Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File:                     4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier:          /RgS/yR+Pm+86QcEtPOEJs7GRil32JZAN3kiVbYHblE=
Subject key identifier:   09:AD:D7:86:F5:45:72:D5:F8:AC:7E:ED:B5:08:A5:6B:BA:BD:06:B6
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer:       /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial:       019EBFC849C648DC316BF2CC803525C50BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number:          0D87
Signing time:             Sat 13 Jun 2026 07:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:34 +0000
Files and hashes:         1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: 1hPCvP2EulrM9pI95eu8WSbQiHTgzmqZip2QYxEg40E=)
                          2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:49:c6:48:dc:31:6b:f2:cc:80:35:25:c5:0b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
        Validity
            Not Before: Jun 13 07:00:34 2026 GMT
            Not After : Jun 14 07:00:34 2026 GMT
        Subject: CN=09add786f54572d5f8ac7eedb508a56bbabd06b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:ed:87:07:8f:04:29:8b:25:67:c5:a8:3a:
                    2c:01:3c:2a:26:9f:e4:87:d6:0c:b4:7e:1e:0f:cf:
                    0c:b1:9e:2a:6c:61:95:3f:ef:2d:56:ca:70:72:7b:
                    8d:48:60:5e:30:21:1f:c2:e0:f5:b6:fe:d6:25:4f:
                    fe:a9:33:09:76:75:ee:5f:ab:76:98:99:e1:a4:99:
                    7b:93:8e:6d:7f:57:60:ce:43:9d:d9:b1:cf:7d:c6:
                    33:18:6e:79:0e:05:2f:08:08:9e:d4:78:58:3e:87:
                    37:53:22:b1:0f:c7:c2:aa:02:c7:d2:99:d3:a3:a8:
                    09:a7:92:1c:35:7f:a5:ad:84:98:3c:8b:1d:96:71:
                    1c:15:ce:fc:ba:b2:b3:51:9a:d3:ea:c9:04:c0:cb:
                    fe:59:09:65:76:62:66:43:18:3e:ba:a9:c7:25:77:
                    b4:01:8f:18:62:18:0a:fb:3a:1e:ec:26:b0:c5:29:
                    1b:0b:0b:ed:90:09:de:92:cd:69:54:47:07:bf:28:
                    ba:0e:bd:6e:4d:0f:89:27:b9:29:d6:72:ed:dd:ca:
                    9e:7c:e2:be:66:f9:f1:54:d4:36:c0:b6:61:e9:28:
                    8e:33:91:2c:82:af:e1:23:fc:8a:1f:e2:f1:16:a5:
                    52:1f:c7:39:f4:79:e2:2f:f4:f3:09:38:fa:fa:ac:
                    5e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AD:D7:86:F5:45:72:D5:F8:AC:7E:ED:B5:08:A5:6B:BA:BD:06:B6
            X509v3 Authority Key Identifier:
                keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fb:91:71:db:22:3e:64:a1:48:9f:c6:8e:18:a8:18:9b:87:
         b5:ab:04:8e:ed:a0:67:0f:d0:97:f9:a9:f4:b5:70:56:e6:2f:
         05:7b:4a:4b:41:b0:f5:b3:36:bc:c7:c7:9e:ed:c0:7d:c0:ca:
         41:5e:16:31:9f:14:f6:f7:23:70:7e:a0:03:f2:e7:9a:6b:39:
         d0:4f:72:7e:00:25:61:d0:70:89:2e:d3:59:50:63:58:ba:0e:
         0b:9b:b1:88:5b:b7:dd:8d:f4:c0:f7:cf:b0:e3:f8:da:5f:90:
         b4:1a:28:3c:34:52:40:a0:40:b5:2f:56:5c:91:76:68:97:e2:
         4f:9a:21:8c:22:cc:da:12:1c:21:42:b0:c4:51:18:be:27:77:
         8f:59:a2:a8:64:65:b9:8d:7c:4d:ee:48:eb:a7:57:63:1b:eb:
         1c:fb:5b:ff:f5:06:d4:5f:14:fa:0f:43:ee:cd:78:28:de:22:
         27:71:b7:2e:9c:cd:67:b3:be:b0:0c:dd:cb:28:18:15:1c:34:
         fc:e7:5a:53:cf:bb:eb:51:d6:41:cc:f5:cb:48:72:f6:f8:b2:
         19:e1:fb:f8:41:d2:35:d4:34:70:4b:f1:ae:d5:5e:14:ab:83:
         5c:95:e0:8d:fc:71:60:cb:b4:45:05:f9:b0:63:3e:b5:f2:1c:
         c2:97:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:51 2026 by rpki-client