Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
File:                     1oFRD_A-lUZKxySioFlNpAfwWwc.mft (raw, json)
Hash identifier:          EszNLcrcmpLL+fjw0a39fJwEg0ak5j/E4Ere99Bc9G4=
Subject key identifier:   6B:8A:76:D2:0F:26:75:7D:03:09:1D:0C:D5:0C:58:DC:57:4C:49:65
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Certificate issuer:       /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial:       019EC22511CA304368E28700DF1B48528135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
Manifest number:          C4
Signing time:             Sat 13 Jun 2026 18:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:09 +0000
Files and hashes:         1: 1oFRD_A-lUZKxySioFlNpAfwWwc.crl (hash: jt97FvUOb2kmOFXq62vYTi3lLWlBW8rqf27K+sNjABo=)
                          2: DjQMqg2kffWJVFlf9YdB26kT8mU.asa (hash: Cp0XT0ge1mZD2iIW7l9FB0V1yVWibAjRZhffKMIEnu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:25:11:ca:30:43:68:e2:87:00:df:1b:48:52:81:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
        Validity
            Not Before: Jun 13 18:01:09 2026 GMT
            Not After : Jun 14 18:01:09 2026 GMT
        Subject: CN=6b8a76d20f26757d03091d0cd50c58dc574c4965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:57:b4:58:0b:34:c4:bf:a2:9c:01:81:0c:31:
                    55:b2:4b:d4:de:95:a2:5c:f0:83:a2:2d:86:71:ae:
                    97:b7:4d:54:0c:05:6c:1e:a5:11:c4:f9:8b:63:14:
                    ef:e9:86:94:aa:cc:49:43:a3:2f:29:e8:e5:7f:d2:
                    53:8d:bb:d2:e3:61:63:46:b9:c7:91:41:45:f1:92:
                    1c:9f:a4:1c:e5:22:22:6f:16:bd:13:5a:47:10:e7:
                    6a:81:bc:25:fe:fb:65:66:c1:20:e7:8b:99:6d:17:
                    ea:4e:54:36:e1:ca:9d:5f:5c:80:4a:bb:b3:10:74:
                    2d:b8:8b:03:aa:ee:29:7b:d4:62:f6:f0:20:23:20:
                    de:13:22:03:b8:ce:28:94:9d:47:4d:7a:80:67:33:
                    4f:07:16:c5:6d:7f:b8:2c:74:e2:14:bd:e0:6e:eb:
                    a2:21:17:b7:ea:34:26:9b:a6:ee:4c:de:1b:80:ab:
                    9d:93:ad:a4:14:74:70:ef:36:3e:bb:bc:47:d8:0e:
                    71:b6:2b:e0:9e:3b:07:0e:28:61:a2:86:ed:12:b3:
                    77:73:3f:b6:ba:a1:2b:50:f0:3b:f5:f0:a2:03:67:
                    4f:fd:d0:24:6d:8a:f9:7c:fb:b1:e6:0e:86:a8:ac:
                    b7:77:1c:d5:3d:e5:72:b6:9a:53:c1:a0:7e:5a:12:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8A:76:D2:0F:26:75:7D:03:09:1D:0C:D5:0C:58:DC:57:4C:49:65
            X509v3 Authority Key Identifier:
                keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8f:17:92:cd:73:43:4d:8c:c6:00:0a:65:87:13:a0:b6:0f:
         6e:de:22:8c:f8:c3:67:90:60:20:39:0c:80:e5:75:2d:fd:02:
         5f:a6:2a:92:bc:f0:3c:5b:9a:b5:5c:cf:65:d4:26:24:a0:38:
         63:e1:5b:4a:d2:4d:1e:ff:dc:80:b8:1a:65:9c:9c:5c:19:4c:
         8c:53:5a:b3:fd:8d:70:72:6f:6f:bb:30:e7:91:f4:d7:57:d0:
         ac:6a:a8:e8:54:c4:34:24:11:e8:a7:da:d4:b8:ac:f5:53:a4:
         51:f2:55:a8:36:76:8e:fd:4c:e5:53:c2:b2:87:24:a9:53:5f:
         47:85:67:4b:8d:90:06:21:a3:b0:88:09:aa:18:8c:d1:a2:92:
         15:6e:59:a6:c5:1e:dc:2f:bf:57:17:bc:90:4c:d6:92:9e:c1:
         19:78:8e:04:59:36:9d:29:92:d6:dd:fb:31:0f:f5:43:e9:1e:
         9c:58:97:35:bd:2d:2f:b1:ad:d2:fb:f7:05:ac:bb:76:36:4f:
         68:c6:3b:20:f2:9b:dd:61:89:ee:5c:4c:fe:4f:26:04:d3:73:
         15:62:38:e6:10:b6:ea:a5:e6:83:e4:66:92:d2:c8:4d:84:5d:
         e9:69:08:5a:71:df:48:cc:bf:b1:92:c6:2c:3f:4b:1d:47:ec:
         1d:9f:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:51:03 2026 by rpki-client