Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File:                     CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier:          +1usq0pu8cFhaAN/ePvSgaGgdywRs3QlsKfZ7qPJ1vg=
Subject key identifier:   B1:CD:DD:52:83:BE:30:CD:B1:E6:45:97:8E:AB:5F:C4:D1:39:E1:14
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer:       /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial:       019EBE7F7785524448ABEEEEED8E6403E303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number:          143E
Signing time:             Sat 13 Jun 2026 01:01:24 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:24 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:24 +0000
Files and hashes:         1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: JHfWIUyvxciXHJ1Me8h/gKEfdx0nIKvpQLHAokYZRNo=)
                          2: Kr82PzCvD4Fk7jNwoZ0-iCZtxTE.roa (hash: XM1J6jO/D+cqiYMXDlDXyv/SlFsPZ20nk+XVsCUihVk=)
                          3: YMptQVK4HH5vDul8RiYPM5BA3i4.roa (hash: 6IlPlDIrNnILGNV4XcoHgemdeW+kMLsTXUGyZB/VOA8=)
                          4: cENwAzhw60-ikgeBP0Wk-X-TPRQ.roa (hash: WKFy5CgMQiAy0y2WtEt+U7yH6EI/ABaKojXrx+8izJQ=)
                          5: n35REyNvGDkbhlXQDkgILr0DQJo.roa (hash: XOxfruBgBSVJzwCvp7t1Dh63tFF/2A3jPjy2stEx9vs=)
                          6: sLW9QUPl2doaDpkVMgscvJSFTPA.roa (hash: Gq/TJtCE6wPwEUtIEF1+84a/2wA7uiRfAtKneXSPPHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:77:85:52:44:48:ab:ee:ee:ed:8e:64:03:e3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
        Validity
            Not Before: Jun 13 01:01:24 2026 GMT
            Not After : Jun 14 01:01:24 2026 GMT
        Subject: CN=b1cddd5283be30cdb1e645978eab5fc4d139e114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:6d:c2:5d:fe:a1:7b:d9:70:5a:5b:af:8c:
                    a2:c8:28:95:fb:67:9d:3d:22:f0:e3:a0:cb:86:f1:
                    44:91:bd:ce:ca:83:5d:95:18:54:0f:23:cb:57:fe:
                    5b:4f:3a:20:b1:f1:b4:0a:50:d4:45:c2:33:90:2a:
                    3e:e8:1c:61:fd:03:14:79:d5:36:bf:11:cc:bf:ed:
                    12:6a:3f:c9:c9:82:8f:e3:74:02:84:f8:1a:76:89:
                    73:41:6d:ea:19:f3:82:5b:d8:4b:23:e5:73:49:f4:
                    3f:24:46:a2:95:46:1f:4a:a6:8c:fe:ea:63:6b:c3:
                    23:3e:3b:a6:c2:05:c4:13:45:b0:c8:07:38:72:85:
                    b9:45:d6:cd:b6:64:6e:0d:95:a8:28:d1:49:8b:f8:
                    9c:ce:63:31:c7:28:62:57:aa:7c:47:74:df:2b:5f:
                    1c:5c:bc:07:92:f6:ba:0d:98:00:1e:94:08:83:b4:
                    5a:f7:d5:b1:c7:d3:b8:8c:6a:24:6d:e8:17:e3:a8:
                    d4:62:da:41:10:ce:96:db:18:95:3e:d2:e6:12:51:
                    5f:ed:ae:dc:37:2e:ed:c4:52:b3:17:86:21:cc:05:
                    a2:b1:22:48:ee:1d:77:89:9b:75:2f:76:c1:ac:8f:
                    95:80:2d:c8:01:36:3d:61:ef:fb:2b:db:cf:b3:b3:
                    79:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CD:DD:52:83:BE:30:CD:B1:E6:45:97:8E:AB:5F:C4:D1:39:E1:14
            X509v3 Authority Key Identifier:
                keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:93:c0:a7:b8:35:e9:a4:3c:74:3c:6c:82:7f:29:73:93:d8:
         6c:7c:d9:c8:d0:0d:7d:7a:a9:9f:b2:0f:28:3d:4e:1e:6a:60:
         d5:a5:d8:c7:3c:4e:f4:33:71:e9:77:4f:fa:96:ff:69:4a:64:
         b7:eb:ad:bd:41:a4:95:0c:57:64:b6:b0:ae:98:53:89:7a:a4:
         c8:34:53:fd:0b:96:b4:ed:b0:ef:91:94:4d:5b:00:b3:b2:81:
         be:ae:11:34:4d:77:f9:a1:5e:7d:a8:8f:f8:cc:17:7b:bc:dd:
         60:d1:39:c9:f3:4b:6f:d4:d0:65:97:8f:23:0b:9e:bd:ea:aa:
         11:71:ef:47:70:a0:03:e3:b6:90:07:66:d5:1d:7d:d8:df:81:
         be:16:b0:1b:6d:58:23:94:b3:3e:76:ca:3b:d7:d8:37:ed:a6:
         68:69:28:6c:80:ba:dd:c4:6e:4b:b0:1c:c1:36:db:dd:89:86:
         68:c2:4c:da:61:cb:8f:fb:04:40:51:12:0e:2f:5c:02:2f:97:
         d6:05:d8:63:a3:07:08:5e:66:27:63:0e:a9:01:ad:b5:32:3c:
         87:9f:98:17:ea:db:d1:76:e7:24:a6:40:1e:cc:14:0d:74:bb:
         59:f4:6a:14:02:18:0e:f4:cd:9e:a6:90:38:75:1b:ac:24:09:
         9c:f0:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:42 2026 by rpki-client