Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File:                     5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier:          IhXxfvnRhJla1CaMxDlDDWLwcIqMiy08+2roj1uz0fg=
Subject key identifier:   A0:A3:A0:79:01:4A:0E:8C:8E:AD:92:DE:F6:7E:4B:D9:61:2D:C3:50
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer:       /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial:       019EC14925306ABB53E179CF34B6A3F568E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number:          0A92
Signing time:             Sat 13 Jun 2026 14:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:56 +0000
Files and hashes:         1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: HQeFQVX0UuWwNKm1ebDGcaU17h7bJg6SFQZLJ67N+Go=)
                          2: jmnDOsm4XHUSPILw7nGYM1oOQEs.roa (hash: 0inc/wmsdWPIKoI7fVSGb11ctPl1XySYsdqtu8Ok5kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:25:30:6a:bb:53:e1:79:cf:34:b6:a3:f5:68:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
        Validity
            Not Before: Jun 13 14:00:56 2026 GMT
            Not After : Jun 14 14:00:56 2026 GMT
        Subject: CN=a0a3a079014a0e8c8ead92def67e4bd9612dc350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:4b:95:f7:0c:ec:00:b6:e1:07:18:f2:0b:
                    07:24:28:11:14:81:e5:53:a8:09:65:03:f8:07:af:
                    20:10:10:97:b2:2c:5c:fd:8d:1c:21:aa:1e:34:07:
                    b1:63:f1:8b:7e:60:24:86:58:53:41:f2:c2:b9:f7:
                    4c:c8:d5:55:9f:c9:e0:21:c7:3a:a7:8a:27:23:b9:
                    47:34:c2:5c:18:d7:7f:5c:26:c4:62:66:50:4b:23:
                    60:b1:48:d8:70:ce:9d:73:ad:cf:94:8c:76:ac:6e:
                    1f:bd:b6:10:f1:6e:ce:a1:ae:5e:6a:ef:ee:23:4f:
                    4a:42:1f:69:53:4a:94:97:ba:5a:69:3c:6a:a4:30:
                    f6:a3:fa:9c:3c:30:55:6f:80:91:d7:a0:ee:6c:dd:
                    48:46:d7:71:2b:6a:d2:ae:c4:c9:56:7c:2b:be:4f:
                    cb:23:ba:74:e8:65:5b:45:9a:0e:96:7c:c1:6c:92:
                    fe:aa:7b:34:75:05:50:ca:f2:5e:f2:af:39:7b:b7:
                    79:63:a6:f9:69:b0:41:43:a1:b3:03:57:0b:4d:0a:
                    22:61:6f:94:39:06:96:aa:5f:2e:04:cb:22:b5:97:
                    5f:9d:e0:40:9e:2f:5a:ed:fe:dc:eb:4a:e2:13:b8:
                    0a:84:db:28:5b:10:1b:34:e9:08:9e:87:d7:97:98:
                    a5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A3:A0:79:01:4A:0E:8C:8E:AD:92:DE:F6:7E:4B:D9:61:2D:C3:50
            X509v3 Authority Key Identifier:
                keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b7:d8:62:bb:85:42:a5:66:c7:c9:ee:ff:50:b2:9d:69:e3:
         be:03:fa:a7:b6:4f:a4:56:2e:d3:9a:d2:eb:60:6f:9f:ff:a2:
         bf:47:5c:73:b9:4b:53:2f:ac:aa:bc:0e:21:01:21:37:c4:50:
         3d:b6:e5:85:78:97:72:70:e7:0a:9d:fb:76:68:07:76:a3:6a:
         2b:f3:7a:12:71:eb:14:32:49:28:19:c6:bd:1f:40:98:fa:3a:
         7b:b0:84:1b:5b:4c:40:42:e0:3b:3b:34:93:08:8a:cf:53:c8:
         e9:c3:53:65:df:cd:97:78:a4:b8:a0:64:60:7a:4a:93:25:c3:
         0f:95:32:b6:3c:5f:b9:d3:34:d1:19:f0:ac:83:2a:15:76:49:
         1e:13:ad:11:f7:66:d2:f6:66:8d:05:03:6b:c7:03:3b:54:ce:
         f0:a4:51:29:0b:f6:e2:ec:37:58:88:06:7e:35:ab:28:67:eb:
         57:c4:9b:3e:69:73:ee:83:67:05:02:c3:15:49:95:37:6d:e6:
         4d:97:5c:28:d4:39:7c:73:23:d0:97:64:5e:4a:ba:08:02:2c:
         dc:b2:2a:0d:06:35:40:26:27:0b:f5:cb:d1:2c:80:59:b4:4b:
         57:72:35:62:14:c6:d1:29:b4:f1:0e:84:bd:57:13:d1:d5:92:
         68:a2:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:23 2026 by rpki-client