Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
File:                     CaT39OTp5yw6M5P7XW6nQrwbTCg.mft (raw, json)
Hash identifier:          f2s66AGjufVmjGZiB1i9dj5Zgd4PnBdYzATlaJnQhOU=
Subject key identifier:   62:C8:E5:71:0A:7D:D6:34:1B:CE:B6:09:9C:FE:5A:04:D8:93:B9:0A
Authority key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28
Certificate issuer:       /CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
Certificate serial:       019EBF24082C586CF36D488E304852350398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
Manifest number:          131D
Signing time:             Sat 13 Jun 2026 04:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:09 +0000
Files and hashes:         1: 0tgdN2qxcJplebNaaWT9iaqWv6s.roa (hash: SVEBZu78M2nPUUItloPsYESxd6cYYGpVpIZuduXUUjU=)
                          2: CaT39OTp5yw6M5P7XW6nQrwbTCg.crl (hash: zIi+pL6MHiUJ1H9RqaJc+IRQERU26jGu4obhpebmRIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:24:08:2c:58:6c:f3:6d:48:8e:30:48:52:35:03:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28
        Validity
            Not Before: Jun 13 04:01:09 2026 GMT
            Not After : Jun 14 04:01:09 2026 GMT
        Subject: CN=62c8e5710a7dd6341bceb6099cfe5a04d893b90a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:aa:83:4f:f9:e6:ff:a1:62:3b:00:3a:52:
                    ac:06:30:e7:0d:4f:45:75:5d:ff:cf:17:b3:c2:e2:
                    ac:8f:af:32:b0:b6:96:f8:fb:15:fd:e6:8a:10:94:
                    95:13:1d:7a:71:9a:f4:c8:07:63:e0:df:a2:30:a4:
                    b3:59:8d:df:f9:af:02:8c:fb:1e:88:d5:96:19:cb:
                    5b:51:bc:ec:96:38:d1:f5:4d:93:9d:1d:eb:31:81:
                    75:8b:ba:2b:19:7f:09:d7:1e:15:25:85:6e:56:62:
                    ce:46:b6:ee:64:a8:2a:96:c9:ef:90:1f:c4:0c:0a:
                    c6:20:e5:c1:6a:2e:38:09:43:21:f2:62:39:ae:96:
                    bd:3e:9b:91:42:53:b1:1f:b6:d5:6a:8d:6b:79:cd:
                    90:8e:8d:37:4c:5b:51:62:22:12:a7:1e:0a:11:63:
                    35:3f:4f:9f:18:69:06:eb:e8:6b:ea:1c:db:ea:d0:
                    9b:e3:f2:80:b5:74:86:de:7e:91:aa:7e:05:79:bd:
                    bf:79:79:d2:83:7e:92:ce:be:eb:0d:58:98:ab:0b:
                    b5:b5:6c:44:9f:5e:30:c8:5d:2c:b6:70:9d:57:fb:
                    7d:b1:3a:5b:4a:b5:91:35:ba:45:73:23:f0:fe:12:
                    7e:37:f1:eb:52:99:aa:87:ca:c0:f2:92:9e:33:56:
                    fd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C8:E5:71:0A:7D:D6:34:1B:CE:B6:09:9C:FE:5A:04:D8:93:B9:0A
            X509v3 Authority Key Identifier:
                keyid:09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:70:43:53:34:f8:5a:b6:6a:31:26:10:b0:83:a1:ba:27:
         3b:cd:c1:66:ed:1f:ad:e4:7c:39:10:1a:a6:fd:b9:2f:c7:30:
         01:5a:7a:29:40:66:72:dd:8d:0d:ed:01:35:f5:42:86:09:71:
         fa:72:67:db:96:bc:e6:0c:82:b5:d8:a8:b4:d0:bf:b3:98:aa:
         4a:11:85:23:4d:de:ff:35:66:9d:03:87:2c:b6:dc:54:8e:90:
         07:96:15:ad:9c:02:c8:9a:56:95:fb:5c:12:a1:1c:2d:b3:b2:
         9f:bc:f4:e5:dd:5f:23:d2:11:d1:77:f8:0c:76:2b:61:2e:f5:
         67:a2:52:66:cc:03:cc:75:11:13:8d:57:33:44:dd:01:49:a1:
         09:c2:2b:67:7e:01:e9:bb:23:a4:0c:67:43:6e:96:29:dd:58:
         28:cc:52:a7:2e:7f:a8:83:2b:8f:7c:13:b3:da:46:6c:b3:5d:
         0b:aa:64:32:77:58:e4:7e:2f:42:6e:48:c8:ed:c5:c1:bc:2f:
         94:99:22:8d:08:38:fe:a6:28:8f:f9:8e:0b:54:40:46:a1:68:
         b9:82:27:cc:c1:60:b8:7f:bf:a7:eb:ef:ed:59:42:95:17:7d:
         d3:07:36:45:e0:87:b3:ec:af:da:c9:0d:9d:1a:5f:de:48:44:
         5c:8b:94:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:18 2026 by rpki-client