Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File:                     cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier:          hDEwTMakK58bXif6zmDEFNkAvHVkDwEAopdz3shEELE=
Subject key identifier:   1A:BA:36:9A:85:45:73:D3:A0:03:95:EF:C9:7B:9A:0D:0D:0A:30:C7
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer:       /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial:       019EBF5A9F047CDA8CEE4BCB34F720B87FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number:          0653
Signing time:             Sat 13 Jun 2026 05:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:47 +0000
Files and hashes:         1: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: p3xdTKKjP9HiVaDIzGS9mYrtQCc9f0JW+MqH4ay3be0=)
                          2: eUWfxWghJ9MEZ7tCGolfI7KpscU.roa (hash: NcF9IeGtFM+4GMOYjdME6cxPWgCCMAdO701188d5CSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:9f:04:7c:da:8c:ee:4b:cb:34:f7:20:b8:7f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
        Validity
            Not Before: Jun 13 05:00:47 2026 GMT
            Not After : Jun 14 05:00:47 2026 GMT
        Subject: CN=1aba369a854573d3a00395efc97b9a0d0d0a30c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5d:0c:78:06:60:74:a4:a3:83:31:64:c2:33:
                    de:69:fc:83:15:9e:8c:d6:00:3e:36:67:03:85:fd:
                    b3:54:40:6d:1f:31:4a:dd:f3:ea:cd:f9:97:06:26:
                    b3:99:9e:51:20:49:ec:08:96:7a:9a:e6:b4:7e:82:
                    cc:90:22:db:7a:d4:53:89:bb:e7:90:23:e2:d2:bc:
                    ac:c1:b1:4b:98:72:05:a7:e1:20:3d:8d:4a:ac:c9:
                    e2:55:53:03:73:1c:03:f7:5b:bc:ba:22:ab:fd:47:
                    14:8e:4e:c5:57:4a:18:4c:dd:31:ba:38:2f:66:48:
                    03:bb:32:10:4b:ca:1b:2f:a1:cc:8e:44:0f:e4:6c:
                    3b:78:69:af:27:59:3c:06:71:23:0f:e8:74:cd:49:
                    01:c6:3c:48:b9:b1:4c:0d:52:0b:f4:ee:2c:d6:dc:
                    f8:9d:30:e5:b2:e8:a7:09:56:38:6a:47:af:f8:9c:
                    f0:86:19:aa:ff:3f:57:5e:7a:92:49:18:4d:8a:2c:
                    da:75:c5:a1:2d:18:ea:d2:72:ea:4b:fe:69:7d:18:
                    5d:1f:54:c2:ed:2a:2a:96:1d:db:51:26:33:b7:04:
                    3c:fc:c0:f4:fe:0c:bd:c3:b1:4b:53:a3:6e:43:e9:
                    1a:2b:b3:4a:cf:a2:07:4c:b4:09:22:9f:9e:89:38:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BA:36:9A:85:45:73:D3:A0:03:95:EF:C9:7B:9A:0D:0D:0A:30:C7
            X509v3 Authority Key Identifier:
                keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2a:6f:63:85:f9:4d:6b:5b:86:97:a4:3f:9f:43:cc:bb:28:
         44:ac:2a:fe:91:05:4a:fb:9d:ea:68:f0:a3:5e:ff:d3:bc:15:
         ee:c7:59:3a:f9:d1:8a:1c:73:b6:e6:1d:f2:25:7b:d7:4b:62:
         4a:5e:40:16:17:55:e1:61:88:15:7e:5c:ed:7a:04:20:a0:0c:
         1d:59:88:00:77:5e:9b:9a:b2:26:30:7e:88:56:ce:9e:67:e9:
         09:a8:30:df:92:82:75:69:ac:b9:e4:70:6d:98:24:b1:76:75:
         db:51:cd:36:95:94:6e:da:83:56:df:5a:99:6b:75:4b:b6:2c:
         50:04:c3:3e:8f:0c:45:48:ce:8f:90:24:ac:9a:85:39:be:52:
         50:3c:35:82:b9:62:ee:1b:56:b1:39:ee:9c:39:58:6f:28:34:
         ec:0d:4a:49:a1:83:bb:a7:a0:74:bd:09:d1:cb:d3:61:b7:7a:
         5f:e3:9c:fe:07:bb:db:db:ce:5d:56:1c:27:4b:10:8e:17:e1:
         b4:86:1d:f5:d6:a7:12:11:b8:a4:50:51:f2:ba:98:ff:44:4c:
         82:f7:8d:37:c9:e6:91:12:ef:18:99:18:03:8c:e5:f6:eb:2e:
         c2:57:27:c9:82:aa:6d:9a:78:d8:d0:c2:2e:98:63:7a:09:d7:
         bf:66:83:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:00:43 2026 by rpki-client