Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File:                     4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier:          N6eyDGTEUr8x4GxJby24gqoJeZjW8S+Xk58622Y9Zhg=
Subject key identifier:   D4:3F:4F:BB:D1:7C:D9:A4:53:01:C8:AB:EC:C7:F7:50:08:88:CF:03
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer:       /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial:       019EBFC7F9774AB6EC224B05D4B3570606FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number:          0C92
Signing time:             Sat 13 Jun 2026 07:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:14 +0000
Files and hashes:         1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: RXkYsREFp0fl0FIu2k/qdpXAcYBVua0p1C2KZ5ynO68=)
                          2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
                          3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c7:f9:77:4a:b6:ec:22:4b:05:d4:b3:57:06:06:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
        Validity
            Not Before: Jun 13 07:00:14 2026 GMT
            Not After : Jun 14 07:00:14 2026 GMT
        Subject: CN=d43f4fbbd17cd9a45301c8abecc7f7500888cf03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b4:ee:17:be:a7:7b:b6:8d:75:bc:e2:85:a1:
                    ea:e8:1d:4e:f1:c7:a6:61:98:7f:b6:ed:be:9c:8f:
                    2d:5a:64:90:bb:63:ce:6f:ea:9f:2c:41:b0:6f:5d:
                    21:98:c8:6f:16:cf:9d:c5:86:fb:32:7a:0d:86:f4:
                    61:3c:b9:4b:e6:f2:ec:31:9e:67:4b:75:90:93:4b:
                    a2:70:75:43:54:62:4f:07:c8:d9:f1:c7:ab:50:e9:
                    bc:ff:36:d5:0c:39:aa:b7:51:ac:22:e6:12:7a:71:
                    a2:d8:07:41:d9:c8:09:59:f6:34:c1:92:ef:93:68:
                    99:55:06:6e:84:83:a5:a9:37:2d:a8:1e:70:ab:04:
                    0a:d5:3a:45:82:fa:48:3a:60:c6:74:87:03:0b:71:
                    9c:88:23:ef:3c:94:ce:58:8b:9f:3b:68:25:a7:aa:
                    da:fc:7d:b8:62:8c:ab:a8:e4:f3:93:ea:6b:b2:2f:
                    50:03:ef:f3:71:c5:60:67:ee:d9:05:b1:a9:58:b4:
                    35:cc:2e:2a:cb:77:10:a3:56:10:24:67:9c:8d:36:
                    03:dc:36:af:e1:68:33:8b:59:05:4b:32:6b:d8:d6:
                    76:4e:d8:86:f0:5e:e7:ce:8b:10:f2:6c:5d:93:28:
                    90:5f:74:19:45:78:ef:13:36:0c:db:00:79:3f:a9:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3F:4F:BB:D1:7C:D9:A4:53:01:C8:AB:EC:C7:F7:50:08:88:CF:03
            X509v3 Authority Key Identifier:
                keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:15:ad:cd:52:80:51:01:44:7c:30:a3:e2:f9:db:1f:30:
         bc:22:a4:0c:a1:f9:ae:a2:8d:2e:0e:b6:b1:93:58:a9:bd:87:
         9a:c5:0a:5f:e6:4b:a8:3a:00:e1:75:0b:82:46:c2:37:a4:0f:
         84:f0:22:ae:eb:5f:b6:1e:87:65:34:4d:99:d7:b8:7d:4c:f1:
         0b:11:31:5c:0a:02:df:d4:c5:8b:03:7c:c4:43:09:2e:72:c0:
         88:1e:c7:e9:34:4d:1e:cc:1a:fc:3f:fb:8a:1d:b1:49:46:c2:
         99:7f:8e:3a:c1:e6:66:a0:b0:dc:c9:56:b9:b0:37:f8:61:c2:
         61:5d:3e:31:4f:47:ef:92:76:b2:74:da:79:ce:24:6c:81:25:
         7d:8d:29:f5:8c:b6:93:cd:1b:91:23:90:01:5a:d8:98:e3:8c:
         48:c0:f9:d9:5e:61:5e:02:35:f2:6b:48:e5:05:4b:79:dd:6a:
         21:62:24:d9:f6:39:47:49:30:42:dc:c2:b5:8a:49:16:77:6c:
         cb:f0:16:6a:3b:3f:b4:c5:5d:ed:83:a3:54:9f:4a:5e:5b:45:
         a2:84:cd:97:e9:9c:a9:69:bf:71:cc:a2:c2:dc:a5:b0:7f:6e:
         3e:90:45:18:21:1a:5d:b7:3e:4e:68:b1:06:c5:79:e7:a1:ab:
         b6:0d:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:02 2026 by rpki-client