Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
File:                     0EtupigXnKOg5Bv_ruotM6VUYd4.mft (raw, json)
Hash identifier:          wA2MjHmvT/v92TI00+f1Ucr/s2LtfZzO8B3RsWWezE8=
Subject key identifier:   77:07:A9:47:F2:45:AA:D7:AB:84:69:C2:56:23:31:E8:D4:68:BF:AB
Authority key identifier: D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE
Certificate issuer:       /CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
Certificate serial:       019EBF5B0DE6F5E2432FD862B13C4765E9F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
Manifest number:          040B
Signing time:             Sat 13 Jun 2026 05:01:15 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:15 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:15 +0000
Files and hashes:         1: 0EtupigXnKOg5Bv_ruotM6VUYd4.crl (hash: yHgQkP9w055P6Qc9Kfx0ejMkKqxUx510De9WmQq2s/s=)
                          2: AF1tyftlYv-ZbB0gxGGiLbWN5Jw.roa (hash: +/pOacDToZziO6c0C1gllfCOdF0TRNPZR7yMX+Y+tz0=)
                          3: Lb2qm0WAbpNaxiohBsDBnLvsS18.asa (hash: LD6bSuV9eJHeO/b9CbjxLEGFW2hTMW4yMSbDkwDE7uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:0d:e6:f5:e2:43:2f:d8:62:b1:3c:47:65:e9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04b6ea628179ca3a0e41bffaeea2d33a55461de
        Validity
            Not Before: Jun 13 05:01:15 2026 GMT
            Not After : Jun 14 05:01:15 2026 GMT
        Subject: CN=7707a947f245aad7ab8469c2562331e8d468bfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:b0:3b:c0:d9:73:ef:aa:48:c9:f6:3c:91:
                    e1:82:56:c4:19:07:16:78:20:f7:17:6b:5f:c6:51:
                    70:6e:36:27:65:df:a5:24:a7:7c:03:f0:28:db:9e:
                    bf:4d:0c:9a:c8:02:18:36:47:3e:73:3d:3c:8e:92:
                    57:64:02:71:73:05:47:50:b0:4f:82:9c:c3:7d:1e:
                    43:88:f7:5a:f1:d2:be:87:f4:5e:bf:47:03:be:47:
                    30:af:c5:a8:9f:f9:4a:1d:67:04:10:d6:a6:0e:9d:
                    3c:b2:e5:67:2a:85:9d:3f:ad:9f:8a:b9:c9:bc:09:
                    7b:76:43:0a:97:e4:9b:c2:a9:8c:d7:bb:d8:ae:aa:
                    cb:c5:34:76:6b:32:0a:0e:ff:df:02:60:9e:0f:43:
                    69:f1:0b:6f:f3:8c:fa:dc:6a:16:fd:9c:78:7e:49:
                    f3:81:c9:16:f0:bd:89:94:7b:68:21:ff:87:9a:f1:
                    e9:d4:b1:f0:28:63:db:ee:c6:5b:9a:67:20:63:0a:
                    38:5c:5b:a1:35:40:68:db:1b:0a:f3:23:9e:da:6e:
                    f9:bd:5d:df:57:49:3a:59:7b:d2:0c:cc:d1:e5:2a:
                    87:ab:7f:73:f2:58:84:32:72:dc:67:bb:bf:e0:0e:
                    a6:5a:3b:4d:20:00:c4:ce:8e:d2:56:3b:95:16:58:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:07:A9:47:F2:45:AA:D7:AB:84:69:C2:56:23:31:E8:D4:68:BF:AB
            X509v3 Authority Key Identifier:
                keyid:D0:4B:6E:A6:28:17:9C:A3:A0:E4:1B:FF:AE:EA:2D:33:A5:54:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EtupigXnKOg5Bv_ruotM6VUYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e1e6b3-930a-4022-a8c7-ecc722f9d7ff/1/0EtupigXnKOg5Bv_ruotM6VUYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:e5:d8:84:4b:32:6a:87:97:34:0e:e6:b8:22:3c:43:78:
         ec:c1:0e:83:0f:a8:d1:be:5b:56:4b:db:f3:74:31:3b:88:33:
         2e:cc:b0:2f:5f:66:1b:c1:54:4f:bf:90:02:2a:cd:9f:d6:35:
         3c:60:1c:91:c6:38:76:f9:c3:65:bc:32:15:3c:90:f0:51:86:
         59:0e:b0:ed:43:ee:26:60:d0:b4:68:da:13:f5:d6:a8:82:1a:
         5d:40:53:5d:e4:c7:4b:1e:3f:c5:d8:49:b9:8f:4c:cc:c2:fa:
         42:6d:3a:a3:6a:e6:05:c7:7f:11:d5:11:0d:ab:a1:f9:92:b4:
         36:a6:b6:53:c0:bf:24:2c:ac:7f:2e:e8:06:89:e2:c7:80:3c:
         53:c8:40:bf:d7:c7:40:5f:4f:77:fc:e4:88:38:7e:b3:64:4e:
         a1:a9:1a:57:a1:8a:79:89:10:06:fc:60:db:38:eb:36:c2:bc:
         0c:f4:42:d9:df:0c:9a:a4:ce:f8:bb:af:5b:25:90:18:cd:f7:
         09:3e:39:37:a2:e5:6a:6c:0d:be:da:cd:8e:7d:b5:80:7c:bf:
         bd:a2:dd:3b:af:fb:c8:92:53:4e:be:9c:51:d0:c5:d1:c1:55:
         03:0c:7a:66:9e:46:78:3e:7c:75:f8:fb:98:6b:18:dd:11:74:
         bb:88:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:37 2026 by rpki-client