Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File:                     6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier:          VypvKWUPfOLAdHLBqho5JThvjR95JeH31J6/V4E1XGM=
Subject key identifier:   81:76:EF:CD:AB:89:FF:C6:23:BB:2C:7D:AD:34:53:CA:D9:6C:2E:E8
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer:       /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial:       019EBE1144522BF77D16C22CB82552A6FD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number:          09C4
Signing time:             Fri 12 Jun 2026 23:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 23:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 23:01:02 +0000
Files and hashes:         1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: tE9JklmKbfwmVouRt6U5Sbh9nfr9U7cppr1K+sVVRYI=)
                          2: PPUFqBGUCmFmWCrlXoGH2AYfPuA.roa (hash: L84g/xVBfxnI/AptpcgCwWfGsHlR8ZydiW8GLseCEig=)
                          3: lBNCxSrIMwGF7q55Faffo34PzIE.roa (hash: n9g3kmorGo6N42lTsebPz6v4VTR7WxY6co0/3tPw7b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:44:52:2b:f7:7d:16:c2:2c:b8:25:52:a6:fd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
        Validity
            Not Before: Jun 12 23:01:02 2026 GMT
            Not After : Jun 13 23:01:02 2026 GMT
        Subject: CN=8176efcdab89ffc623bb2c7dad3453cad96c2ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d7:4b:27:14:e7:26:57:75:f0:a9:eb:87:87:
                    e2:32:24:e9:74:18:5b:cc:4b:4b:19:ce:19:1d:60:
                    53:ac:aa:3c:4c:7a:46:db:a5:73:b5:45:59:da:9f:
                    b2:7e:35:e5:97:96:c9:95:e8:d4:25:d1:49:69:d9:
                    eb:3a:31:13:1e:4c:d7:d4:e6:ec:52:2e:7e:4e:e9:
                    49:9a:28:d7:45:ee:2a:69:fb:4b:b7:f0:2a:8c:7e:
                    0b:f0:5e:89:3e:1a:40:85:3d:c0:96:23:98:90:1d:
                    ea:fa:17:cb:0b:a0:b1:f1:58:0b:4a:e5:23:47:68:
                    af:0b:40:a4:fd:b6:c1:6c:9f:bc:b6:c2:c2:29:c5:
                    8d:aa:56:c3:c6:c2:1e:50:a4:75:da:6d:de:7d:6c:
                    fd:ba:ec:aa:58:d2:23:26:88:e7:c8:da:7e:ba:20:
                    84:cd:b8:ee:13:d6:a9:d2:0f:a7:06:76:f8:8b:f1:
                    c7:06:2a:64:c6:23:7c:8e:a2:6f:d3:82:69:0e:51:
                    72:22:b0:a3:7c:e8:98:83:32:f5:6a:00:be:5c:0e:
                    c4:b6:8a:ff:76:c1:37:94:70:87:94:a9:16:0a:b0:
                    32:eb:3d:ba:3e:58:b7:67:d7:e1:81:ed:e1:a7:e0:
                    5a:dd:ce:99:7e:f2:d4:22:1b:f1:5d:d3:a3:cd:2d:
                    bb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:76:EF:CD:AB:89:FF:C6:23:BB:2C:7D:AD:34:53:CA:D9:6C:2E:E8
            X509v3 Authority Key Identifier:
                keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bc:81:29:45:7c:b2:05:eb:a3:95:ab:a8:a1:8c:e8:01:a1:
         c0:e1:c3:4c:13:7e:d5:2a:57:f2:2b:53:cf:c9:48:28:0f:7a:
         8f:1c:07:7e:9c:c9:ae:42:0d:95:83:bb:32:21:51:b6:4b:21:
         88:79:a3:5d:c0:7e:98:4a:6c:d9:6f:db:d3:1e:bb:ab:a4:8f:
         e2:67:32:fa:b7:01:31:cf:2b:f2:68:a5:d1:e3:46:e7:41:44:
         1c:4c:a7:99:47:27:d1:0c:5e:2d:68:9e:6f:d1:e1:c9:d9:ce:
         ae:3a:73:87:6e:54:ff:b5:6e:54:5d:2b:e1:93:1d:ed:ba:5d:
         0c:bd:50:82:20:8d:9e:f5:ac:33:64:99:b1:eb:53:14:84:f7:
         a6:c8:45:71:e4:46:77:f8:e0:4b:dc:c2:c1:91:8c:60:15:34:
         c7:1f:63:3e:08:64:4e:03:33:79:b4:26:df:cf:43:33:4f:4b:
         88:71:f6:4e:17:57:28:d3:2a:82:58:a6:4d:83:70:dc:ef:de:
         36:56:f5:bb:57:2d:cc:e9:b3:61:51:0c:a8:46:97:ca:17:5d:
         05:55:ef:02:ff:7f:74:2e:7b:dd:81:00:b8:92:2d:63:da:55:
         cc:1f:c5:59:7b:aa:53:ec:68:b2:e2:95:ce:34:e0:43:ee:fa:
         24:63:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:56 2026 by rpki-client