Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
File:                     C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft (raw, json)
Hash identifier:          dwtc3tZiXOlcDXu8BjONIj91HGD6ZmM0WPO7Q2/4vf0=
Subject key identifier:   7C:40:9D:9E:14:69:60:F5:3D:B8:A3:D3:6D:D9:6F:F4:12:30:6C:18
Authority key identifier: 0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59
Certificate issuer:       /CN=0bc5ee45737b2d949ae6df25906a31f95903f859
Certificate serial:       019ED53E5CBC9C7D4C54CFB84AA32790D60B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
Manifest number:          F7
Signing time:             Wed 17 Jun 2026 11:01:34 +0000
Manifest this update:     Wed 17 Jun 2026 11:01:34 +0000
Manifest next update:     Thu 18 Jun 2026 11:01:34 +0000
Files and hashes:         1: 2ki4F5C_f4OJd8bWDxEOfjMY2BA.roa (hash: SNZLfY0Dnu+nD0hrhPKZ/k/SnrH65xlGDQNmAoLOL0k=)
                          2: C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl (hash: Cb00PU94pzaVCJoh1sUxJuFIPxlKyzx6nCtbx7xulKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:3e:5c:bc:9c:7d:4c:54:cf:b8:4a:a3:27:90:d6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc5ee45737b2d949ae6df25906a31f95903f859
        Validity
            Not Before: Jun 17 11:01:34 2026 GMT
            Not After : Jun 18 11:01:34 2026 GMT
        Subject: CN=7c409d9e146960f53db8a3d36dd96ff412306c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f5:60:d8:2e:2e:7b:7b:c4:cf:25:4e:1b:0d:
                    ba:ac:6a:dc:c8:71:0d:47:04:53:c6:8b:0f:fc:fc:
                    19:33:db:2b:cf:59:f1:09:4f:cd:2f:a0:62:b6:00:
                    75:ce:ff:42:d9:60:56:d4:e3:22:9c:d4:47:f3:fe:
                    51:ef:28:60:56:2e:6f:4c:6b:23:4e:26:34:2b:15:
                    d9:40:ad:d6:31:fb:e8:cc:c0:ec:ef:13:d2:d6:86:
                    6a:45:fc:69:3d:26:8d:15:86:14:bb:0c:00:39:ca:
                    73:13:a6:59:db:13:a7:8e:57:99:ac:1a:a5:3b:bf:
                    e5:be:d1:b3:dc:cb:4f:5e:23:92:8c:f2:25:3c:24:
                    79:cb:08:f2:ce:76:e8:62:98:db:d2:f6:ae:24:1d:
                    13:0a:4d:a6:7f:25:29:2c:a6:99:42:68:0b:f6:a0:
                    44:59:fc:d2:8d:59:f7:73:c6:83:cc:86:f6:08:18:
                    42:47:83:23:0f:4d:ca:6a:d1:1c:cc:23:c2:6e:6c:
                    78:98:e5:7c:0c:11:dc:a7:f4:2a:b7:71:26:a4:26:
                    85:0a:66:f4:e4:c3:da:6a:91:a5:3b:21:15:97:3f:
                    c4:0c:4f:4f:d8:30:d3:47:84:b1:95:8c:0f:86:f0:
                    3a:7d:b7:d4:26:bb:03:64:62:9c:14:71:71:8d:0c:
                    bc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:40:9D:9E:14:69:60:F5:3D:B8:A3:D3:6D:D9:6F:F4:12:30:6C:18
            X509v3 Authority Key Identifier:
                keyid:0B:C5:EE:45:73:7B:2D:94:9A:E6:DF:25:90:6A:31:F9:59:03:F8:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8XuRXN7LZSa5t8lkGox-VkD-Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4c18da-4f54-4203-ba75-53a5d322bcc3/1/C8XuRXN7LZSa5t8lkGox-VkD-Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:49:d0:6c:09:44:9b:99:cc:df:1c:ba:5b:9f:1f:b7:b9:75:
         aa:f6:fb:e5:da:c9:f4:08:f1:fe:57:87:f0:69:3c:a2:40:b0:
         a8:e8:e7:31:11:30:6c:d4:68:e9:22:50:1a:0e:ee:e3:7f:ed:
         53:96:09:4c:20:b2:07:20:56:74:2b:f5:19:33:32:74:12:bd:
         73:e4:e0:a4:4a:e3:bb:ed:74:ee:d8:98:e4:4b:b2:80:1c:8c:
         d6:91:c5:15:1d:49:57:44:85:cb:56:7d:0f:9c:bc:a0:7d:69:
         81:89:43:e1:be:eb:6c:8e:ca:c2:8b:99:1f:a7:df:6e:8f:40:
         fa:84:e0:01:4a:28:c7:b5:72:46:e6:4e:bf:49:e6:81:60:2d:
         56:25:e5:2d:3b:01:a1:d0:a1:c7:03:81:56:31:d2:94:67:40:
         f7:85:6d:a0:71:82:da:8f:07:f5:3b:cc:cd:7a:cc:ac:ee:80:
         34:e9:fa:11:39:83:ce:c3:76:50:37:00:ae:bf:1d:23:1f:43:
         11:0f:a8:6d:41:ba:e7:e0:4b:ef:2e:54:2b:52:35:98:75:5e:
         b3:17:2e:cc:a4:fd:20:fa:f4:01:31:82:b3:d5:01:0f:51:30:
         f6:c5:d4:f9:3f:62:3b:ef:d7:29:e8:60:71:9d:ab:2f:0c:de:
         2f:da:88:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:38:22 2026 by rpki-client