Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File:                     5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier:          7+xdWGfcjNTdOBx11m7LhnHy3J8nD1KavBdXkSHqWnY=
Subject key identifier:   17:0A:E9:60:CC:55:CA:86:63:40:C3:6C:1A:91:91:6E:A1:F2:48:14
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer:       /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial:       019EBDA30E5709A5773BCF9CF8D08CFD0109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number:          0933
Signing time:             Fri 12 Jun 2026 21:00:40 +0000
Manifest this update:     Fri 12 Jun 2026 21:00:40 +0000
Manifest next update:     Sat 13 Jun 2026 21:00:40 +0000
Files and hashes:         1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: Y5ap17aEgRD7X3bcEUVJuvQ9hYIEQVnrH6dSHLbVRDw=)
                          2: HALUJ8HMBpoHzskaJCYqZgHex5U.roa (hash: cOZhNR9S9Fv/MNqYDNuqDaMlzhNl0rBxxMK0bBBrUJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:a3:0e:57:09:a5:77:3b:cf:9c:f8:d0:8c:fd:01:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
        Validity
            Not Before: Jun 12 21:00:40 2026 GMT
            Not After : Jun 13 21:00:40 2026 GMT
        Subject: CN=170ae960cc55ca866340c36c1a91916ea1f24814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:bc:b6:ad:6f:27:df:db:ad:a9:85:88:68:
                    72:2e:c4:30:32:34:6f:e2:b0:25:3e:26:74:48:fc:
                    22:2f:14:b0:38:2d:f4:7e:5a:e9:ac:a3:2f:6e:65:
                    1c:10:41:e2:24:f4:2e:8e:f2:0a:e1:51:34:9a:e8:
                    f3:56:2c:6a:21:07:18:3b:a1:35:d1:bc:d1:3e:67:
                    f7:41:fb:0f:e6:d8:9a:ec:c0:c9:1f:d6:ba:64:37:
                    ba:6e:0b:71:9f:38:45:c7:64:74:cb:d6:b5:00:95:
                    b4:39:d6:70:4d:66:56:d7:33:74:bf:5f:b0:54:dc:
                    62:58:96:65:3e:39:3d:75:b6:31:8a:63:21:91:f1:
                    a4:3e:83:cc:d1:5a:bc:46:61:85:59:55:c9:8b:e1:
                    3c:68:4f:48:2f:e3:dc:5e:53:ee:9e:43:68:7e:8d:
                    1e:27:a2:41:db:4c:2f:ab:36:eb:44:44:92:f3:8b:
                    d8:94:25:69:79:8a:cf:cb:63:61:c8:5a:d8:da:3d:
                    6e:a1:67:92:dd:a3:45:48:3f:77:b3:bf:00:4b:1d:
                    cf:99:ff:69:1a:ee:e9:47:7d:28:33:32:26:18:72:
                    7a:c9:8e:17:3a:7f:bd:f7:5b:c2:f0:d8:11:01:7d:
                    5a:c2:75:6f:03:e5:0a:66:68:32:c0:6e:df:9b:6e:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0A:E9:60:CC:55:CA:86:63:40:C3:6C:1A:91:91:6E:A1:F2:48:14
            X509v3 Authority Key Identifier:
                keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:57:2b:bb:25:6f:ba:75:81:c2:05:89:5c:91:a1:3c:21:f3:
         8c:3d:ec:87:15:de:9f:28:c7:15:8e:0b:96:35:a9:f0:93:86:
         bb:11:b1:91:12:3d:79:68:41:4a:bc:b6:06:6a:71:74:76:b9:
         b2:2e:e7:f8:bc:89:6d:e2:5c:b9:1b:c2:03:5c:08:1c:cf:9f:
         ff:32:ed:dd:70:2d:15:4c:82:9c:ba:64:41:d4:58:80:a4:7a:
         55:83:71:62:32:be:eb:78:f3:13:03:f1:c3:6d:d1:a9:e0:b7:
         c6:9a:75:72:ed:1a:40:b1:1c:b1:3e:37:cb:5f:7a:ca:f7:bc:
         69:93:91:51:35:97:34:ea:98:a2:f9:ce:f3:94:a1:df:cc:dd:
         76:f6:eb:dd:85:49:ce:e0:1c:db:40:af:c2:35:fc:9e:1f:4c:
         fc:85:f7:ed:79:bd:d4:99:c9:98:4c:45:5d:d1:ec:97:57:18:
         41:b3:fe:13:5b:3e:43:c8:80:cd:cb:d5:c7:79:18:df:39:f1:
         37:32:f2:96:f6:22:41:3b:0b:87:7c:58:61:12:84:3b:6e:43:
         61:99:1d:00:eb:84:ed:16:ad:01:3f:f9:4f:77:14:5f:f2:66:
         f7:e0:60:0b:c9:7a:f0:77:07:af:7b:5c:b4:40:f2:1b:38:e4:
         ee:25:ae:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:24 2026 by rpki-client