Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File:                     5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier:          BcKo6SXoWDlQA6aSUJ6DhW2FWitoM+pkVfOIWk4EtKY=
Subject key identifier:   8A:B0:3B:C9:6F:60:BC:D4:55:98:4C:EB:29:69:01:EB:63:60:9A:38
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer:       /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial:       019EBDA2DF77A16FDA4B1D810D600DA82D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number:          0FB0
Signing time:             Fri 12 Jun 2026 21:00:28 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:28 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:28 +0000
Files and hashes:         1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: XUCYSC0cyb3ZyKKL/+4erRg5vwrkpA+TC+Nx8snZmAQ=)
                          2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a2:df:77:a1:6f:da:4b:1d:81:0d:60:0d:a8:2d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
        Validity
            Not Before: Jun 12 21:00:28 2026 GMT
            Not After : Jun 13 21:00:28 2026 GMT
        Subject: CN=8ab03bc96f60bcd455984ceb296901eb63609a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ab:67:5b:91:f7:48:96:9a:63:a5:72:ca:6e:
                    95:a9:0e:19:62:21:9c:c5:47:a1:46:ee:c6:2e:8a:
                    5a:11:9a:e2:61:02:f4:e7:3e:f3:19:ad:09:ab:06:
                    ed:c9:73:b8:73:8d:68:d9:c3:76:61:d7:f4:56:5b:
                    78:5f:32:0f:16:2b:fb:19:d2:40:3c:d0:08:80:57:
                    9b:d7:54:46:a1:ae:1d:93:ee:a5:27:f6:af:b2:19:
                    22:51:c8:af:0c:49:d2:14:d2:6f:c2:ff:a8:b4:4c:
                    5c:54:a1:77:45:37:09:32:a9:e0:17:a1:55:7c:fc:
                    47:a7:24:d4:44:cf:9c:1a:cc:55:b3:95:3a:e9:cf:
                    b9:4a:3f:a1:64:d6:41:64:9f:f9:ec:bd:40:6b:0b:
                    cf:bc:dc:66:4c:78:34:5a:2a:2d:cb:70:f1:a7:59:
                    51:32:58:aa:bb:99:c1:ba:d3:ba:e6:a1:a7:ea:30:
                    05:78:cc:3c:8b:cd:43:6c:3e:29:eb:b3:75:7c:3f:
                    3f:1e:2f:de:e3:81:48:df:18:c4:93:5c:fc:06:ad:
                    dd:74:7c:89:25:37:ad:7f:f7:8d:9f:e3:0e:74:48:
                    26:5f:5e:17:99:3d:8b:19:a2:23:7d:3c:a9:6f:13:
                    90:e8:cf:fb:23:eb:3b:cc:75:fe:7c:a1:32:57:10:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B0:3B:C9:6F:60:BC:D4:55:98:4C:EB:29:69:01:EB:63:60:9A:38
            X509v3 Authority Key Identifier:
                keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:04:7e:d9:83:34:d3:3b:e7:60:81:7a:d5:dd:0b:e1:ff:
         18:fb:d3:ea:40:3a:f6:d8:0a:d1:4f:0b:f1:5d:6a:4c:6d:d8:
         7e:6e:6b:3e:b5:fb:1b:59:05:79:b3:2b:1e:4a:c8:2b:7d:f1:
         bd:3d:66:89:68:0a:8e:49:26:61:bc:db:2b:cc:2e:57:1e:a7:
         51:df:05:8c:cd:d3:98:28:51:26:31:b0:6b:13:b3:cb:73:46:
         9f:1d:49:17:11:6f:f5:08:26:10:d9:f5:94:82:5a:dc:30:91:
         07:56:12:f6:90:b0:bb:74:b8:93:68:b1:88:ea:5a:24:90:d1:
         02:dc:83:27:3d:eb:ed:ff:32:21:70:4f:f9:d1:6f:ef:a2:69:
         41:0d:87:6d:02:11:9c:59:7d:80:51:d8:2f:b9:11:aa:06:da:
         88:38:e9:db:72:11:45:b6:5c:93:50:e9:45:3e:03:2a:26:bd:
         fb:f9:58:c4:86:12:39:37:14:5d:f5:59:22:22:3f:60:03:96:
         46:00:89:18:59:99:de:d4:70:34:97:d8:6f:ad:59:61:2c:a0:
         8e:d3:38:c1:ff:68:34:d3:93:3d:0e:47:5c:ea:c1:4f:3e:ff:
         26:b7:c3:9d:64:19:33:5c:d1:1c:cf:65:37:1f:ad:95:23:a1:
         21:4e:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:50 2026 by rpki-client