Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File:                     ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier:          qJfYkCkCc/Eiu+8QIcf9YcVRpCUNBYMK7drjRXCwadc=
Subject key identifier:   50:6A:1F:47:A3:0C:D0:3A:3C:58:58:B0:78:BA:60:D2:9D:F2:C8:49
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer:       /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial:       019EC3A5F0BD960B31CEDAB9B9366FC343CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number:          0A2F
Signing time:             Sun 14 Jun 2026 01:01:32 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:32 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:32 +0000
Files and hashes:         1: 606JAzklsOqsRlrbcuzv28QnWpo.roa (hash: Ui6APTAkf1hdKOgIZctUG0CdW7HPm77LlztW2I8sf0k=)
                          2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: Xv/upfIPU0n4V9X9UTv5jpTHCxNja5A+/yKCR25AqoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:f0:bd:96:0b:31:ce:da:b9:b9:36:6f:c3:43:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
        Validity
            Not Before: Jun 14 01:01:32 2026 GMT
            Not After : Jun 15 01:01:32 2026 GMT
        Subject: CN=506a1f47a30cd03a3c5858b078ba60d29df2c849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:36:46:d0:eb:ee:78:87:20:c8:ff:00:0c:
                    a4:c2:04:e1:f4:2a:af:1d:d5:62:30:cf:65:7e:97:
                    34:d7:51:88:4b:ef:bb:22:c1:9f:ff:91:8f:45:4b:
                    73:70:11:8c:55:97:b8:13:3b:a1:53:82:40:e1:37:
                    e1:26:f9:6d:02:fc:8e:07:bc:9a:a0:f0:c4:c3:27:
                    5c:e0:bb:22:3a:ef:c1:a2:0c:fe:05:4e:4d:dd:e5:
                    46:f6:e9:60:70:d0:cd:94:f8:9b:39:21:74:60:63:
                    7c:9d:ea:24:a1:80:cd:ee:a2:c9:4f:4b:77:b4:c0:
                    e3:73:6e:54:8b:2c:82:63:8a:1b:d7:d3:54:ec:dd:
                    d6:84:d3:be:76:47:5a:35:ca:d3:63:ef:68:84:d1:
                    f1:ea:18:7f:86:42:a9:d9:d2:3a:cd:2f:e4:78:3d:
                    36:57:03:d4:37:a4:a1:0f:8f:98:ce:11:32:cc:d2:
                    1d:0d:80:95:41:9b:7e:76:a6:d1:97:2c:a3:bd:57:
                    5a:46:98:63:5e:4c:92:7e:3f:f3:3a:a5:04:68:a2:
                    25:5f:97:47:58:0b:ad:a4:65:15:b1:c2:75:fd:46:
                    80:01:b4:5f:1d:02:7c:84:f3:e0:3d:01:4d:1e:db:
                    33:9f:70:c4:bc:b2:32:6f:51:56:a5:f7:54:db:59:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6A:1F:47:A3:0C:D0:3A:3C:58:58:B0:78:BA:60:D2:9D:F2:C8:49
            X509v3 Authority Key Identifier:
                keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2e:6b:f0:55:06:78:f8:d2:b7:e9:33:72:dd:1d:e8:d7:4e:
         79:4c:bf:47:c3:0b:d3:6c:3c:75:04:03:11:55:d4:b0:24:dd:
         90:06:e1:3b:ee:9d:e5:3f:e9:de:ba:60:5c:60:6d:69:4e:9c:
         4b:ca:5c:ff:9f:e6:48:5a:fd:50:b1:97:58:fe:1b:ee:26:c1:
         b6:02:cd:0b:cc:35:47:87:ef:5a:10:9a:6f:d3:38:06:c7:13:
         b7:dd:d3:c3:d5:c3:b9:f1:8c:64:f4:07:75:d3:43:5f:6e:aa:
         31:96:6e:a8:b7:7a:09:a3:38:b0:b7:fb:a3:ab:d8:47:36:7d:
         a0:53:34:3e:db:bb:f1:65:f6:b9:eb:fb:ab:95:dd:28:d0:b0:
         0a:f6:de:d1:6a:ec:ed:61:fd:79:57:c7:52:15:53:56:4d:48:
         26:71:29:39:9a:e0:bb:f4:ed:d8:95:20:c0:a8:6c:1d:94:07:
         cb:33:60:5c:76:a9:25:3a:f2:fb:59:0a:5b:33:7d:22:41:4c:
         f6:e2:1c:82:f7:3b:ca:f1:95:69:8d:31:17:c9:4d:5f:8a:3a:
         a6:83:ef:08:32:72:d7:7e:54:44:2b:88:34:8b:ca:64:71:67:
         a8:c3:1c:42:a8:62:bb:16:c0:c3:7e:21:08:48:a7:54:87:94:
         5a:ec:fe:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:18:54 2026 by rpki-client