Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          kOSc3ZzB03Ph03oVE3Y0n1K9p9u8l8jx13DYO/DhCM0=
Subject key identifier:   8C:AD:D6:88:80:26:73:80:5E:91:99:47:9A:95:C4:BA:7D:48:4B:35
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       019EC0DB967FDC84A4E1C658ED95B806AB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          0FDE
Signing time:             Sat 13 Jun 2026 12:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:16 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: nlgWitPmoRCiY5pNBkHySX3RSg9wH/JFi2fbFJ4/cQw=)
                          2: tiPSu8Y-m7bFT2Q5p7YlDzHrV6E.roa (hash: rj77DrlmC39KWKVNN8waQm35MPNGKCIe/g9stIOU5to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:96:7f:dc:84:a4:e1:c6:58:ed:95:b8:06:ab:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Jun 13 12:01:16 2026 GMT
            Not After : Jun 14 12:01:16 2026 GMT
        Subject: CN=8cadd688802673805e9199479a95c4ba7d484b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:94:ac:8c:2f:42:b1:5f:40:db:94:4d:d9:
                    dc:35:cf:69:46:72:c8:1f:ba:87:5d:aa:10:51:5a:
                    33:68:a9:b1:92:cd:fb:f4:f6:bc:36:e0:58:c7:19:
                    b2:57:76:0a:ff:fd:1f:9b:0d:f8:0c:6d:b0:5f:56:
                    98:e0:91:3e:58:32:21:8b:76:26:11:3c:66:0a:5a:
                    b5:98:47:03:c0:a7:74:e9:30:55:11:6c:ff:f2:30:
                    32:66:d9:e0:e3:8b:08:82:b6:08:ee:3c:3b:cd:77:
                    d7:f9:46:60:a1:b1:19:ff:2d:8c:0e:b5:0e:6a:4c:
                    ed:fc:8a:e4:07:f5:e9:97:24:4f:c8:e9:3d:fe:35:
                    80:85:d6:72:0c:3a:9f:26:47:48:5e:bc:da:df:29:
                    fa:13:58:22:d2:2d:a3:38:b9:5f:90:83:73:52:8e:
                    0b:d2:8c:b1:00:64:70:36:6e:37:be:51:72:f8:22:
                    ec:16:88:81:8e:d4:7a:46:8c:d9:c5:63:9c:6c:cc:
                    41:d9:e1:8b:9b:59:60:68:6c:a9:61:ec:f1:cb:56:
                    81:e5:36:d9:34:76:63:5d:d3:98:7f:86:c3:46:10:
                    33:18:80:0d:d2:60:e8:45:3c:6c:06:e1:d6:3e:30:
                    72:46:1d:af:61:90:aa:30:f1:67:60:d2:3d:35:1b:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AD:D6:88:80:26:73:80:5E:91:99:47:9A:95:C4:BA:7D:48:4B:35
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:26:fe:22:04:b8:1d:03:e2:18:24:58:d3:15:a7:02:1c:03:
         1b:f3:87:c6:02:3c:0a:ad:ad:73:fb:a8:e1:ce:d4:0c:6c:f3:
         ee:96:f6:34:dd:9c:8b:56:f0:88:2b:c1:5c:7b:41:58:72:99:
         bf:a5:0f:7b:24:b0:f1:1e:d8:ca:84:88:bb:aa:13:6b:c6:e9:
         ab:5c:7e:02:b6:00:6b:86:16:dc:39:bf:93:7b:d6:ba:5d:0b:
         cf:e5:e6:23:c1:22:08:2c:ac:da:3f:71:d2:0f:24:de:eb:64:
         4e:72:ab:d9:1a:70:40:e6:4e:4c:31:14:b0:34:cf:6c:b3:41:
         d2:90:65:6c:08:04:d0:84:f3:20:17:58:b5:55:fc:6a:3c:e6:
         cb:df:68:48:f7:ca:d1:67:42:b2:a6:44:94:c2:df:38:f8:61:
         8a:35:90:a5:3b:ac:dc:11:8a:4b:be:c9:3d:d2:69:14:7c:5f:
         40:b2:05:e7:16:75:36:a3:bc:44:16:63:a7:c4:e2:f6:78:e0:
         87:e3:cf:d3:e7:36:0b:3e:3e:94:a3:c6:1f:80:65:8b:42:e2:
         66:1a:16:1a:bf:f6:30:4d:59:9e:d9:51:11:b0:44:93:a7:f4:
         36:ae:5f:da:4a:a4:3d:f8:81:d8:f3:25:d3:01:8c:43:11:74:
         12:e8:d4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:51 2026 by rpki-client