Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
File:                     CovKGg6GRItz2lTELLDXV2U3Pyc.mft (raw, json)
Hash identifier:          MdfH7AzrWBx6mcKXHpCaXPhT40YAIKeGb/XzYbWWJDo=
Subject key identifier:   13:0F:9B:6D:E7:EF:95:54:16:06:1B:9D:BF:D8:76:5C:FE:91:09:85
Authority key identifier: 0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27
Certificate issuer:       /CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
Certificate serial:       019ED318685251CB335B9F67698EBBBB0F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
Manifest number:          1484
Signing time:             Wed 17 Jun 2026 01:00:52 +0000
Manifest this update:     Wed 17 Jun 2026 01:00:52 +0000
Manifest next update:     Thu 18 Jun 2026 01:00:52 +0000
Files and hashes:         1: CovKGg6GRItz2lTELLDXV2U3Pyc.crl (hash: 8LkcSWnnHhk2jY5U3ScQYMzk5Lsckri2MtXqPwg74yY=)
                          2: RyL4c5_NFeavotjlWc9ltdGX7O8.roa (hash: dSsA+dzaiaqYnBINWY6V92uBT2cKWLJnMg9X5b/Herc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:18:68:52:51:cb:33:5b:9f:67:69:8e:bb:bb:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8bca1a0e86448b73da54c42cb0d75765373f27
        Validity
            Not Before: Jun 17 01:00:52 2026 GMT
            Not After : Jun 18 01:00:52 2026 GMT
        Subject: CN=130f9b6de7ef955416061b9dbfd8765cfe910985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:e0:bf:bd:4f:47:46:92:9d:65:b8:b8:6c:
                    8a:2e:f1:01:26:07:d6:b8:16:22:dc:11:30:16:bf:
                    9c:63:79:c4:62:95:a4:ff:b7:76:a2:51:3a:ff:5f:
                    26:83:ec:3c:88:8d:35:1a:79:e8:c2:bc:06:e9:bb:
                    b5:f6:41:fa:37:ce:06:49:46:46:92:58:eb:24:56:
                    44:0e:96:3e:d8:14:58:d7:a8:80:b8:49:06:c1:5f:
                    e4:be:61:ba:a1:b0:60:bf:cc:41:7e:e6:f4:b4:d5:
                    5a:ea:e1:65:12:f4:49:f9:76:87:c0:d3:7b:58:d5:
                    d0:6d:38:8d:80:b7:31:d0:f5:af:e8:28:c2:3b:35:
                    0f:d5:b5:4c:83:11:33:31:a4:fb:3a:4d:34:7f:03:
                    29:61:80:50:de:0b:19:80:07:34:15:1e:37:8d:54:
                    e5:79:f7:36:0a:7d:f6:85:84:f3:c6:f0:30:47:57:
                    f2:35:be:4d:81:cc:3a:43:0d:dd:cc:c1:50:0d:5d:
                    44:b5:d9:06:52:2d:b5:27:11:10:1f:6f:93:cd:43:
                    d3:d9:0b:05:40:8b:a2:e9:1e:92:c4:29:57:bd:04:
                    b3:48:12:f9:77:1b:57:8a:0d:67:5f:17:50:08:cc:
                    da:57:d9:19:dc:3b:78:18:76:9c:2d:a3:2c:b4:63:
                    9a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:9B:6D:E7:EF:95:54:16:06:1B:9D:BF:D8:76:5C:FE:91:09:85
            X509v3 Authority Key Identifier:
                keyid:0A:8B:CA:1A:0E:86:44:8B:73:DA:54:C4:2C:B0:D7:57:65:37:3F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CovKGg6GRItz2lTELLDXV2U3Pyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/186fd4-3c64-4dbf-a900-a799062589a3/1/CovKGg6GRItz2lTELLDXV2U3Pyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9b:56:c0:02:26:79:55:15:64:8c:35:38:33:24:90:16:3a:
         4c:8f:88:43:89:1e:e8:2a:0a:96:15:ce:8a:7e:09:61:1d:23:
         98:bf:39:54:1c:75:6e:e3:df:e0:d3:ae:91:53:21:90:bc:7f:
         34:31:75:43:b7:7b:6d:86:de:91:30:e5:d5:db:fe:62:46:bf:
         ce:44:7a:36:e7:7d:64:51:b1:06:71:3e:4f:97:7a:ad:8d:6b:
         ed:d7:40:9a:f0:d7:ee:25:cb:7b:de:97:9c:b5:ae:fd:a3:fc:
         df:34:63:76:0a:a9:75:5c:0e:f5:4e:f9:0a:96:99:4e:26:6e:
         6e:ae:83:24:0b:db:5d:11:85:88:04:24:c7:bd:53:11:06:41:
         4f:5f:0d:3e:c7:d2:8e:5b:68:53:c5:99:64:57:83:83:75:6f:
         46:d7:4d:47:bb:fb:7c:6f:d6:3d:a1:24:a3:45:33:69:d8:ff:
         cc:dd:b7:0b:50:e8:88:b4:3a:9a:98:72:3e:a8:d4:ee:3c:e4:
         9f:c5:e9:5c:8c:26:13:f5:e6:64:cf:74:ed:b6:f7:da:6c:ad:
         85:89:da:79:6b:a9:e2:be:92:11:93:b3:01:dc:27:b7:37:c3:
         3c:62:c7:31:69:a2:77:9f:7f:2a:40:ff:a1:34:85:80:3c:af:
         b3:88:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:17:55 2026 by rpki-client