Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
File:                     0b77TZQENocaJKhyLzydZNbIQBA.mft (raw, json)
Hash identifier:          IOL35K6ZVXWJ1V5XmzgL9GhppsY+Z2wIqgLGH2m+2S0=
Subject key identifier:   6B:01:09:33:EE:40:E0:96:B3:14:B3:B2:8E:A8:EC:E4:C7:35:BA:5B
Authority key identifier: D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10
Certificate issuer:       /CN=d1befb4d940436871a24a8722f3c9d64d6c84010
Certificate serial:       019ED2E1E4731D3B3D4A5336CD8E9F2975C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
Manifest number:          034B
Signing time:             Wed 17 Jun 2026 00:01:19 +0000
Manifest this update:     Wed 17 Jun 2026 00:01:19 +0000
Manifest next update:     Thu 18 Jun 2026 00:01:19 +0000
Files and hashes:         1: 0b77TZQENocaJKhyLzydZNbIQBA.crl (hash: L3zmBVgv9jsqTbu+jU7ZKYMXvQFZVy8avJY1wb2TwCI=)
                          2: 2thteMXPE7HNuXgDy427RmN012w.asa (hash: AUokTZUmvO7vMDnJLm13XcC0mGvc1EfP2ch4mdqLW1c=)
                          3: aYA6TDe0FRGUQKWpi6CFPmb8si4.roa (hash: TWdXdIAzV6yUR6IvDamhx0hywiAE1G+KEAkggMUBFHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d2:e1:e4:73:1d:3b:3d:4a:53:36:cd:8e:9f:29:75:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1befb4d940436871a24a8722f3c9d64d6c84010
        Validity
            Not Before: Jun 17 00:01:19 2026 GMT
            Not After : Jun 18 00:01:19 2026 GMT
        Subject: CN=6b010933ee40e096b314b3b28ea8ece4c735ba5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:b4:a8:67:45:2b:08:f1:60:e1:f8:68:0e:
                    9e:12:45:b0:18:a2:5f:4d:0e:19:9d:2e:62:08:b9:
                    a8:fa:dc:90:ad:28:eb:5a:60:fe:ce:59:17:67:70:
                    a6:08:71:06:3a:6a:72:e6:51:ea:73:2c:87:cd:ab:
                    9c:76:62:55:b4:9c:26:cc:c5:a2:c7:38:18:d0:bb:
                    49:cb:fe:dc:20:bc:fb:db:3a:c5:0a:c2:86:4a:92:
                    7e:6f:0c:af:08:f9:b0:98:5d:df:0d:a5:8f:a4:f3:
                    0d:a7:3e:09:1b:28:6d:ad:12:d6:13:4a:eb:7d:5b:
                    a4:cb:6e:10:29:31:df:c7:ca:44:b7:86:52:54:b0:
                    04:72:cb:81:20:26:80:16:e3:39:0f:31:bd:b8:6c:
                    ff:ec:d6:49:1b:3f:c4:46:89:10:60:50:96:ad:ed:
                    31:71:8c:86:cc:fc:92:71:69:24:ac:c6:13:af:82:
                    2a:6f:60:fd:9a:93:1a:13:be:7a:ec:da:60:41:4e:
                    aa:da:33:cf:a7:56:7f:ff:ad:0f:94:a6:13:6b:a8:
                    4f:7a:c1:43:ae:de:11:bd:6c:d9:0b:4f:17:24:5b:
                    5e:8b:2b:4c:3c:07:93:74:46:1c:63:4b:e9:45:48:
                    03:e7:b7:53:fd:9b:ea:db:ae:b5:cf:ec:05:66:a6:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:09:33:EE:40:E0:96:B3:14:B3:B2:8E:A8:EC:E4:C7:35:BA:5B
            X509v3 Authority Key Identifier:
                keyid:D1:BE:FB:4D:94:04:36:87:1A:24:A8:72:2F:3C:9D:64:D6:C8:40:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b77TZQENocaJKhyLzydZNbIQBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7dc2eb-4e27-483a-b351-0d5d951012e7/1/0b77TZQENocaJKhyLzydZNbIQBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:91:9e:26:65:20:91:14:1d:29:eb:3e:b1:57:b5:80:38:
         54:34:f6:de:e8:f8:6d:0c:43:b1:70:f0:7d:59:11:60:85:aa:
         bd:ae:50:11:9c:5a:6d:db:b8:63:d5:16:56:77:0b:15:ce:e3:
         65:29:44:20:56:30:f9:4f:10:b2:55:44:e8:92:30:9a:44:5c:
         14:a9:c4:71:0d:fc:5c:d6:c1:d4:ed:af:05:79:e6:c6:9b:74:
         13:18:d5:ce:68:e6:b7:eb:89:c6:ca:ec:9f:16:90:44:01:e7:
         36:e8:d8:ef:df:fb:dd:89:1e:fc:47:93:1c:75:c2:0d:87:06:
         16:53:1e:cc:49:e4:9f:6b:ab:11:fd:12:e0:9c:29:14:24:a8:
         24:11:12:73:6e:40:5c:3c:9b:61:46:e9:71:ec:27:83:29:ed:
         29:a8:b0:58:16:78:f0:b5:10:2b:cf:57:4e:90:c3:70:a0:86:
         ed:05:d0:96:20:4b:ca:0c:d8:68:c2:72:9c:86:66:4c:6a:fc:
         8c:08:f0:88:8f:0e:c5:32:f8:ae:1e:db:c6:00:8c:7d:94:fb:
         39:bd:8d:63:10:35:87:9a:cd:0c:1d:ce:cb:c8:64:34:5b:db:
         d7:50:32:be:17:b5:af:34:0e:1c:c0:2c:33:b7:95:17:e2:86:
         e3:2f:5d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:24:56 2026 by rpki-client