Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File:                     TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier:          UErIXfovVsx1mBPOmVMlhxGY9cH9SfSV4ZdA71/lf7U=
Subject key identifier:   58:27:7E:60:36:95:16:3C:C8:15:85:2E:EA:23:88:5F:0B:22:51:2E
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer:       /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial:       019EBE48194637103D41AE434C1D23716193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number:          09F0
Signing time:             Sat 13 Jun 2026 00:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:56 +0000
Files and hashes:         1: 4B_VfQWMTYDObUKM-BwKNSOeYqM.roa (hash: GtaOXYjrA7K8muzv0dOWQS3DgfVa4oJVWDqmEM1Lb0o=)
                          2: 8Q40PlY6cpiTHKi29S26G9DdZhI.roa (hash: ZDmF+D6x42sRt1+OHh8Qa/2IzhhfYVV5gqAu2bLK1o8=)
                          3: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: lBBsaaLZ37qlLi0C3XGYyTla+/YOe1KdEtDKaisDq8k=)
                          4: mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa (hash: VwZ3L7NHL8vXYsjYAD8iL+X2hR9DNXoNspGIhoXBzzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:19:46:37:10:3d:41:ae:43:4c:1d:23:71:61:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
        Validity
            Not Before: Jun 13 00:00:56 2026 GMT
            Not After : Jun 14 00:00:56 2026 GMT
        Subject: CN=58277e603695163cc815852eea23885f0b22512e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:8c:7d:ed:44:0f:b5:a3:03:f1:81:69:31:
                    eb:95:08:0d:48:45:ef:09:9a:f3:39:d9:38:5d:30:
                    4a:fb:a1:d9:a7:fc:46:79:c9:87:b4:92:7f:75:6a:
                    ca:6c:96:31:3f:71:10:30:13:9d:58:7e:72:68:77:
                    c9:4b:fa:33:a8:71:2c:36:38:41:a9:c1:41:09:c9:
                    28:c3:a7:18:d1:60:a9:50:15:4a:76:bd:16:44:e7:
                    ab:09:78:13:d8:14:cd:a9:25:ce:a1:d1:f9:d8:d8:
                    c9:0d:7e:6b:15:eb:4d:ae:a6:8d:8c:a1:fd:62:87:
                    c5:7d:5e:b0:09:77:c3:9a:4c:bc:d7:24:e7:d9:83:
                    36:80:42:bb:d7:53:2e:a4:56:b7:83:95:06:d9:57:
                    b7:89:0e:d6:28:b1:3d:07:6b:81:2c:f6:b5:52:6e:
                    a4:68:5e:68:e2:58:04:d5:1b:2a:5a:10:d9:6b:fd:
                    9a:26:60:01:a8:e5:b3:dd:74:1a:26:ac:8c:ba:0d:
                    22:1d:19:a4:0b:be:01:1e:85:d3:bc:32:0e:fd:42:
                    a7:df:51:d8:f3:f0:e8:53:e2:14:42:55:c7:09:82:
                    09:d0:05:a6:15:c6:65:4f:87:39:2c:6b:f0:10:b1:
                    6a:c0:7b:5c:06:b8:9a:18:8d:60:20:29:d8:55:54:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:7E:60:36:95:16:3C:C8:15:85:2E:EA:23:88:5F:0B:22:51:2E
            X509v3 Authority Key Identifier:
                keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:52:86:26:2e:de:c8:9a:43:0e:f4:f5:f9:bb:83:56:83:f9:
         1e:da:17:f9:3c:36:20:90:9a:bf:e1:40:e2:26:83:9c:61:fc:
         84:58:35:64:2d:45:76:3c:66:7e:b9:90:97:60:b6:24:fb:fe:
         c0:60:30:94:c2:74:7e:d7:d0:fb:78:c9:11:4b:53:43:25:a9:
         17:59:a8:c7:2b:55:74:30:57:6f:36:97:b9:fb:c6:40:cc:a1:
         87:1d:33:78:1e:2e:25:0d:21:0b:dc:bf:34:86:78:e1:71:dd:
         68:2a:d2:9b:e6:83:92:fc:13:bc:55:6e:0b:03:ba:d9:0b:47:
         55:fd:7d:db:e9:f3:c6:3d:30:76:4c:b4:40:d5:25:5c:ea:1a:
         90:ff:d7:fa:99:0f:c3:12:0d:e4:8a:36:e8:78:55:a1:cf:b4:
         a3:37:0a:93:e2:cb:7b:d4:02:32:e0:fe:7b:94:4b:46:ee:54:
         20:13:ff:65:aa:69:35:b0:55:98:01:f9:05:2f:4f:86:63:82:
         ec:36:74:12:90:5f:28:2d:17:80:3f:56:0c:3c:5f:d8:43:e6:
         c9:81:6a:23:d2:02:71:7a:ea:b0:0e:80:11:18:92:03:c8:66:
         76:59:c4:06:e6:51:f5:59:90:db:a2:8d:5e:80:90:8c:fd:a8:
         48:40:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:43:59 2026 by rpki-client