Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File:                     pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier:          /D/NnbNX5cpEjr5RHfJwcMzTVXOEahMQR1rbpZBy6uU=
Subject key identifier:   DA:FA:73:12:D4:74:55:B8:21:4D:18:E6:FD:64:4B:82:2A:0F:C2:8F
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer:       /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial:       019EC2246E30632415704B37D9343CE3B94E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number:          0E3D
Signing time:             Sat 13 Jun 2026 18:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:27 +0000
Files and hashes:         1: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (hash: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A=)
                          2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: emqwU94lqLo1dk6Lyre2qAM4fxpQjShA3M48rkBukIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:6e:30:63:24:15:70:4b:37:d9:34:3c:e3:b9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
        Validity
            Not Before: Jun 13 18:00:27 2026 GMT
            Not After : Jun 14 18:00:27 2026 GMT
        Subject: CN=dafa7312d47455b8214d18e6fd644b822a0fc28f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:48:95:83:03:58:b9:5d:b0:ed:b7:2a:41:ce:
                    04:98:35:4c:18:ae:0e:c8:e3:f1:6c:3e:00:b7:34:
                    34:fe:c6:6c:0a:d1:2b:c0:6d:99:5b:22:fa:38:be:
                    6b:12:39:fb:8f:ce:33:d6:53:cb:53:89:65:f9:04:
                    c3:13:e3:2f:a0:a1:c8:f7:47:bd:e4:98:49:7c:58:
                    fe:d4:a1:28:8f:e4:7d:41:15:ce:16:37:63:54:0d:
                    3f:b7:fc:8f:26:d4:09:d1:e9:47:9e:b9:27:e0:bc:
                    66:71:e5:9e:37:c6:20:c9:11:3d:29:af:39:50:79:
                    0b:85:d1:07:a2:e2:24:fd:a5:b7:10:0e:b1:3c:03:
                    86:39:50:64:50:9c:c0:7d:31:da:81:1a:8e:e7:23:
                    ef:8e:03:a3:3c:e0:d3:de:cf:e1:d9:f2:63:a2:29:
                    41:b3:08:4b:3e:53:f1:04:cd:8b:6b:f6:68:74:e3:
                    b8:7f:46:b6:a4:6a:47:e3:da:48:9e:e7:b0:30:e9:
                    e1:7e:ae:5a:2a:9b:e5:f3:5c:63:5b:55:f4:8d:3f:
                    51:db:80:4c:2d:1e:a0:20:ae:27:f7:a9:d4:70:c0:
                    b5:b7:94:e6:08:b4:86:b3:2e:14:e0:8e:5e:16:d1:
                    8c:4b:5f:b3:9e:b8:02:e8:5b:91:ac:6b:70:b4:10:
                    e9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FA:73:12:D4:74:55:B8:21:4D:18:E6:FD:64:4B:82:2A:0F:C2:8F
            X509v3 Authority Key Identifier:
                keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:56:2c:25:68:b4:ae:57:50:70:46:e2:45:70:96:40:ac:09:
         e1:4e:ad:e6:42:e9:0d:53:e2:1f:ca:4c:bf:d7:fe:7c:2b:bf:
         0a:7a:e9:c0:53:8c:fc:65:c9:53:e3:cc:da:2f:9e:8e:ad:01:
         e5:1d:ee:7d:2c:bb:af:22:93:3f:9c:83:a4:f0:99:2e:91:27:
         03:47:37:36:b0:4a:a7:7f:61:a5:25:73:56:29:f0:26:8d:59:
         40:b2:b1:0c:81:04:4d:10:02:4a:b7:a5:79:f6:fd:7f:ea:4a:
         fc:09:b9:d8:6c:bc:2f:28:8e:d3:8f:a8:73:72:a5:71:bf:a7:
         bc:89:c2:6c:7b:1f:d1:c5:fc:51:87:76:cb:19:e5:8f:37:44:
         69:28:93:0c:8e:6d:42:8a:c6:b5:3d:e6:74:fd:de:08:29:6a:
         29:3e:1c:67:10:ba:60:e0:10:d4:88:b7:ef:b8:07:b8:b4:57:
         a2:29:1b:57:03:bb:18:00:cb:89:0f:e7:10:7b:1b:6f:24:a0:
         c9:9b:c0:ce:33:42:fd:c4:3e:32:e9:9b:96:a1:82:86:ec:13:
         77:9c:a5:66:1d:db:fe:05:37:fa:bd:ed:c1:96:5f:db:10:1b:
         5a:94:fc:d1:13:52:11:a4:ea:47:aa:19:d5:93:95:60:f3:06:
         36:6a:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:05 2026 by rpki-client