Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File:                     0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier:          pGuFae6QM36lPxN/22Hk2Lc7iR/vLKcx2QfOulo6QEE=
Subject key identifier:   C5:04:24:DC:14:76:F0:00:C9:24:08:82:65:8A:0E:73:78:A4:4C:8F
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer:       /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial:       019EC0A3D90143442896E4D5BF7E3337CCCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number:          0576
Signing time:             Sat 13 Jun 2026 11:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:23 +0000
Files and hashes:         1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: 0vt63GDyp80igjmq7qdCcZG2pWoG9uVkjTlbonMpPbY=)
                          2: 0r4BvsnJAN2Pz40prPoUEy6WvzU.roa (hash: AamdQ0j/vjkbuVtweF8p9JDSZ2i84cCde/Gwvcvf218=)
                          3: 5bf5CwJmQOVXufa2Bw359AZEO9s.roa (hash: vE+kqAcM+EoC006Mvnftc/u8n7NMMiAT3ni4cuysV1M=)
                          4: epNTET6BvQ6zhUMoLdSPzHjbIWE.roa (hash: qxvi55+BDN0SED0a/Y9HgRfeWegI7IGQUucmOAr178Y=)
                          5: ncOZbEMiJNqjiscavpDBkZeriIg.roa (hash: KP4yleOLVWJhJdzAKqGM+QLwSbZEncnkoAH1TNTBzJs=)
                          6: oS9h716veeRY1y9kuFn-MIGUEBg.roa (hash: KS+2BIj/1oDD8HcECr/uPYIsA+2SUgLQkBkCEiNQnZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:d9:01:43:44:28:96:e4:d5:bf:7e:33:37:cc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
        Validity
            Not Before: Jun 13 11:00:23 2026 GMT
            Not After : Jun 14 11:00:23 2026 GMT
        Subject: CN=c50424dc1476f000c9240882658a0e7378a44c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:fd:af:5b:77:3c:e1:83:f7:b4:32:5a:93:
                    1a:ed:41:9c:16:da:0f:9b:c0:0f:82:10:0d:27:ea:
                    58:b7:3f:57:7f:9b:e1:86:8f:3f:eb:4c:2e:ed:8b:
                    21:8d:c8:0a:50:53:40:c3:a6:b0:9b:a6:5b:f6:5f:
                    9b:87:97:bc:1f:69:dd:34:29:13:42:ee:f4:7f:69:
                    83:1d:08:d3:c9:5b:2c:05:89:3f:a2:3d:13:ae:61:
                    3e:54:b4:45:ec:bf:da:e2:d8:75:4a:65:c6:b7:f9:
                    e8:f0:6f:51:3d:1a:ae:ad:a4:21:e3:ad:58:46:02:
                    81:43:1c:2a:57:3d:f0:8d:a6:ff:28:31:cd:85:cc:
                    71:10:a7:02:b1:9c:d5:08:64:d8:3a:2e:06:21:b1:
                    cd:8c:98:be:42:bf:26:80:86:2f:57:9c:71:05:3f:
                    d3:14:6c:b7:ba:df:47:d0:74:7f:05:82:0b:11:64:
                    6e:c8:c5:ee:d0:8b:2c:fa:f0:92:55:7c:1f:41:9a:
                    1e:f6:8e:e9:65:99:ff:af:a4:2a:04:9d:70:d3:be:
                    ea:c5:74:b3:c1:f1:62:be:d4:39:54:24:7d:27:ca:
                    8c:27:80:76:db:18:b2:5f:45:37:9f:fd:dd:be:c5:
                    bf:24:ff:36:05:30:06:34:be:10:ad:3b:d3:4d:96:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:04:24:DC:14:76:F0:00:C9:24:08:82:65:8A:0E:73:78:A4:4C:8F
            X509v3 Authority Key Identifier:
                keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6e:41:6a:e2:f9:7b:b7:5e:33:63:2e:d5:ea:b7:28:5d:d9:
         25:b4:fa:30:af:47:68:64:a2:d1:31:26:62:43:7f:c6:45:45:
         08:69:c9:b5:9c:20:14:13:39:df:dc:d1:37:38:cc:2c:ea:ba:
         54:b4:b9:99:4e:b8:20:c0:f0:ca:e3:69:5d:ab:89:05:53:64:
         cf:27:06:14:bc:55:d8:c3:dc:ec:98:ac:17:08:8a:78:31:64:
         67:27:41:d5:95:43:03:f5:6c:c5:80:39:c5:0a:3a:14:77:59:
         9e:b5:04:32:6f:ba:49:3f:60:5e:5b:71:36:49:b4:73:b6:90:
         b6:c9:12:73:88:24:77:ed:3f:f1:3d:ef:a4:b6:97:72:73:d1:
         a5:5a:a1:9f:4f:fa:e2:13:53:f0:54:c2:fb:bd:0f:3f:73:f4:
         a6:22:59:07:68:ba:cc:ed:b7:62:1f:2c:b1:2b:35:d4:f1:24:
         ee:0b:d1:8c:a8:53:66:b9:e8:b6:0d:35:c1:24:73:85:a0:dc:
         95:6b:c4:29:f1:d1:92:39:03:80:00:92:e3:42:f6:9a:40:e3:
         07:07:89:f7:f3:37:e9:83:62:43:68:df:cb:c8:8d:8e:b3:75:
         40:2f:00:c9:89:71:02:e3:69:04:cd:1f:db:a3:bb:dc:38:15:
         07:a5:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:24:48 2026 by rpki-client