Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File:                     77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier:          Jop7vc6xMVo/zp6gx3OVm4tA4ppZSLOJ/fvf5r3+koQ=
Subject key identifier:   80:EC:DA:2E:D4:2F:C6:6D:E6:F0:82:40:97:EE:1B:CB:38:5D:7E:50
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer:       /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial:       019EBE4839AB01CF6BAF62C31051F24EA7B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number:          10FB
Signing time:             Sat 13 Jun 2026 00:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:04 +0000
Files and hashes:         1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: 4Bu55q/pGwiWO8LpQEVumPrxgRuvpiFbGMbmGxko1iM=)
                          2: u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa (hash: Cp1BYoJHxmwK4gyFN+04N6JzdugvrevYPjr0cqKdM10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:39:ab:01:cf:6b:af:62:c3:10:51:f2:4e:a7:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
        Validity
            Not Before: Jun 13 00:01:04 2026 GMT
            Not After : Jun 14 00:01:04 2026 GMT
        Subject: CN=80ecda2ed42fc66de6f0824097ee1bcb385d7e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:cd:2d:fb:e9:a6:9f:a3:a8:92:b7:6b:d0:
                    7d:b2:b9:71:b7:52:29:8d:b8:85:0a:13:fb:25:bc:
                    9c:5d:e9:da:83:3e:d3:e9:dc:94:84:54:cf:20:cd:
                    c1:e7:0d:04:d2:8b:35:e2:c0:0e:07:85:98:12:bc:
                    90:40:e3:9b:5b:49:02:20:45:33:8f:a3:a0:11:68:
                    e5:8a:93:dc:3d:15:fd:8c:16:6a:1d:70:62:a7:57:
                    89:79:f7:39:3e:3b:a5:4c:36:0f:1c:5c:19:d3:fa:
                    45:30:ef:02:5e:b0:4e:65:07:f6:62:3a:55:a7:b8:
                    4b:28:5b:91:36:5a:f1:f0:47:66:43:16:d9:71:a9:
                    0f:17:5a:d0:61:d8:c0:fa:f4:9c:8b:a5:48:49:c4:
                    4a:f3:e8:59:b6:b6:f3:1b:51:f4:47:2e:d8:15:aa:
                    29:2d:d3:fe:08:d8:25:e1:93:e1:35:6e:33:a2:1d:
                    00:fb:33:da:b4:57:df:a7:bf:e7:2f:f4:b1:20:75:
                    b2:9b:30:84:6a:a1:28:3e:b1:cf:d9:81:4b:4e:55:
                    46:cf:8c:de:04:8e:d3:2e:8a:04:83:b0:92:22:e7:
                    76:02:58:ff:98:c8:9f:34:d3:90:19:44:ba:e6:0b:
                    94:06:78:88:a3:f1:ab:8f:00:cb:a7:d2:61:62:79:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EC:DA:2E:D4:2F:C6:6D:E6:F0:82:40:97:EE:1B:CB:38:5D:7E:50
            X509v3 Authority Key Identifier:
                keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:cb:a2:62:0f:f8:f4:7c:f5:d0:61:b6:a1:c9:fd:9d:81:8b:
         28:cc:b4:94:a4:ce:de:fe:40:2c:12:c6:52:ae:3d:f9:c9:1f:
         b4:37:8b:e8:10:f5:1e:67:56:37:34:d3:de:71:61:b7:4a:9d:
         91:50:39:43:39:23:18:76:eb:17:bb:ad:92:fc:b8:8d:1f:22:
         28:92:ad:04:45:c0:dd:68:b0:e5:4a:27:2b:06:61:0a:f3:93:
         bd:47:cd:69:6b:d1:82:2b:6c:39:89:1a:95:7e:99:86:b5:a6:
         4a:7d:e5:4e:30:c5:32:fd:71:da:65:b8:b2:bf:f8:b9:e0:9e:
         13:39:4b:3d:a9:ee:ff:87:7d:33:dc:a7:e6:56:e7:a6:f7:b8:
         31:77:09:07:d3:e4:e6:6b:47:69:a2:fb:99:21:b2:a4:d5:0b:
         cf:75:c3:b6:5d:9c:d4:78:1f:e0:0a:e3:a4:eb:42:e4:00:5b:
         eb:c7:5a:5e:75:1b:9b:c4:a0:c7:11:a2:67:74:92:12:3f:c6:
         54:f5:57:6c:a4:9b:d1:10:15:d9:7e:5a:4e:e6:81:a9:30:5f:
         bb:d7:bd:4b:9b:10:27:ad:63:b2:cd:cb:41:ff:c5:eb:8a:a8:
         8d:e7:58:1a:c7:3f:cd:84:47:ce:34:48:3d:cb:75:44:af:88:
         f5:84:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:16 2026 by rpki-client