Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
File:                     a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft (raw, json)
Hash identifier:          ecONM4ZXz2NMLjlUVJZwxCLTtRRiLz9fT6Ounz9Fjbw=
Subject key identifier:   A0:66:64:A4:02:07:42:52:D3:8C:BB:9F:86:73:08:0B:F9:12:2B:8C
Authority key identifier: 6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8
Certificate issuer:       /CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
Certificate serial:       019ED34F72EF3EB6B4371045873AC832CE7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
Manifest number:          07AA
Signing time:             Wed 17 Jun 2026 02:00:59 +0000
Manifest this update:     Wed 17 Jun 2026 02:00:59 +0000
Manifest next update:     Thu 18 Jun 2026 02:00:59 +0000
Files and hashes:         1: HdU5cxfsxlP0K4CqDFvCNnZmq28.roa (hash: xbyeSFIpEueYvgfQTG6iJ17W5Phz2i4KFR7f+DJwSVQ=)
                          2: a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl (hash: NExEDHV1B5hKm+0Zvb0nyrDEZKNuEUsrtKyGrNfTVHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:72:ef:3e:b6:b4:37:10:45:87:3a:c8:32:ce:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf88e82b35a0ad6d0ff3156af1319dfc162f8e8
        Validity
            Not Before: Jun 17 02:00:59 2026 GMT
            Not After : Jun 18 02:00:59 2026 GMT
        Subject: CN=a06664a402074252d38cbb9f8673080bf9122b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:b0:9a:c8:0f:37:4a:ff:1c:bb:02:70:f4:
                    ee:12:9c:c9:20:ff:9a:53:b3:cb:c8:61:54:3e:f1:
                    31:13:ed:87:0d:b9:c7:c8:7c:6b:a5:bf:07:f0:9e:
                    94:79:b6:ef:d9:1c:34:52:93:d5:0f:62:d5:4f:29:
                    59:ea:0d:52:53:fd:76:34:80:98:46:2a:7e:1f:80:
                    f2:b8:b4:95:d7:0a:1a:8c:db:d8:ef:43:32:d8:4c:
                    07:4c:3b:b3:a9:14:c9:78:e1:ef:45:ee:9c:8f:65:
                    d4:43:08:78:b6:ae:94:f0:1c:7f:6f:c8:c6:97:c2:
                    7d:13:f7:38:02:ad:db:49:9a:77:41:71:98:82:5a:
                    8e:bb:ff:1f:61:3b:cb:49:d9:3c:92:d6:7b:c9:8b:
                    32:31:39:66:89:fb:7b:e6:d9:0a:8b:9e:f5:fd:51:
                    54:a1:0f:d1:16:61:e1:24:07:a2:18:05:4d:f3:9a:
                    30:0e:bf:19:4f:55:43:cc:82:c2:45:72:40:99:45:
                    c0:33:02:3b:ea:9a:36:00:78:ea:d7:d3:72:57:93:
                    8e:0e:fd:78:c9:80:cb:91:bc:0e:14:89:4f:84:6a:
                    f1:a3:f7:7f:9b:1c:9a:a3:91:d5:fd:80:b8:d2:c2:
                    db:a7:32:46:9f:58:4d:2c:ee:13:66:d4:6f:00:4f:
                    60:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:66:64:A4:02:07:42:52:D3:8C:BB:9F:86:73:08:0B:F9:12:2B:8C
            X509v3 Authority Key Identifier:
                keyid:6B:F8:8E:82:B3:5A:0A:D6:D0:FF:31:56:AF:13:19:DF:C1:62:F8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1bcb8d-20a4-4347-b8da-bfbd5694a94d/1/a_iOgrNaCtbQ_zFWrxMZ38Fi-Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d3:b8:f3:88:9a:df:76:ee:f0:6d:a1:90:f6:eb:4a:6a:c2:
         27:0c:ec:5a:70:d8:8d:7f:5d:8c:00:e4:f9:8c:9e:0d:5d:3a:
         5d:00:c1:d5:40:20:36:df:2e:f5:52:a6:36:07:b5:c8:ee:8f:
         48:f8:40:d4:47:06:34:1a:d9:21:e3:c9:d0:2a:aa:e5:c0:ee:
         86:68:d6:25:37:d6:7c:47:aa:ce:50:f6:45:f4:cd:ff:6b:44:
         57:71:f5:b7:e7:06:f5:3c:a2:b9:bc:f8:3b:f8:a2:d2:d2:f7:
         cf:e2:9a:b9:e9:53:81:28:89:93:e5:44:6c:77:ba:11:31:8d:
         db:8d:e4:f5:71:cc:36:1e:28:13:9e:99:06:b6:ee:42:85:14:
         bb:af:b1:17:62:ad:cb:5f:4c:2c:e1:90:b4:7b:65:cc:3a:d7:
         2c:c2:13:73:08:45:f3:20:ed:c3:46:37:3e:51:d8:60:d1:c1:
         79:ca:a9:3b:47:85:e2:58:36:ae:10:b5:7f:d6:72:26:5d:e0:
         6c:da:65:05:d9:5a:e7:0a:10:42:73:59:d9:2e:f1:c7:16:03:
         95:d0:28:aa:c7:e7:de:10:71:41:d9:89:b1:2e:23:6a:e6:18:
         89:e0:fc:83:4a:0f:d0:af:65:07:07:39:a3:65:8a:a9:1b:52:
         98:eb:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:40 2026 by rpki-client