Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File:                     cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier:          w3Zit1T6TjX9iPhgOJqRTYHLl11mzOpfuWLPXeF6GRo=
Subject key identifier:   AF:F3:5E:72:EB:30:11:5B:C4:4F:36:0F:C3:B9:E9:2D:25:23:BB:09
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer:       /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial:       019EBDA311C10C94EE90F340C6E0A0B62146
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number:          C9
Signing time:             Fri 12 Jun 2026 21:00:41 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:41 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:41 +0000
Files and hashes:         1: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: k1kpLg9ZJj8YsvEyB5kfuOyzSMk5iFywkPiym3JGavw=)
                          2: qgrQCVmykbnCGorMw6L6atIBXLU.asa (hash: sVztU1M0ntIZPQm7GwsbhsMw71eOwZCVyvZFdEoj2zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a3:11:c1:0c:94:ee:90:f3:40:c6:e0:a0:b6:21:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
        Validity
            Not Before: Jun 12 21:00:41 2026 GMT
            Not After : Jun 13 21:00:41 2026 GMT
        Subject: CN=aff35e72eb30115bc44f360fc3b9e92d2523bb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:00:7e:2f:be:85:c2:11:cc:9c:64:13:99:
                    b1:6b:78:93:91:f4:45:3d:86:65:cf:86:15:b9:76:
                    b0:a5:4b:a5:1e:17:74:f7:de:ec:ff:ca:64:24:d2:
                    b9:de:1b:20:5b:87:a8:40:67:36:f4:b2:1b:a4:90:
                    19:9b:d5:bc:f1:f4:3d:ab:b5:f4:4f:11:a7:2e:27:
                    fb:19:4e:3d:62:9f:5c:98:6d:28:b9:20:09:14:80:
                    c8:26:f6:c7:1a:0e:9a:e8:85:ef:23:c5:8b:30:a3:
                    cd:c7:54:27:d9:41:f7:d0:f6:c2:f7:8a:d4:6b:6d:
                    fb:a4:d0:a9:9a:72:27:f0:4c:21:36:61:a6:01:8e:
                    c1:0f:4e:c6:16:30:f5:97:1f:a0:80:93:a6:85:d4:
                    ef:1e:df:3e:73:cd:b4:6f:c3:7c:13:2f:b4:6e:e9:
                    8a:28:9b:f4:a9:db:04:07:ff:89:d6:fd:15:51:07:
                    ca:27:c0:36:41:04:26:91:c8:6d:98:01:27:d5:58:
                    86:1b:77:91:7c:89:85:39:f7:50:b1:ed:21:eb:a7:
                    78:e5:bc:67:a6:ab:63:74:34:18:e0:a0:94:0a:d3:
                    bb:25:b2:dd:cf:a4:1c:65:67:eb:e0:af:2c:c1:15:
                    28:c4:13:72:08:dd:2d:70:ee:c7:e2:d6:21:9b:ad:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F3:5E:72:EB:30:11:5B:C4:4F:36:0F:C3:B9:E9:2D:25:23:BB:09
            X509v3 Authority Key Identifier:
                keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:8e:60:27:11:0e:a7:65:74:36:c4:db:69:30:03:7f:6c:
         a8:a8:99:0f:54:a3:90:fd:d1:3f:ca:01:9b:4f:30:4a:a6:cd:
         b3:f9:8d:4b:d3:22:4f:1e:cc:a2:ae:5a:e6:78:89:81:9f:e3:
         b7:0d:8c:6a:e5:c0:66:b3:ef:ac:5a:dd:c9:09:94:25:7e:ae:
         52:ed:79:a7:3c:9c:12:5c:b8:02:2a:40:90:da:12:4a:ea:9d:
         57:7e:fc:bd:f7:3d:7b:3c:5f:4c:74:81:7f:b2:a8:ae:63:59:
         6b:9c:66:2c:4b:95:ec:9a:1e:9a:77:5b:a6:0e:68:6f:51:1a:
         67:e8:6f:8a:88:91:3b:77:c2:ee:9d:a2:c2:cc:58:9a:c3:17:
         32:cd:84:71:53:22:4c:35:51:89:08:3b:74:ad:f1:c1:6a:dc:
         18:03:f5:c0:9c:e8:8d:a4:e9:a6:06:63:cd:db:ba:14:ba:cd:
         71:94:e2:57:49:81:c6:28:a8:76:78:3e:d7:50:37:37:09:e8:
         e2:05:04:e1:cf:3f:5b:7f:e4:c7:f4:82:d2:fb:5d:d1:a3:62:
         58:12:c8:e2:27:5c:0d:b0:95:6d:f6:a5:b2:dc:81:d9:a0:5f:
         89:55:13:fc:43:65:a4:f2:1b:4e:93:31:31:b2:5c:3d:1a:c5:
         14:4f:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:57 2026 by rpki-client