Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
File:                     7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft (raw, json)
Hash identifier:          2x38Epp90A9z+UurMOczj3+RVGuOi1KzOZP8xMVbFRU=
Subject key identifier:   F3:4F:E2:90:B9:54:6C:EC:FD:C5:7F:4B:30:9B:23:DA:4B:88:5A:5E
Authority key identifier: EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE
Certificate issuer:       /CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
Certificate serial:       019EC0A3EA950D0927E799719BFE76EB58D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
Manifest number:          CB
Signing time:             Sat 13 Jun 2026 11:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:28 +0000
Files and hashes:         1: 7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl (hash: BUlMGfQdDV1d7K1WrlYO1303O5+rU7uFcbLLyd10/iA=)
                          2: hYcOltYQ3coRzHfHtwK1cUy8X-c.asa (hash: GLuGjxVic7tB9lRTvZboOAKtaGC1m0nPNnwMd0FZxG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:ea:95:0d:09:27:e7:99:71:9b:fe:76:eb:58:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ca3b0dc4f0d975ae0fa8327496f4b0ce456de
        Validity
            Not Before: Jun 13 11:00:28 2026 GMT
            Not After : Jun 14 11:00:28 2026 GMT
        Subject: CN=f34fe290b9546cecfdc57f4b309b23da4b885a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:eb:d6:f0:33:89:c4:55:22:d9:d6:3b:7c:66:
                    0c:e8:3d:2b:3e:6a:ef:6a:57:d1:b9:c6:6b:dc:c8:
                    30:fd:63:da:a2:76:dc:73:94:8d:51:e2:29:1b:b7:
                    0c:fb:a7:da:68:73:06:5e:98:f1:c7:98:40:c3:13:
                    fd:70:be:b3:1d:e8:77:e9:c3:85:a9:ae:cb:86:dc:
                    c6:2b:bc:cc:d6:0a:46:32:9b:a1:df:38:40:58:e1:
                    0d:6f:62:2f:88:24:2d:5e:38:3e:41:bb:50:13:4d:
                    b4:a2:c2:94:85:fa:d4:84:ca:c3:6e:aa:0f:65:51:
                    d2:5b:86:6d:76:3c:5f:86:ff:02:48:b4:a2:39:f3:
                    f6:8f:90:fb:56:51:be:8e:b7:0b:3f:3f:f3:d8:b3:
                    ef:2c:22:5b:08:f0:a1:b4:f1:02:de:53:5c:c4:fc:
                    54:1e:f1:cd:0b:37:90:12:b1:17:f0:cc:c5:65:6e:
                    5b:58:82:ea:9d:ec:56:e3:89:7d:38:77:bd:cb:b5:
                    cc:89:92:b0:a3:d7:82:c9:35:7f:3a:0c:7d:6a:b3:
                    35:be:c2:cd:b3:d5:45:3e:b7:ea:89:b8:62:4b:39:
                    29:bf:3c:e4:1f:c8:93:0d:fc:49:a0:c2:ae:0a:eb:
                    f3:c4:e3:50:2e:f8:f1:20:77:f0:48:1f:38:10:d1:
                    f1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4F:E2:90:B9:54:6C:EC:FD:C5:7F:4B:30:9B:23:DA:4B:88:5A:5E
            X509v3 Authority Key Identifier:
                keyid:EE:8C:A3:B0:DC:4F:0D:97:5A:E0:FA:83:27:49:6F:4B:0C:E4:56:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oyjsNxPDZda4PqDJ0lvSwzkVt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/eee238-6c28-45e8-a898-823c18559d53/1/7oyjsNxPDZda4PqDJ0lvSwzkVt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:cd:c5:00:fb:7e:f6:81:a0:41:54:d7:7e:30:a5:8a:25:6b:
         c1:42:de:99:ea:35:ed:eb:50:ab:92:84:32:92:79:6f:df:4f:
         06:66:22:51:dc:c1:9a:04:2d:78:e1:92:4d:6d:d0:05:16:ad:
         5e:52:d4:73:44:d8:cb:02:2d:40:db:6f:93:bb:36:bb:27:ec:
         15:2a:2b:f1:be:24:63:df:75:65:70:ec:f3:d8:9c:78:d7:f4:
         8d:3d:75:f7:52:2b:56:f7:f7:81:f9:60:6e:28:64:84:2b:09:
         fa:a3:2a:58:c2:f0:40:73:13:89:00:eb:4e:50:d6:9e:0d:1f:
         ea:0a:38:48:a5:99:73:39:38:56:cb:e4:c0:fd:b8:a8:3f:51:
         ad:b4:b0:4f:0d:3a:7b:f3:96:cc:90:57:a2:b8:77:c0:31:a2:
         8b:4c:c9:c1:06:de:54:f1:81:78:de:70:0f:a0:ee:f3:7f:0d:
         49:71:8a:b8:38:c4:9b:11:03:c1:2d:5d:2a:be:3a:92:bb:e9:
         03:a9:22:46:66:9a:ba:34:a6:b2:18:83:44:64:fe:69:9f:6b:
         7c:5c:67:0a:4e:57:cf:d1:f3:ee:76:a3:e8:d5:97:02:a6:0d:
         6f:31:99:48:5d:59:be:7a:93:ef:ee:3e:31:bf:3f:b5:62:22:
         3e:db:c5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:37 2026 by rpki-client