Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
File:                     AozMjYF4yenS_8Uy_LXNaL6qd20.mft (raw, json)
Hash identifier:          u45nkOmIy29Ac1G/Fw13l8ovJPVI+RDBxnzMcvrQwV0=
Subject key identifier:   B6:78:40:7D:58:6F:7B:28:C8:F1:9B:8B:AF:0A:A0:1A:51:BD:8B:D9
Authority key identifier: 02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D
Certificate issuer:       /CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
Certificate serial:       019EC06DF0A202F3C1A7EEAE015E0B0A3711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
Manifest number:          03A3
Signing time:             Sat 13 Jun 2026 10:01:30 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:30 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:30 +0000
Files and hashes:         1: AozMjYF4yenS_8Uy_LXNaL6qd20.crl (hash: id+PAvYe4Hv+wl0ysUGsnSi4eAfx/Wg5sJDszED17gU=)
                          2: nmpgPMBFt9dLqNX0M81_MpAwEgA.roa (hash: 4RQmSgy56Vqmok8SF0GYYTjto7wxmhh7LR4/RfXSDMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:f0:a2:02:f3:c1:a7:ee:ae:01:5e:0b:0a:37:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028ccc8d8178c9e9d2ffc532fcb5cd68beaa776d
        Validity
            Not Before: Jun 13 10:01:30 2026 GMT
            Not After : Jun 14 10:01:30 2026 GMT
        Subject: CN=b678407d586f7b28c8f19b8baf0aa01a51bd8bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:90:c4:94:13:5d:c8:32:da:24:e1:d1:2f:
                    cd:ed:44:3e:9f:c0:2d:6a:b1:45:46:9d:f9:65:9a:
                    b7:44:86:84:68:8f:1b:47:c5:1f:ba:1b:f3:f3:8e:
                    64:b7:32:c3:e6:c8:f8:49:10:9e:ef:a5:02:af:48:
                    04:3f:41:e8:8a:d9:79:69:bd:ba:a0:5e:40:8c:bc:
                    e9:bb:05:34:1a:ff:79:5a:be:0a:00:4b:96:2e:eb:
                    8b:86:f6:f0:30:41:f4:78:67:1e:70:fe:87:2b:14:
                    7d:90:9e:07:ed:bf:9a:1d:e1:11:06:c4:40:e9:70:
                    cf:03:b9:c4:ca:da:e9:0d:53:08:82:ee:21:21:01:
                    85:9c:af:c9:56:b8:f0:47:89:64:89:70:a1:08:e1:
                    2c:ee:d0:e8:f1:95:b5:73:06:60:1b:35:ae:2f:b2:
                    1d:e5:2a:a2:a8:5f:47:60:2b:0f:c5:46:ce:39:ea:
                    ce:a2:f3:f8:8f:60:9b:01:2b:5a:41:29:0f:9e:07:
                    ba:4e:d8:97:62:50:47:02:5b:7b:5b:d9:d1:b3:30:
                    af:08:54:a7:07:9f:45:fa:09:eb:51:b5:4e:27:d0:
                    93:12:7e:7c:3e:a8:9c:77:da:6d:1b:e2:bb:da:e1:
                    40:49:45:86:26:7c:b6:c7:54:c3:76:50:ee:2b:96:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:78:40:7D:58:6F:7B:28:C8:F1:9B:8B:AF:0A:A0:1A:51:BD:8B:D9
            X509v3 Authority Key Identifier:
                keyid:02:8C:CC:8D:81:78:C9:E9:D2:FF:C5:32:FC:B5:CD:68:BE:AA:77:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AozMjYF4yenS_8Uy_LXNaL6qd20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e46951-8fa4-45b6-87bf-5a4b7b5e4007/1/AozMjYF4yenS_8Uy_LXNaL6qd20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5f:52:78:05:66:a8:ea:00:d9:82:42:34:62:99:e2:4b:d5:
         9c:17:08:fb:da:04:12:f5:2d:16:38:d9:a5:95:b1:be:47:bc:
         cc:8f:14:98:e2:fc:5a:eb:70:f6:50:4e:48:b9:65:91:59:ff:
         aa:e9:41:f3:15:33:a5:e2:66:54:33:98:9b:cf:52:d0:b8:cf:
         ac:20:43:9f:c7:d3:5c:91:59:9d:10:59:c9:67:3f:b8:eb:e5:
         07:91:f0:1e:7d:cc:57:f2:fd:1e:e0:ad:f7:40:ce:3a:35:d3:
         53:5d:64:f4:8d:5b:26:29:f0:2d:9d:a0:e3:a8:29:4e:b9:a7:
         6c:d6:2f:05:ab:83:e9:18:85:47:c1:df:1d:83:21:67:6f:58:
         ca:ca:14:4c:a9:51:c0:13:1b:44:db:c6:36:55:aa:36:e0:fc:
         8f:93:e0:96:31:1c:00:d4:b3:1b:c4:46:72:ae:95:c1:6f:e6:
         c4:52:49:c9:17:a2:bd:f3:80:e9:99:14:a3:a4:4a:5d:a1:46:
         d7:8f:31:5e:57:71:2c:51:c2:06:03:58:4b:21:ad:21:9d:9a:
         0b:79:0a:f8:b2:38:53:25:4d:6f:19:45:8f:dd:38:72:13:a1:
         21:44:35:25:a6:a8:bd:b8:1a:62:0f:ee:e4:36:f3:1e:d4:96:
         1e:97:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:04 2026 by rpki-client