Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File:                     oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier:          6pFl+dz3jRqTQZMGhfVkFcOwnn2VS3Z9KtECQrFqoRI=
Subject key identifier:   66:80:05:7E:52:3E:23:22:71:8A:6D:EC:59:F6:3E:FE:BD:F0:FB:CB
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer:       /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial:       019EBF23ECAD370AC24B32D0357FB96AF8C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number:          77
Signing time:             Sat 13 Jun 2026 04:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:03 +0000
Files and hashes:         1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
                          2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: RgsgrUM4VOO4fDwOqKwW7GPeHr0R7AGqmDofklz/bNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:ec:ad:37:0a:c2:4b:32:d0:35:7f:b9:6a:f8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
        Validity
            Not Before: Jun 13 04:01:03 2026 GMT
            Not After : Jun 14 04:01:03 2026 GMT
        Subject: CN=6680057e523e2322718a6dec59f63efebdf0fbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:c7:d5:29:f8:1e:32:16:bf:d4:54:5f:db:
                    08:e8:28:21:ae:8b:14:71:b0:f0:ea:3e:49:78:a7:
                    97:a6:f5:59:d8:5f:11:60:17:84:05:c8:1f:c4:60:
                    d0:c5:b8:3e:55:39:47:85:d4:60:e5:42:3f:91:35:
                    d1:14:1b:12:f1:66:2e:1b:e1:ad:28:d3:ac:af:b2:
                    fe:f6:f9:a3:45:a4:c0:9f:64:f6:ad:46:f3:d7:63:
                    87:cc:0a:47:4d:72:41:67:2d:08:fe:12:20:67:92:
                    03:f7:03:64:c2:b1:51:59:b5:aa:9c:d9:57:1c:85:
                    d5:08:23:15:af:dc:db:31:5e:15:17:44:72:8b:c4:
                    84:05:09:14:51:b5:32:02:1f:c2:74:57:68:ad:69:
                    5f:4f:31:a8:7b:fa:7b:eb:db:1f:9c:63:b4:aa:8d:
                    7b:17:f1:6c:84:29:61:f1:46:15:ce:a9:1c:aa:05:
                    22:e9:53:f2:35:47:b2:83:79:f8:7e:8e:61:e4:c0:
                    27:d4:d2:cf:ae:0d:da:0b:e7:db:6c:02:2f:87:8d:
                    88:27:e8:7b:3e:17:32:1d:11:a8:d2:02:3b:ff:29:
                    32:0e:1b:b2:81:08:8e:79:a9:c6:74:3d:79:78:7d:
                    5c:66:37:f6:9b:f2:2e:a8:b0:32:3d:68:fc:bb:fb:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:80:05:7E:52:3E:23:22:71:8A:6D:EC:59:F6:3E:FE:BD:F0:FB:CB
            X509v3 Authority Key Identifier:
                keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4a:ba:7a:39:8b:d0:b0:ae:66:5a:69:26:4f:6a:fa:ce:66:
         d9:78:e3:7d:29:1d:ef:a7:63:c5:a1:3d:e5:b7:8b:ff:06:4b:
         3e:ae:0b:dc:56:3d:9c:89:04:ef:08:f4:56:60:47:a1:be:92:
         98:de:a9:16:07:1b:85:9b:fb:65:89:dd:e0:f6:b4:75:c1:38:
         34:60:80:bc:d2:98:37:3e:fb:2a:df:c3:be:97:15:20:68:fc:
         57:e7:41:51:27:68:26:3d:01:88:a0:69:33:f7:14:b9:3b:12:
         b0:9e:eb:4e:ae:0e:c7:95:d6:8a:de:03:f5:25:56:5a:cc:9a:
         21:cb:a7:bc:9a:a3:12:de:f1:5d:13:12:4b:56:67:82:f4:77:
         b1:25:b9:7e:ea:ca:f8:20:c4:97:26:96:8a:89:5a:4d:40:e8:
         50:55:a6:3a:30:fd:d4:64:d0:c3:4c:42:9a:c4:3d:c7:e2:1a:
         cd:45:42:53:43:20:7d:88:44:21:19:cc:c2:49:8a:0e:f4:01:
         57:bd:7b:8a:dc:13:b1:30:91:f7:fd:83:e6:28:09:c6:4b:d7:
         62:d5:bb:8c:01:31:94:db:91:0b:77:bc:2c:e9:96:79:de:15:
         40:9c:47:65:f8:8e:a5:ef:10:5e:b6:d5:76:9e:ef:ef:1d:3a:
         01:9f:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:55 2026 by rpki-client