Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File:                     5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier:          wG3z78AWXe1Ra5SFEI4BojxGK3ezwzOJllI/rqNP3OA=
Subject key identifier:   A7:2D:F6:74:D5:38:F3:27:02:FA:C6:43:DE:12:68:46:A8:26:1A:B0
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer:       /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial:       019EC036546F323AB74CDD70B7C075255282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number:          0FE7
Signing time:             Sat 13 Jun 2026 09:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:46 +0000
Files and hashes:         1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: joNmKjT21LSTmuAfPljrXJV4V2DpyUxFxG0Y1H/kUFs=)
                          2: VbpHqTm4InVPfeEhfG1houFen0s.roa (hash: mGh4WVGrOaH38U0K8XkAxbYr95lc2nJQTlFAMtTdwzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:54:6f:32:3a:b7:4c:dd:70:b7:c0:75:25:52:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
        Validity
            Not Before: Jun 13 09:00:46 2026 GMT
            Not After : Jun 14 09:00:46 2026 GMT
        Subject: CN=a72df674d538f32702fac643de126846a8261ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:f3:81:ee:bf:d6:97:70:dd:f3:65:a4:0b:
                    10:a2:57:f3:71:69:d9:56:76:82:ac:1c:ce:9a:50:
                    4c:ab:ef:ff:7f:3d:20:34:77:ca:db:a9:7e:8f:d7:
                    26:ae:92:ee:39:87:df:f1:e0:b8:69:2f:f9:21:73:
                    a0:20:92:a0:e4:f9:c6:1b:c8:d2:68:17:76:59:26:
                    92:99:10:39:66:41:ac:11:ad:a5:72:15:03:f9:2f:
                    ac:01:49:af:3a:ff:23:2d:3c:3d:66:08:aa:38:48:
                    ee:8e:92:54:a1:b0:0c:27:8e:a4:30:6b:ef:53:31:
                    4b:f2:65:e1:bc:c4:04:51:a3:46:1d:77:1b:92:ca:
                    8b:a9:76:a7:59:65:2c:1a:ae:76:e3:16:9e:ba:c8:
                    02:9c:08:cc:26:55:54:77:d1:55:6e:c3:d1:6b:8f:
                    da:8b:6c:35:c9:80:49:72:7c:8a:fb:93:62:66:dd:
                    90:62:2b:3d:ef:2a:36:85:9d:2b:ee:eb:8e:94:7b:
                    74:c0:75:d2:81:ac:6a:80:bb:d3:dc:8a:49:13:cb:
                    7d:62:5b:8e:f5:e7:70:9a:14:f6:93:18:e6:ca:e6:
                    50:37:5b:0d:c5:41:75:83:fd:22:c5:a3:0a:96:28:
                    9f:41:f2:0e:81:92:21:d6:8f:ef:f0:65:e6:ff:6f:
                    70:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2D:F6:74:D5:38:F3:27:02:FA:C6:43:DE:12:68:46:A8:26:1A:B0
            X509v3 Authority Key Identifier:
                keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:88:34:6f:3b:56:b4:f1:7f:04:6d:44:ae:46:24:6b:4f:f6:
         6e:7c:4c:8b:e3:f9:35:9b:8c:c4:50:f6:10:8a:03:80:e8:89:
         8b:22:15:24:fb:b8:31:b2:72:cb:fa:06:c2:45:c7:f6:30:26:
         44:26:54:6a:b3:8d:17:d7:cd:fe:57:ca:76:10:92:9a:08:81:
         4a:fa:ea:53:30:a1:b9:93:c5:28:fa:d5:e6:31:ee:22:fa:b9:
         c6:eb:89:36:75:bc:f1:1e:ea:8e:83:ca:b1:d9:dc:10:f8:e2:
         b0:72:3b:84:fa:d8:c9:98:8d:af:b6:1d:0d:6f:96:b8:8e:ce:
         34:cf:b7:9e:2c:77:f8:b2:d7:7b:f0:6d:12:8a:e6:b0:d4:5d:
         bf:e2:b6:11:69:5e:e7:02:90:59:d4:e0:93:39:d0:06:67:5d:
         21:c0:b2:42:28:c6:be:31:ba:c9:0e:0f:2d:17:ff:fc:2b:eb:
         fe:85:53:e5:ae:7b:c0:55:47:9a:e5:65:61:c5:16:17:27:85:
         71:97:23:66:35:40:16:56:63:15:61:9d:69:b7:f1:2d:e5:e7:
         e1:39:f2:20:32:7c:6c:b0:94:d6:3d:d0:6e:8b:1e:ff:d4:ea:
         02:0f:ce:c3:96:a3:7f:7d:f9:f7:8c:8d:84:65:30:d5:6c:c1:
         45:93:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:12:01 2026 by rpki-client