c7:
                    7c:7b:95:42:6d:04:fd:b6:21:68:fd:1c:9d:2e:13:
                    bf:18:97:4c:4b:e9:a8:1c:f0:72:4a:73:bf:15:97:
                    7c:7a:9b:77:dc:25:55:8f:47:91:f5:2e:76:12:7c:
                    9c:f7:48:7b:94:c9:73:7b:5f:85:62:00:e0:dd:8e:
                    df:94:99:35:0b:e4:f1:ad:47:68:9f:2d:e5:86:39:
                    ec:4e:01:0c:2b:01:5e:d3:92:3c:d6:58:98:23:92:
                    fd:b0:8e:6f:8b:65:17:79:f8:88:1f:a6:79:fc:fa:
                    72:2e:3e:bb:6d:c0:a2:2d:cf:87:42:6d:d3:85:c4:
                    f7:07:6a:94:ea:22:d4:0f:c6:86:13:99:7d:22:a6:
                    07:55:d6:87:38:49:12:a3:f1:09:d6:24:f0:5f:45:
                    b5:2d:82:e8:4a:20:b5:1b:90:fe:e3:ec:e6:8a:71:
                    d2:d1:ec:ed:c3:01:1d:c4:2d:40:33:2a:ee:d2:db:
                    8d:41:c3:5f:75:d0:2f:28:ef:c4:2d:fa:4e:90:74:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E5:80:EF:89:A4:FD:5E:9C:64:31:29:AF:C4:34:2B:0F:4E:28:F6
            X509v3 Authority Key Identifier:
                keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:e9:5e:10:71:41:26:30:a3:d4:27:e2:5e:38:20:5e:0b:ec:
         3d:b7:7b:0f:6c:93:d4:b6:03:5c:ac:63:58:fe:d0:94:ff:62:
         db:f3:f7:a8:4b:c9:21:80:36:be:80:d8:54:5a:02:67:8d:60:
         56:e1:6c:ac:76:19:88:b5:02:4c:70:c6:86:c8:80:56:8b:17:
         a3:32:72:74:a9:7c:1d:d2:0f:ff:ad:26:e7:c1:50:f3:b6:62:
         5d:90:24:b1:5f:13:88:42:48:42:8e:ee:c2:42:1e:59:b1:a6:
         9d:b1:01:f8:bb:b5:94:bb:22:da:d4:68:81:f4:cb:08:32:e4:
         35:5a:3d:29:79:07:8a:83:9f:d7:a4:9b:23:9d:5a:ba:a5:e5:
         a3:3e:a8:fe:95:bf:d6:87:f1:74:95:06:6d:67:4b:61:f3:43:
         09:ba:68:44:8f:86:81:b5:07:e8:47:76:14:d7:c6:37:ec:4a:
         ef:d4:8e:ec:03:d9:10:0d:95:dc:f9:4e:80:2b:3e:26:2e:68:
         61:d4:93:23:3b:2f:0b:96:8a:11:2c:94:03:3b:49:b7:c6:cf:
         18:d9:e5:60:f6:87:ff:73:eb:40:8c:b6:39:15:c0:46:9e:ca:
         d0:e9:90:5d:14:9e:6d:e9:5d:d4:c3:a8:28:3f:4a:7a:ae:d0:
         a5:f4:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:47:02 2026 by rpki-client