Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File:                     mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier:          LsrYwbR+DPXXWT7/0H/zTAVoqaiTziItCYYg5Sgjn1U=
Subject key identifier:   2D:80:BB:82:E3:5E:B4:20:78:CD:84:23:DD:3C:4B:D7:C5:E6:F7:61
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer:       /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial:       019EC224AA5A65EC1DC8BB3452DA5E58649E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number:          0A8B
Signing time:             Sat 13 Jun 2026 18:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:43 +0000
Files and hashes:         1: Kch5YnfnliI8NHiCA07xVEbQzV4.roa (hash: 6jE9VEbDYjIrbBsLXEa9CMfNyqfSxGZFUWK682Q2o9I=)
                          2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: I8LDNpbjWGDe86UyKLpvbGs9cA6h6Nt4fKftogypMUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:aa:5a:65:ec:1d:c8:bb:34:52:da:5e:58:64:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
        Validity
            Not Before: Jun 13 18:00:43 2026 GMT
            Not After : Jun 14 18:00:43 2026 GMT
        Subject: CN=2d80bb82e35eb42078cd8423dd3c4bd7c5e6f761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bb:9a:4a:d5:a1:03:b3:ca:36:8e:13:2d:7d:
                    bb:79:69:28:4f:a5:fd:5b:99:fa:a0:4d:c8:6b:78:
                    46:4a:de:ee:5e:17:31:a7:0c:96:fc:18:43:12:8d:
                    b3:62:3b:46:6e:8b:cd:0e:f0:8a:d3:52:be:41:dc:
                    04:75:43:8c:07:26:a8:0f:4f:74:b6:4b:e2:36:f0:
                    eb:e7:18:54:51:39:f3:f3:75:b8:2e:1f:c9:1b:d3:
                    a6:bf:a6:c2:e9:80:c5:bd:44:6b:39:73:ef:93:3a:
                    c3:ed:5a:cb:13:f7:c1:0d:68:3d:e3:79:4c:69:11:
                    61:b2:ce:1b:24:d6:fe:0a:ad:24:5d:ce:e9:84:f5:
                    67:8b:26:82:2f:a0:52:be:1c:19:79:f3:1e:1f:4e:
                    17:15:d9:46:bd:c6:59:f6:cb:1b:fd:d8:75:15:2d:
                    1b:90:71:8e:cd:2a:f7:94:a2:c0:ea:6c:f4:22:e9:
                    d5:10:25:76:3d:cb:2e:61:c4:b7:63:06:3f:7a:60:
                    02:ae:1e:09:8b:5b:3b:5d:f5:0e:0c:18:b3:41:53:
                    e1:6e:b9:ac:86:c2:e2:fc:6a:aa:fd:7f:80:f5:8b:
                    65:c3:7d:61:40:2c:99:4e:a1:f5:69:c1:55:6e:0b:
                    61:9c:49:72:0c:ef:fe:33:83:23:a9:b1:9c:b4:94:
                    4b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:80:BB:82:E3:5E:B4:20:78:CD:84:23:DD:3C:4B:D7:C5:E6:F7:61
            X509v3 Authority Key Identifier:
                keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5a:be:82:6f:79:92:f9:be:b1:48:8d:d0:b7:a6:b6:6e:0c:
         48:fa:f6:58:0c:bd:32:d5:73:06:a3:a3:a9:68:6a:80:ef:46:
         60:07:ea:e5:34:69:77:ab:4a:50:26:a0:73:e6:4e:6a:4f:84:
         8f:5d:72:93:c4:a7:22:b7:e0:8d:5f:fa:e6:df:05:0f:5e:17:
         64:e3:27:05:91:6c:0d:f6:bc:9f:15:10:be:37:2c:0b:ce:16:
         9c:10:f3:d1:0b:cd:1c:88:74:f6:67:b2:85:4b:e1:63:cf:fb:
         6c:1b:13:1a:06:c4:62:c9:9e:a0:76:41:df:e3:47:c4:6d:b6:
         30:16:57:37:19:35:6c:5d:33:81:ba:46:ec:44:1c:c1:2b:93:
         86:94:b1:09:13:fb:75:e2:47:7e:ac:7d:dc:49:9a:0b:37:0c:
         15:80:8b:ca:87:0f:22:d1:09:2a:b3:53:27:92:87:20:10:9f:
         26:79:f1:f8:b4:23:c5:85:e1:18:fc:1f:00:be:5d:5b:20:c2:
         06:f6:3e:ae:b1:3e:0c:4f:cc:11:e7:fb:77:81:ee:c9:17:e4:
         c0:03:1b:b6:56:4f:98:fe:91:cc:ea:46:fc:02:ef:09:27:dd:
         bb:09:da:00:de:3b:74:49:62:10:8e:00:19:38:9c:87:0c:7c:
         bf:9c:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:05:14 2026 by rpki-client