Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File:                     0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier:          ycSFHCeMe9FBCddJ9roa54JOPz4tqsD2xJUVfNtYs7c=
Subject key identifier:   8D:65:F2:FD:AB:1A:B3:AD:18:F2:42:CB:FC:A3:43:25:C7:EF:EC:F3
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer:       /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial:       019EBD34CD8B2ED121608C5FF4D49556EA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number:          078A
Signing time:             Fri 12 Jun 2026 19:00:14 +0000
Manifest this update:     Fri 12 Jun 2026 19:00:14 +0000
Manifest next update:     Sat 13 Jun 2026 19:00:14 +0000
Files and hashes:         1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: JxF7cy0cTO2IvrvClTZ9YwUONJJJ75qUJ+7fKLDteu0=)
                          2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:34:cd:8b:2e:d1:21:60:8c:5f:f4:d4:95:56:ea:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
        Validity
            Not Before: Jun 12 19:00:14 2026 GMT
            Not After : Jun 13 19:00:14 2026 GMT
        Subject: CN=8d65f2fdab1ab3ad18f242cbfca34325c7efecf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:2a:b5:04:e8:38:20:60:6d:07:b5:b1:c4:
                    b5:f6:a0:1b:a7:23:3d:08:ba:ea:71:ae:54:5c:e1:
                    28:9e:95:8d:89:ca:73:49:cd:ed:c8:69:c9:76:ab:
                    d6:27:65:df:55:cb:0f:f9:dd:3e:58:2d:2f:65:56:
                    ee:41:9c:46:00:fe:78:bb:c6:b3:27:4c:5c:da:34:
                    47:18:8f:32:99:a5:f7:2f:fc:b9:5b:09:d1:fd:a9:
                    64:a0:cb:65:4d:53:87:c6:d5:0b:d4:bc:97:1b:f3:
                    de:25:45:f2:41:ec:c6:fd:d3:7f:ec:b3:48:48:82:
                    70:5a:c7:5a:ea:2a:fb:c6:01:c0:aa:8f:77:29:35:
                    94:4b:1a:f9:3d:16:5b:4d:f8:28:52:e0:60:d9:5c:
                    cb:af:9b:e5:28:f1:03:2d:f7:e6:05:74:5e:b7:0d:
                    10:ef:4d:4a:f8:c5:9e:93:85:93:06:e5:d5:1a:cc:
                    40:0e:c4:4a:66:d8:39:3c:66:91:06:74:14:fc:19:
                    b9:56:57:a0:d4:f5:b4:6e:72:d8:85:28:2b:10:b4:
                    36:4e:9b:c5:1f:01:f1:bd:f3:e4:63:39:d5:ec:b3:
                    c4:bb:3d:4c:a0:22:17:19:4d:fc:7b:e3:cf:d5:07:
                    24:c3:fb:f7:d4:d9:3e:95:e7:b3:5e:b7:a9:1e:c6:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:65:F2:FD:AB:1A:B3:AD:18:F2:42:CB:FC:A3:43:25:C7:EF:EC:F3
            X509v3 Authority Key Identifier:
                keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:08:f5:cf:52:dc:83:32:c8:6a:89:67:32:1a:6f:06:14:27:
         99:3e:e5:70:27:1a:9d:b9:fd:de:be:6e:88:8c:b0:ab:4c:78:
         c1:2d:5e:71:ae:ab:87:18:52:9d:d6:3b:7e:2b:88:b6:c5:71:
         ac:6e:95:3c:90:20:d2:bb:1b:5a:8c:7a:09:65:29:75:bf:f4:
         f2:0c:02:9a:4a:ae:3f:af:a9:0e:79:a0:7c:77:dd:02:85:5b:
         c5:47:e3:dc:78:54:da:7f:c0:6f:7f:93:ea:b0:14:c9:be:24:
         59:df:74:6f:c9:b4:0b:63:99:b3:ed:d8:a3:40:63:95:1c:6e:
         4b:bf:b8:48:08:77:1d:ca:ce:71:4b:f7:ea:c7:e7:2e:9a:c9:
         ae:6d:ab:98:9f:a5:63:dd:6c:a3:18:1d:c4:cc:d6:92:b8:76:
         3f:8f:eb:5a:38:01:42:2d:14:2a:45:08:54:42:dd:14:ed:5a:
         87:8b:0d:0b:46:91:56:c5:d3:a5:a1:d1:c7:cc:a0:19:37:c6:
         cc:60:b0:96:2b:91:da:7e:f0:33:6e:ca:18:21:38:65:30:5a:
         d0:49:c7:e7:2b:a5:d4:38:e3:80:c3:3f:f0:0d:9d:1c:38:87:
         15:c0:8c:d5:3d:07:69:72:b0:e1:cc:e7:7f:12:9f:c7:33:54:
         29:ae:e5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:16 2026 by rpki-client