Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
File:                     C155jbbo9XxfSkRRUJAd7oqW1eU.mft (raw, json)
Hash identifier:          E6jk6Qlmx8yLRB2HKhL4ttdyfl9YVb4VpmLVz6fetl8=
Subject key identifier:   EC:2D:E3:A9:49:C1:41:39:08:05:C9:14:D3:E8:D7:EB:F9:B8:F4:33
Authority key identifier: 0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5
Certificate issuer:       /CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
Certificate serial:       019EBE10BF6F3CEC5D95015679DBD7C623FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
Manifest number:          0F47
Signing time:             Fri 12 Jun 2026 23:00:29 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:29 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:29 +0000
Files and hashes:         1: C155jbbo9XxfSkRRUJAd7oqW1eU.crl (hash: pTr39o9IK/Fxy5CD3zzk/bN3BRGIHZ/CMH1ayE6kn14=)
                          2: qyHL6II4esJ4dc5VWl8lMms3EA0.roa (hash: XUNHvMm3tr618bDepCNFHXOwOdAqjvCOtPPWHwwDwkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:bf:6f:3c:ec:5d:95:01:56:79:db:d7:c6:23:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5e798db6e8f57c5f4a445150901dee8a96d5e5
        Validity
            Not Before: Jun 12 23:00:29 2026 GMT
            Not After : Jun 13 23:00:29 2026 GMT
        Subject: CN=ec2de3a949c141390805c914d3e8d7ebf9b8f433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9c:3b:bd:73:a5:ef:99:68:66:f8:df:08:1b:
                    d6:cb:88:18:c7:8f:a1:9e:1c:75:1c:f2:bf:fd:c5:
                    c4:38:fc:4f:14:87:8a:07:ba:ef:4b:ca:3a:17:da:
                    24:14:94:49:1f:67:69:5e:8e:ea:9a:87:2d:fb:1d:
                    02:39:95:c4:9f:07:03:56:68:cc:e9:de:74:86:2f:
                    47:da:70:da:5f:c0:82:e1:59:8f:76:5c:1a:2e:8c:
                    7b:9c:d5:91:34:9a:ce:ee:06:89:c7:c0:fd:05:07:
                    7b:49:21:ac:a8:d6:fe:27:03:34:01:21:5c:1c:8e:
                    97:24:8a:e9:df:10:14:9b:17:3e:5e:25:97:68:0c:
                    cf:58:15:8c:51:52:63:52:80:b2:2d:a1:ed:93:ff:
                    2a:7b:80:62:ad:8b:b1:54:76:93:bb:56:4c:ad:6d:
                    8d:65:e7:3b:21:21:52:c1:fb:c2:2c:4d:34:6f:2b:
                    29:ea:e0:82:eb:e7:ed:53:cf:92:9c:00:25:31:b1:
                    3c:81:af:5e:c6:54:65:56:07:6b:5d:6c:25:12:6c:
                    f6:4b:c0:de:58:8a:48:1a:4a:72:42:14:86:73:0f:
                    64:27:15:0c:0f:27:0f:5c:ec:14:39:d0:03:79:7a:
                    f2:13:72:f1:44:82:da:84:e0:a2:cd:3e:ce:9a:a1:
                    85:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2D:E3:A9:49:C1:41:39:08:05:C9:14:D3:E8:D7:EB:F9:B8:F4:33
            X509v3 Authority Key Identifier:
                keyid:0B:5E:79:8D:B6:E8:F5:7C:5F:4A:44:51:50:90:1D:EE:8A:96:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C155jbbo9XxfSkRRUJAd7oqW1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d679f2-414e-4538-9c60-295611aa7e92/1/C155jbbo9XxfSkRRUJAd7oqW1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:48:d1:0a:e7:69:36:fb:66:7a:d8:ae:85:e0:d6:e8:86:7b:
         68:0c:95:3e:3e:b5:4f:0d:69:7e:6c:96:0b:82:4f:8f:30:e7:
         b9:e2:98:68:84:ff:54:40:b4:95:da:4c:0c:b2:75:0d:77:9a:
         76:13:b6:09:16:cc:2e:d0:d3:fa:31:65:65:5e:55:7d:88:6e:
         22:47:26:b3:84:60:8b:fe:fe:e5:f1:97:50:a2:db:44:fe:8d:
         a6:c3:0a:79:2a:0e:98:19:49:6a:6d:fa:77:13:1c:74:cc:f3:
         05:26:10:ba:bd:60:4e:87:7d:19:19:26:0c:33:fb:68:87:2b:
         77:e7:bb:e1:a4:d0:42:36:b5:81:ad:b1:1d:8c:82:4c:15:ab:
         84:d5:5e:db:f8:04:ff:38:d2:43:45:01:01:f8:5d:96:79:2e:
         da:d4:c7:42:df:56:62:95:8c:b6:61:f5:bf:b4:98:05:51:1c:
         9d:01:70:39:43:12:9b:79:1f:a6:91:88:c2:52:e1:fa:47:96:
         eb:be:b3:4b:95:5c:8c:44:b1:a9:73:7d:bf:c6:5b:42:23:a5:
         a1:ba:44:e6:65:06:9f:cb:5f:14:b8:00:9c:73:93:7c:cd:be:
         95:14:3a:01:ac:f9:03:45:78:c3:26:6a:70:f0:1c:2f:16:c9:
         b7:e7:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:33 2026 by rpki-client