Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File:                     9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier:          4+bEYkYiGmCw2PDshTruFURVdeiU9PZvY9VBpj5bTA8=
Subject key identifier:   0C:C3:8C:08:17:EF:0C:2E:51:9A:E4:35:51:BB:81:22:23:F5:9A:B5
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer:       /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial:       019EC0DAF39EABED36EECB8EB3E7BA6BD8B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number:          0425
Signing time:             Sat 13 Jun 2026 12:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:35 +0000
Files and hashes:         1: 7_zn84ybIr1uylkitwOR1cEu2dI.roa (hash: 2W6Vxmwk8XQBE6BnPj2SuKeyu76vgg2avkcyHjCtB64=)
                          2: 8qI5M9nt77vE4nTZuhI3O-_7Moo.roa (hash: bhOfxE1N9Q9DLTIZ9ruXl8yH7rMWdChvmxBcbOxnD1I=)
                          3: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: KFttzg3eBa5OF2c4y3FCt9CS38tepW2ltX5BifRbdis=)
                          4: I-XIjRxgkdNZeZ6XgcxI96kMFwI.roa (hash: /L+nfUszoFluPyMyZo9VlBC8cE+Ie4cQ8KAxPH1RRAw=)
                          5: iCQOeluGzuF2H3yby0GDplaPkdI.roa (hash: FSXXrDNKGzru4cBB3J/wsVuN39ULCg+BCEi5BmI7ZZk=)
                          6: mzDYp7n26mDiWHNdtuApd9PtwRI.roa (hash: B9knfXLtUIlMboxQnejwbYi+kBKU6xfPLrCe2Bf2F4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:f3:9e:ab:ed:36:ee:cb:8e:b3:e7:ba:6b:d8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
        Validity
            Not Before: Jun 13 12:00:35 2026 GMT
            Not After : Jun 14 12:00:35 2026 GMT
        Subject: CN=0cc38c0817ef0c2e519ae43551bb812223f59ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:cf:c5:df:f2:59:3c:a8:ef:cb:c8:28:1f:
                    e1:9c:5e:dc:6d:96:d5:75:12:d7:b9:25:67:2b:58:
                    dd:dd:04:1d:43:c0:09:91:5b:7e:6c:ca:84:bf:e0:
                    7d:88:25:c0:44:0a:db:9a:5b:14:3a:0f:f3:8e:74:
                    50:ed:c4:47:3f:72:ec:05:0d:0a:ea:95:dc:a8:b9:
                    d1:b0:50:bd:ef:cf:e2:69:9a:de:e9:ca:1a:14:1b:
                    a9:c5:aa:b9:a5:84:01:14:d2:8a:5b:38:09:49:d8:
                    05:3e:c0:78:4d:7b:e4:ab:b2:56:09:45:18:ab:30:
                    db:cd:97:43:a5:55:80:03:b0:e8:b3:2d:85:ef:3e:
                    dc:5b:fe:c1:d4:8f:69:15:56:93:e9:51:2e:50:03:
                    be:40:cd:7b:67:45:ab:bb:3c:4e:fe:59:21:28:14:
                    1c:49:d6:a1:54:26:e3:6c:0b:50:65:6e:91:b2:33:
                    34:7b:ae:5b:f4:3f:03:6a:b5:66:5b:33:8a:29:07:
                    36:03:be:de:c7:a0:6f:8e:fc:d4:56:f0:ae:7c:28:
                    72:80:2d:1f:2f:2a:a5:ba:c2:57:11:d7:d7:68:29:
                    b6:2b:48:7e:6d:5d:89:3e:fc:70:a8:72:91:de:d4:
                    cf:35:f7:42:b6:f3:e8:4e:f5:59:be:a8:ce:b5:9e:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C3:8C:08:17:EF:0C:2E:51:9A:E4:35:51:BB:81:22:23:F5:9A:B5
            X509v3 Authority Key Identifier:
                keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c2:7f:12:e0:b8:c1:92:01:30:ad:b2:45:3b:11:45:46:50:
         f8:d8:9e:15:77:6c:f1:53:79:23:18:41:57:15:ce:25:08:c9:
         bb:a1:9a:88:9d:5c:bd:0f:dd:8e:99:90:77:15:20:f5:be:91:
         a5:ff:b4:e3:53:09:15:fc:4e:3d:94:e6:49:bc:b0:e8:f1:ea:
         67:65:f6:0e:5a:f0:5c:62:c0:4a:20:6e:02:09:71:99:7d:07:
         8a:34:3f:93:ca:35:6f:b4:9d:fc:0a:27:ed:c9:5e:e7:66:c7:
         34:9a:e6:3a:96:ac:c0:b7:ce:57:80:f8:47:ec:eb:a2:14:fe:
         5f:89:d5:8b:30:c8:07:b9:71:6b:71:02:ff:17:f1:f5:a6:dd:
         79:87:33:4f:cc:ab:75:f0:b3:33:3a:24:ce:36:4a:f4:57:7e:
         97:8e:6c:f2:f7:bc:0b:ef:6b:86:c4:96:6f:79:59:3c:7e:8c:
         30:47:05:ec:a2:a6:71:a5:19:49:8a:13:d7:b6:17:6e:80:ad:
         ce:8b:81:ce:4d:ea:bb:c6:57:9e:f3:f2:d1:c7:40:0c:d7:f2:
         3c:4e:06:69:37:02:e6:f1:40:be:c4:bd:e0:ef:60:5b:1e:27:
         06:e7:17:bf:94:37:e5:e8:6d:4c:7e:82:e5:08:4d:1c:dd:fd:
         0f:28:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:23:56 2026 by rpki-client