Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File:                     c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier:          tcGVWCuxIx0bmrx5zBhiP70T9L/I/PzCBsyGmi4f9Wg=
Subject key identifier:   77:E0:1F:C4:80:63:E8:19:DC:72:58:DE:1E:BE:71:82:A7:F7:C3:2F
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer:       /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial:       019EC2245B560153B6BEBDD15C4A4031E9DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number:          066F
Signing time:             Sat 13 Jun 2026 18:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:22 +0000
Files and hashes:         1: NcnGkdErOmMk_0NOiHBMY1BqThA.roa (hash: PgvTT7EFBgrWeXVoNUr6zZBzW+dMw+OFLBnU00RhurU=)
                          2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: oTlwMcLq9C67mshFogUCp97f+mKN5oqAUhFJEOPnt7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:5b:56:01:53:b6:be:bd:d1:5c:4a:40:31:e9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
        Validity
            Not Before: Jun 13 18:00:22 2026 GMT
            Not After : Jun 14 18:00:22 2026 GMT
        Subject: CN=77e01fc48063e819dc7258de1ebe7182a7f7c32f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:fe:ca:ea:e4:59:57:07:08:ad:d4:fa:4a:
                    5e:cf:5a:95:b9:01:97:70:36:b4:94:22:8e:64:1e:
                    44:85:44:99:11:44:74:42:b3:b0:de:0b:78:8c:62:
                    c3:c3:35:4e:03:4d:0a:8b:bd:6f:e4:e1:17:d7:0c:
                    e9:d0:56:ca:c5:df:bb:00:39:b1:9f:63:60:e7:81:
                    4c:d7:df:53:c7:8b:85:a8:7c:37:15:84:13:d0:af:
                    da:90:72:c2:5c:06:1d:6e:f0:ab:a2:e5:05:0f:8e:
                    35:6f:85:03:b3:11:42:75:02:77:74:82:56:70:f3:
                    0c:04:ce:69:16:2a:b5:9c:9c:b6:08:2e:2e:b1:a5:
                    09:ae:ec:62:6a:e6:c1:65:da:ea:f7:f2:30:43:d8:
                    70:a1:2f:43:26:a7:71:a8:81:4e:0d:1e:a2:4e:08:
                    c8:af:ae:d6:1c:11:b0:5a:fc:bd:19:54:8c:ed:04:
                    b7:a9:60:75:f4:32:80:4d:46:ad:6d:88:74:d8:6e:
                    ef:5c:0a:1d:9f:7d:b4:18:9d:97:49:84:3e:8e:a3:
                    f6:1f:1f:aa:12:d0:19:9c:3a:df:83:47:85:48:99:
                    90:0b:52:ad:d2:49:39:15:c0:82:70:50:8e:c9:56:
                    01:01:18:e0:ef:3d:1b:23:9c:e5:7f:81:de:9a:30:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E0:1F:C4:80:63:E8:19:DC:72:58:DE:1E:BE:71:82:A7:F7:C3:2F
            X509v3 Authority Key Identifier:
                keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:57:11:c1:98:a1:fa:73:6c:28:6e:5e:c7:93:07:41:83:26:
         9f:bf:2c:0d:3a:01:2c:d5:d8:32:b4:67:53:29:06:e5:e6:c9:
         72:f6:fa:5e:d3:6e:dc:bd:08:45:8b:5d:5a:5b:60:ce:59:63:
         78:05:a5:60:2e:d1:6d:91:97:92:73:13:f9:04:44:a6:43:65:
         3b:97:91:2a:ae:bc:3a:6a:83:f4:f8:3d:be:a4:39:0b:1d:d1:
         c2:4c:61:d3:f9:ec:8f:cb:15:73:37:65:41:b5:7c:cb:f6:99:
         0a:d6:b4:d7:a8:80:c8:ac:10:87:c3:b1:61:ad:57:cf:5d:58:
         31:cf:f5:ea:cf:41:c0:44:32:2f:f0:2a:e8:7d:45:d1:98:6e:
         7f:8b:35:b4:36:48:6a:8a:20:c1:1e:32:49:6e:43:7d:eb:f5:
         7a:b8:f5:a5:ca:1f:7d:b0:98:79:7c:86:18:e1:0c:d0:84:06:
         f6:47:41:f2:71:a0:ea:55:6e:87:cd:a0:d0:16:4d:6f:d6:32:
         cf:0a:6a:bd:ef:a4:f9:a4:8a:c3:7c:be:5b:fd:4e:6f:9b:70:
         4b:59:e1:08:30:b7:43:76:ac:84:0a:6d:5e:f2:59:7e:7a:44:
         62:0e:ff:22:6c:fc:51:4f:a2:bd:0e:3d:a8:10:96:a6:8c:e9:
         bc:b5:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:57:15 2026 by rpki-client