Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File:                     DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier:          Bc/JuoD15IfYXAiEv5eX0TCXWnHkdZlMk0YreHQWc5k=
Subject key identifier:   F0:B3:2E:EE:48:74:22:11:CB:6C:92:64:78:AA:15:39:26:42:31:FD
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer:       /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial:       019EC03677E2C420F7326A1B2C77D3FFC51F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number:          0BA8
Signing time:             Sat 13 Jun 2026 09:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:55 +0000
Files and hashes:         1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: UA+cAZ73aImZO8k8wT4NPBtEsS7r8uqZYRWsquvjdTk=)
                          2: E5N49IFOZzcUudGH8Hfr0F0ywvk.roa (hash: qu/cDpuHW9hVmNW832+M9NPLYicyAqIzhTV6hHRmh3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:77:e2:c4:20:f7:32:6a:1b:2c:77:d3:ff:c5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
        Validity
            Not Before: Jun 13 09:00:55 2026 GMT
            Not After : Jun 14 09:00:55 2026 GMT
        Subject: CN=f0b32eee48742211cb6c926478aa1539264231fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:91:a5:1f:c7:48:89:d9:7e:b6:5a:cd:de:
                    23:f4:b0:4d:e5:d7:25:61:20:17:58:38:f7:32:43:
                    0a:1f:0d:49:42:e9:5a:a3:28:c6:5a:30:38:ae:10:
                    30:10:6f:6e:3d:a5:43:a7:dd:7d:a6:90:3b:c8:c4:
                    30:df:f9:79:ac:5c:95:c5:10:fe:98:d0:71:8c:9e:
                    20:0c:30:e3:4e:5d:9e:ab:14:cb:d1:b8:40:b2:86:
                    e4:02:0e:1e:27:d9:4c:28:db:b8:cb:27:aa:80:60:
                    e4:c3:6e:20:71:99:81:aa:e3:e5:7e:89:d1:68:93:
                    83:db:1f:97:10:30:fb:97:31:e4:3a:d9:07:36:5d:
                    f6:d5:04:21:a2:20:86:7b:a0:e2:31:60:57:16:6c:
                    38:2b:57:f4:ae:9b:c6:20:b5:f8:08:5f:4c:5b:87:
                    ea:d3:0d:30:91:9e:10:d1:0f:93:d1:3f:f5:ec:c1:
                    76:08:22:a1:58:73:21:07:c1:c6:da:e9:6f:5e:27:
                    5e:46:09:17:fa:4f:7d:9b:e0:7e:61:ff:be:c4:d6:
                    e6:84:df:99:f1:9d:d7:ae:5e:93:de:48:5a:af:9a:
                    05:8a:81:cf:1c:bd:f5:5f:48:c8:24:45:43:cc:42:
                    6e:10:6b:f1:ed:3d:f3:dd:12:86:68:41:db:10:32:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B3:2E:EE:48:74:22:11:CB:6C:92:64:78:AA:15:39:26:42:31:FD
            X509v3 Authority Key Identifier:
                keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8d:30:e2:18:3b:2b:06:18:42:38:a0:5a:0b:38:1d:5a:34:
         b7:cb:33:a8:0c:eb:e7:69:22:cf:a7:65:47:e0:26:a5:7a:17:
         0c:f9:4e:29:b5:03:b9:df:28:66:78:35:26:93:87:af:0f:63:
         42:f1:7d:2b:67:0a:6b:80:78:20:e9:63:72:f8:13:04:fe:7a:
         ef:b7:e9:59:d5:d2:da:34:9f:c0:00:27:9c:88:a2:c8:d3:d8:
         5d:54:a6:63:bf:f2:3d:68:34:69:06:a1:08:b9:8a:d6:47:bd:
         30:f0:d5:53:e9:74:c3:a1:2a:01:d3:0a:22:42:bd:2b:65:12:
         f8:b1:37:61:8c:66:56:1a:51:9e:84:83:7f:40:6d:ba:4c:ed:
         50:2c:25:48:a7:66:53:9d:31:b1:e1:74:3d:eb:91:30:c2:ca:
         99:29:be:5d:d2:fc:92:cb:aa:7b:d1:09:d2:af:85:e7:80:e1:
         b4:74:89:d6:1a:8f:d6:e4:a5:14:2f:84:b6:8e:5b:8f:88:71:
         5a:2b:03:96:f4:52:3e:e5:ed:3c:e9:57:c9:04:d6:58:a0:b3:
         76:93:fd:12:6a:f2:d7:0d:71:9f:b2:6f:ec:a7:4f:4b:80:f1:
         79:3b:77:14:19:87:dc:f1:79:5d:97:20:1b:ba:ad:64:8a:c7:
         ed:3d:fd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:01:49 2026 by rpki-client