Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File:                     cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier:          cXkFjizdyqJCGo/C9E02Ooc4JtxgzJSbTeS+22ZE2Rw=
Subject key identifier:   D2:92:A0:83:8D:74:C3:10:E1:98:BF:17:9A:E7:51:72:27:E2:BE:D3
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer:       /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial:       019EBEEC3B81DA0C732A34B98D225048F8CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number:          0F6E
Signing time:             Sat 13 Jun 2026 03:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:13 +0000
Files and hashes:         1: Hi85wc6uJWXTGae11EDMD2GIBrI.roa (hash: F5Lq64IGd6DB3AuiERrPRgP1NYUhYidZ19qyklKfzQk=)
                          2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: a5ajfnrGUipyrZPXL6DQRb7tk3kRJH4OJdVngeHAjwI=)
                          3: wSkm2DS0COZLH_6lYON3OI8O84s.roa (hash: qk1hRiw34z/5pPQQaOhoxeWqj5Uy++y3lT/FiUcWPfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:3b:81:da:0c:73:2a:34:b9:8d:22:50:48:f8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
        Validity
            Not Before: Jun 13 03:00:13 2026 GMT
            Not After : Jun 14 03:00:13 2026 GMT
        Subject: CN=d292a0838d74c310e198bf179ae7517227e2bed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:73:19:f9:68:3c:55:bf:a2:a2:9c:f2:fe:
                    b7:b1:42:12:b6:e6:b1:fb:aa:b2:3f:7e:88:e0:0f:
                    ab:4c:79:93:88:6f:2a:66:76:ad:22:56:20:18:ff:
                    5a:95:ff:9a:56:4d:75:7e:b3:f3:d7:c4:86:f1:30:
                    00:24:70:38:a2:e7:43:ae:b9:75:69:7d:40:cb:6a:
                    7c:71:1d:61:f2:57:52:6c:12:49:d8:9b:8a:27:a8:
                    dc:4f:9d:05:74:b6:d3:fd:e3:aa:6a:4e:e2:dc:09:
                    4d:f5:0b:8f:e6:e7:c1:2f:41:8c:2e:30:7a:6d:36:
                    06:7f:83:bf:1d:1d:8b:a0:37:67:52:ec:f4:06:06:
                    a6:0a:97:62:c2:45:49:0c:03:ba:06:28:53:eb:91:
                    e6:57:2b:4b:d7:39:41:64:31:1b:18:4e:b2:f8:29:
                    57:eb:45:65:6b:0a:44:ba:af:e5:47:e1:09:c9:7f:
                    56:a1:62:6c:2d:00:ec:fe:5b:1d:e4:f9:f4:28:ce:
                    52:2e:13:03:89:e5:fc:df:08:d7:d0:b0:fe:a8:47:
                    ff:7e:28:a1:f4:83:1a:5b:e2:17:eb:33:77:87:67:
                    de:9d:18:5b:e8:8d:fe:62:28:4b:4b:6d:34:e4:e2:
                    6b:57:e9:95:4f:63:29:65:d3:1e:be:2a:b0:bd:81:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:92:A0:83:8D:74:C3:10:E1:98:BF:17:9A:E7:51:72:27:E2:BE:D3
            X509v3 Authority Key Identifier:
                keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:57:1e:86:0a:c5:b3:31:15:21:a0:d0:df:7a:86:55:25:0f:
         1d:e4:10:c6:5d:f5:c1:25:16:16:06:96:66:33:27:a9:e7:9a:
         da:40:87:f5:cf:c3:8a:fc:e8:23:af:b1:f3:7a:08:4a:8d:06:
         11:8e:7a:62:8b:70:1f:33:59:16:cb:9b:0b:c2:28:7a:61:8c:
         89:84:96:6f:9e:f6:24:a0:23:12:ca:ca:36:65:be:bd:24:4d:
         c0:b0:0e:6a:e9:fb:62:37:c0:c5:a6:bb:6f:d0:cb:e6:27:76:
         01:d5:ce:dc:cf:18:90:ca:e4:fe:4b:34:c1:59:fb:ff:5a:d6:
         38:73:5a:80:c3:f7:f8:dc:23:48:7f:d9:be:f5:7b:6a:09:78:
         bf:cb:77:e7:2c:ec:86:b9:96:80:09:90:4c:25:08:45:17:34:
         fe:c4:cc:4e:64:17:32:b8:ee:63:c2:c3:44:b0:c5:5f:ee:13:
         86:3c:c7:ec:7c:ba:bb:48:00:60:bc:12:81:3b:e8:59:84:b9:
         22:13:dc:04:12:40:6c:a8:7e:23:56:d5:62:f9:3c:c1:bf:7f:
         71:23:8b:29:cc:d9:bf:78:49:05:9e:08:af:8e:10:1e:6d:b5:
         67:b1:63:20:8a:13:54:06:78:63:2a:41:7e:67:ac:82:13:21:
         30:f7:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:51 2026 by rpki-client