Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File:                     oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier:          5kt05RQPhqrMsGu4FcdAn72bG4cDI0Jp/HnwoU/TN/o=
Subject key identifier:   79:C2:8B:E6:14:ED:43:47:9A:1B:E0:3A:8B:A2:58:32:78:E9:FF:D3
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer:       /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial:       019EBF917182BF63241BBCC1E2A69257F223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number:          010B
Signing time:             Sat 13 Jun 2026 06:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:40 +0000
Files and hashes:         1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
                          2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: lsiBjggupyoOrCIthIGYTB1/AI66BE1DmYiA1FBqoTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:71:82:bf:63:24:1b:bc:c1:e2:a6:92:57:f2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
        Validity
            Not Before: Jun 13 06:00:40 2026 GMT
            Not After : Jun 14 06:00:40 2026 GMT
        Subject: CN=79c28be614ed43479a1be03a8ba2583278e9ffd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:22:6c:33:0e:79:e9:ad:47:9a:34:04:2a:
                    e6:5d:8b:27:48:1e:45:4b:7d:1c:0b:15:5f:0b:1b:
                    98:29:3d:a9:4a:89:18:7f:60:4d:2c:ec:b9:ac:23:
                    7f:83:f3:ec:d9:3b:c6:ff:a1:65:f5:d4:99:41:e1:
                    05:85:a7:37:36:e5:e0:d5:ad:d6:fa:6d:9f:11:5f:
                    c6:b9:0f:2b:9f:3e:9d:6f:71:31:bf:35:77:cc:7c:
                    25:2b:10:64:31:be:79:3d:d7:41:f2:10:64:5b:23:
                    ca:35:fd:c9:b2:49:5e:46:76:d9:dc:cc:c5:40:59:
                    87:61:0e:c7:1f:f1:cc:19:7e:f1:30:f2:58:42:05:
                    63:c4:b3:86:4b:d8:89:4e:68:a4:9d:df:9b:30:43:
                    fc:8a:ad:66:fc:dc:9c:8c:1c:89:e9:27:cf:7c:aa:
                    4c:9b:70:0f:b2:69:d3:59:22:aa:dd:8e:f2:04:56:
                    1a:92:70:f9:46:ce:b6:52:b4:c9:c3:6b:ff:f3:c8:
                    07:3d:f6:e9:80:07:fc:89:32:b7:d5:49:1c:b2:af:
                    0c:5a:64:4b:be:e9:88:85:92:86:1b:4c:b9:d5:37:
                    ee:6d:db:12:a8:12:4f:dc:cb:94:fe:69:b4:0a:0f:
                    61:67:d6:dc:29:cb:f9:c8:2e:10:51:34:6c:72:54:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C2:8B:E6:14:ED:43:47:9A:1B:E0:3A:8B:A2:58:32:78:E9:FF:D3
            X509v3 Authority Key Identifier:
                keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:39:7c:9c:be:c8:31:37:8c:f5:7d:29:b0:5b:01:4e:ec:ce:
         1f:8b:3d:b0:73:fe:f9:a1:fe:b8:be:b3:c5:90:b4:ec:c8:34:
         82:f1:ef:39:85:68:e6:c8:f2:0d:83:4e:a9:34:2c:1c:b8:75:
         3a:d5:2b:17:63:65:46:35:9b:ff:cc:23:40:20:c8:d1:20:41:
         ee:40:a6:bb:94:90:58:04:9b:e6:37:be:67:b1:2b:b1:0c:d5:
         88:61:76:f5:95:4b:cc:3e:8d:ae:fb:92:c0:ec:c7:4b:fd:7e:
         df:df:f1:06:05:38:8d:38:ee:7a:1d:52:e2:e3:0f:ab:a8:76:
         74:c6:8f:ee:b3:97:e2:8d:66:ae:45:5b:b3:e5:b0:e3:1f:2a:
         2b:2d:c3:a0:51:20:c2:8a:1e:12:d2:20:d8:5f:b2:9c:04:65:
         9c:1f:dd:07:59:c3:1c:1f:df:26:52:fa:a8:e5:fd:08:1b:76:
         7e:12:90:01:00:6f:a8:12:78:c1:17:10:91:ba:17:10:53:ac:
         cb:fb:b2:93:cc:c1:48:c1:ee:3a:fc:de:b7:31:51:1c:fe:f0:
         b7:9a:2e:2a:e0:98:3f:c2:79:b7:57:85:72:97:47:7c:34:d1:
         9e:2f:11:ab:a6:f9:c9:3b:32:2f:87:3d:fc:ef:da:19:39:47:
         b3:ff:a2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:34:23 2026 by rpki-client