Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File:                     o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier:          Wz3Wid7v4LRihAA+ZyrOsPqB4tkJ9wOamG949Ah8VfY=
Subject key identifier:   DD:7E:AC:47:D8:5E:EF:56:82:62:91:25:E7:3D:82:E2:3B:17:BB:D5
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer:       /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial:       019EC22467F0FDCF2339EAF5ADD5622B96BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number:          0E90
Signing time:             Sat 13 Jun 2026 18:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:26 +0000
Files and hashes:         1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=)
                          2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: 78BMKbOwSPodq/VcuSf1q7QUTGWwtQXeEbCeMcAZBv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:67:f0:fd:cf:23:39:ea:f5:ad:d5:62:2b:96:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
        Validity
            Not Before: Jun 13 18:00:26 2026 GMT
            Not After : Jun 14 18:00:26 2026 GMT
        Subject: CN=dd7eac47d85eef5682629125e73d82e23b17bbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:db:1f:11:f5:93:0c:66:72:20:9f:be:c9:
                    c0:09:f2:af:2e:f7:df:cc:92:82:f0:a2:49:d8:1f:
                    a0:87:50:1d:2d:f0:81:14:8a:ef:39:29:01:a5:8e:
                    65:4c:df:b5:84:b1:a2:43:79:e9:59:b5:83:0c:2f:
                    d8:5f:bd:2b:61:f3:56:ee:54:bf:1a:37:c3:96:50:
                    0d:64:dc:f8:65:fe:33:4f:f8:6c:5d:f6:f8:61:bd:
                    1e:8d:54:c9:04:60:ea:ed:1e:65:c6:a8:c8:7c:f7:
                    0e:37:06:ce:44:6a:a6:69:2e:c3:6e:6d:bd:eb:d9:
                    98:7b:d5:f6:94:7a:a1:a7:46:fd:33:87:d9:71:ce:
                    00:67:8d:99:af:2b:7f:31:ab:da:9c:3b:d3:bb:7c:
                    df:83:b5:cb:b5:85:f1:c5:97:9e:5b:ca:56:ac:6b:
                    44:62:71:b0:3f:19:4b:15:7b:9f:8a:29:17:b0:ed:
                    66:e3:4e:70:a9:17:57:56:28:f6:d2:ea:b5:72:51:
                    06:0d:41:3b:a9:97:4c:57:bb:4f:89:76:c6:55:0c:
                    01:98:af:68:37:ac:c1:2a:62:44:b5:af:1c:c1:71:
                    74:74:26:e4:be:bb:ff:1e:0a:70:e5:94:41:95:c6:
                    b8:cb:24:fb:e6:d2:24:31:fa:35:be:0a:f5:a5:ea:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7E:AC:47:D8:5E:EF:56:82:62:91:25:E7:3D:82:E2:3B:17:BB:D5
            X509v3 Authority Key Identifier:
                keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:25:b6:a5:16:12:82:9f:fb:91:c5:6b:1f:35:9a:64:1a:f0:
         e3:36:46:33:83:a2:ce:83:bb:02:0d:ab:d0:fb:7f:6a:50:3e:
         8f:86:de:b2:21:c9:41:4e:44:6e:0a:27:08:f3:13:f5:91:53:
         19:dd:59:a3:ee:7f:53:d5:ed:6e:b6:fc:3c:da:37:40:0b:68:
         60:50:71:92:fc:8e:ea:f2:96:55:f6:89:76:ad:b7:b9:37:7b:
         f7:22:58:c2:45:03:e0:16:63:85:74:2e:dd:c2:01:a4:14:bc:
         00:7a:8e:35:6c:53:a8:fe:e1:71:7b:a2:ed:d2:b1:16:4a:04:
         b0:18:10:8a:6d:19:d4:bd:06:1d:bd:2c:db:2d:de:d7:d3:ec:
         e4:f4:e9:08:c1:bb:07:81:f8:bd:6c:f9:6a:dc:ef:c7:2b:97:
         3b:f0:1a:b2:41:a6:3c:36:11:97:2a:57:d3:d4:d3:d8:3b:92:
         3d:a4:f5:67:ad:88:1a:0c:1d:15:b7:37:28:ed:05:16:9d:5b:
         3a:59:07:48:e5:bd:ab:d5:7b:e4:64:ef:1c:1c:19:9b:c6:55:
         17:a9:36:0c:fe:83:d1:49:a3:0f:a0:77:e1:53:c7:17:99:94:
         a6:5a:73:de:4e:fb:60:c8:70:ad:63:28:e9:52:8e:15:a4:0c:
         0f:2c:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:46 2026 by rpki-client