Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
File:                     iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft (raw, json)
Hash identifier:          FMgbs0OY/MPaD2yuxUGv0QnWzjgbEsOy5m0Op1w7TZI=
Subject key identifier:   45:72:FB:0D:1C:3C:70:AF:9E:B2:8D:ED:6C:61:BA:C1:38:FC:DE:9A
Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC
Certificate issuer:       /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
Certificate serial:       019EC3A4F79C557B6E04E5836940E3BAE40A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
Manifest number:          102E
Signing time:             Sun 14 Jun 2026 01:00:28 +0000
Manifest this update:     Sun 14 Jun 2026 01:00:28 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:28 +0000
Files and hashes:         1: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (hash: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o=)
                          2: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (hash: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8=)
                          3: iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl (hash: 8qntvLQyw5cb9kUUUUP1b+/Ydm1EadVMwCW+X//LhUg=)
                          4: x7X970YopYql2_ORGb5JC0O5FPc.roa (hash: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a4:f7:9c:55:7b:6e:04:e5:83:69:40:e3:ba:e4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc
        Validity
            Not Before: Jun 14 01:00:28 2026 GMT
            Not After : Jun 15 01:00:28 2026 GMT
        Subject: CN=4572fb0d1c3c70af9eb28ded6c61bac138fcde9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:75:b3:f2:d5:74:99:2e:79:cd:53:fa:53:0b:
                    aa:37:79:64:c8:fe:1d:60:0d:28:54:2e:61:09:11:
                    dc:37:8d:08:7b:3d:dc:87:0f:26:a4:ec:00:03:cd:
                    9c:f1:88:a8:8b:99:bf:b5:e5:71:cb:7c:af:76:04:
                    2a:56:c5:ed:20:7f:b9:48:3f:78:40:f8:1a:1f:aa:
                    52:ef:bf:d0:0b:e9:44:2f:1f:cc:15:38:35:63:63:
                    44:be:0e:59:50:60:96:6e:f2:fd:e0:4b:a9:0b:13:
                    41:4c:a2:b6:dc:44:d9:ec:f7:09:53:6a:4f:84:03:
                    1a:3e:21:ac:43:7d:c6:9c:cb:68:a2:11:10:32:73:
                    50:63:31:6b:24:b0:2e:c9:a6:99:e1:30:72:56:3a:
                    0b:72:f0:56:46:fb:cc:95:14:cc:dd:02:99:9c:19:
                    09:78:2e:0c:6c:7c:7b:c0:9d:9e:17:8e:40:0f:8b:
                    5f:c1:4c:4a:b5:03:99:72:84:15:20:6b:f1:c0:6a:
                    de:bd:60:b8:d0:c2:78:ee:1f:e3:12:21:9a:30:34:
                    19:c7:56:2d:5f:ad:58:13:27:2a:98:7b:bc:bc:bd:
                    0a:8d:7d:bd:bb:65:0d:a4:22:b3:9d:a3:f2:e5:8f:
                    2e:6c:b2:97:19:25:46:2e:4d:27:39:6f:4e:b4:b8:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:72:FB:0D:1C:3C:70:AF:9E:B2:8D:ED:6C:61:BA:C1:38:FC:DE:9A
            X509v3 Authority Key Identifier:
                keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c1:da:16:21:9e:da:17:69:0f:96:c7:25:aa:5f:0b:d2:87:
         66:cb:84:58:06:2d:8c:51:9a:c6:1b:36:f6:db:37:71:61:fd:
         b8:31:4a:1b:09:d6:d5:06:98:5e:50:1d:6f:50:a6:9d:31:f0:
         02:0f:61:4a:f9:9a:d7:16:d7:bd:4b:a1:62:f1:a0:72:2f:86:
         0f:bb:7a:8c:44:d4:3e:8f:14:c2:bc:5d:c3:90:87:96:2c:21:
         e8:d6:e2:aa:8f:97:ea:cb:3e:a6:76:76:73:41:5f:5e:93:1e:
         19:b6:56:7f:23:98:1c:d0:4f:8b:40:60:3c:b7:2d:9e:d0:b4:
         21:3a:9d:a5:82:b2:87:70:ad:60:fb:69:7f:75:bc:e2:23:6a:
         48:f8:f1:a2:3b:74:0f:fa:da:d5:7e:b9:cf:63:1f:83:f2:ea:
         b6:8b:70:9e:a3:8b:6f:b8:17:3c:c4:49:f7:5e:bd:82:3b:8e:
         03:c0:e4:d9:18:6e:53:11:08:5e:5f:61:ef:b8:84:28:b4:74:
         91:4b:3e:53:4c:42:30:cf:53:07:a9:15:ba:df:f4:d4:90:74:
         53:aa:21:c9:01:cb:ff:67:50:6d:2a:6c:ef:d0:69:54:ac:e0:
         5e:14:25:48:63:2a:69:c7:c9:27:b6:2e:14:4e:86:b5:91:72:
         9c:d1:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:03 2026 by rpki-client