Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
File:                     4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json)
Hash identifier:          QV14G3pvKOjtPXKCodJH37CycnXzlc8COksYE+w/GF4=
Subject key identifier:   8C:91:2B:18:03:10:86:0E:95:3F:B8:E5:30:EB:57:77:F2:37:D9:6C
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Certificate issuer:       /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial:       019EBF9160092C1703E80B3437EB3EE7F5C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
Manifest number:          02CC
Signing time:             Sat 13 Jun 2026 06:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:35 +0000
Files and hashes:         1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: ui4n6El5yFca4mYJzwA2bNQSAXyUbiZLQ4tv+3qdD3g=)
                          2: Ac2bylIr7B437ec52nmYNkxcBLU.roa (hash: NVzCCl4oqQBqLlnzk4NHLtjdOZIYGTwFiCs0i6US8YQ=)
                          3: VurYQADeNAyQZfVqHtE93Y07CDc.roa (hash: zo7Q7XfiMqpPBNsTQ58E9qm/cSZ4esMUjH52zOEyenA=)
                          4: ey-McRgW79AZU_fzpE-27yI2jAk.roa (hash: pO+sInd8rxx8H+MS6Ps1T/UlLYjOIIjg8OASDn/RsGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:60:09:2c:17:03:e8:0b:34:37:eb:3e:e7:f5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
        Validity
            Not Before: Jun 13 06:00:35 2026 GMT
            Not After : Jun 14 06:00:35 2026 GMT
        Subject: CN=8c912b180310860e953fb8e530eb5777f237d96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:a7:79:74:81:5c:17:2c:2f:7c:4a:af:d5:
                    25:b8:40:3d:80:37:26:77:c3:52:a1:bb:86:04:05:
                    df:30:c9:5d:d3:f0:96:d7:3e:2d:79:09:63:eb:4c:
                    92:c5:e4:57:8e:e2:f5:13:b6:28:44:41:fb:1e:f7:
                    ff:fc:4c:35:2d:02:db:b8:64:b3:20:e0:34:ec:83:
                    4e:4c:75:13:25:2b:c3:b8:0e:91:f4:db:f3:43:5e:
                    df:43:71:ae:a6:52:f5:a2:0a:ce:c8:2b:d8:63:63:
                    82:7a:b8:40:11:92:80:7f:92:e5:48:27:80:d6:88:
                    7d:b7:5d:31:3c:d6:c0:e6:42:12:c7:5f:1e:d8:17:
                    f5:fc:e1:b1:b3:8d:5e:5f:50:9c:95:99:19:d8:22:
                    e0:17:f5:4d:e5:13:27:4d:48:89:d5:bc:e0:98:fb:
                    c1:bc:55:a2:67:7c:33:da:c1:5a:c4:f2:f7:52:bb:
                    23:e8:5a:2c:40:73:f9:cd:13:bf:72:a3:8d:9f:08:
                    b7:5e:4f:7d:d4:1b:4f:60:44:c2:70:64:da:28:a6:
                    a4:c2:20:d5:bd:59:fe:cc:65:1e:91:0e:db:38:2e:
                    c5:64:26:ae:e4:f7:38:c2:68:0c:69:c7:fb:11:ce:
                    fa:eb:eb:51:c3:36:cc:cd:d0:ba:6a:d7:a1:f5:b9:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:91:2B:18:03:10:86:0E:95:3F:B8:E5:30:EB:57:77:F2:37:D9:6C
            X509v3 Authority Key Identifier:
                keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:44:3d:de:07:35:40:40:e4:cd:de:b9:1e:53:7c:56:c8:3b:
         62:c1:20:90:47:31:d2:7c:b4:7c:62:35:b1:47:40:02:18:85:
         12:f6:18:6a:3a:37:2d:83:8c:df:ad:f6:e2:9b:e0:f4:d5:a2:
         9b:f3:6c:52:5b:d4:49:52:51:8c:ee:7c:ac:f7:cc:a7:11:58:
         36:06:13:47:a6:c6:8b:e4:26:de:bf:2a:6f:e2:ac:bd:fc:70:
         29:39:e9:e5:75:f0:1d:a8:d4:1a:b7:85:71:ec:ce:89:79:e9:
         41:6d:b1:9e:30:ec:48:89:2e:bf:e9:e9:1c:1f:25:32:de:a0:
         17:f3:af:a3:c0:95:62:82:f7:3c:19:e1:12:dc:6a:5d:d4:26:
         c9:c8:72:0c:41:20:fa:22:29:69:5e:62:f3:75:b7:9d:1f:a5:
         42:75:06:29:74:4f:ba:86:7a:a3:3a:4e:72:75:82:e2:91:10:
         24:e5:35:3d:51:38:83:40:62:63:8d:c0:ac:55:41:22:ed:a3:
         79:5e:d7:58:1b:cb:f9:1b:95:6a:b7:ed:30:87:cc:0f:4b:3e:
         21:a6:a7:4c:59:a0:ea:ec:25:31:bf:10:25:5f:5d:f8:d3:53:
         bf:30:ea:96:49:e0:9e:b1:24:f0:5d:e5:c7:a2:d2:c9:3f:89:
         5e:4a:cf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:17 2026 by rpki-client