Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File:                     v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier:          M9qLXxxRjnaP35IywUrbY7w9M+9Dalv+W7lnPnYslw4=
Subject key identifier:   11:6E:4D:9F:A3:F6:D1:F2:98:19:47:E6:29:F2:25:23:04:73:BA:EC
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer:       /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial:       019EBEED6F6024B0DCAF3E5EC18CD39FF331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number:          0E09
Signing time:             Sat 13 Jun 2026 03:01:31 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:31 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:31 +0000
Files and hashes:         1: 5qCGbZj0fFzeN9z8gSaICT7yMA8.roa (hash: G66CwDSwPZ1mdj+oT5dw0nJbDcfnWDDiijDE5PcBGVI=)
                          2: W6VRxWMjY9RGYyNWUZ2Zrt5iGrQ.roa (hash: yDioc2gm4HKxpifXJms6Im9q4otOwWsYrylm+7dKp/8=)
                          3: Xts4DhBp7ZAXfoRbGSvo9y0epuw.roa (hash: +l+O+f+RgDS0P2v4v/Eiuo9qo0STO/EOfvPlMPBfz4M=)
                          4: ba0ulzzlxoKj7mmyIENd0mKkNQw.roa (hash: p7fb2fAb3ItubjjP5l3VBGCbn7g/XTc7585asMeO0R0=)
                          5: c5q6TPwm54z2LvrJGvcWXn2lLuc.roa (hash: PfHyIuw7JwnsE13vLHW24JJ5nVp6Ybi/KbqXWAmiqzc=)
                          6: ck5nzW7UcSxKWzHP2H-a3ylVN5E.roa (hash: OEda1WOM4ctfo76KkiHy1LOUWsgAZX7lWi/0FxF3rRA=)
                          7: dPJN6UsUvoT-CwaD6I6GCSDt2l8.roa (hash: Lm0/M7odPEdXSXGeFcgguujGj4w0jC2wgnprNlK79t8=)
                          8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: 8njofV8LDAZnsFWylEDKwKzREU4hq9t+Hhl6Ju08llI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:6f:60:24:b0:dc:af:3e:5e:c1:8c:d3:9f:f3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
        Validity
            Not Before: Jun 13 03:01:31 2026 GMT
            Not After : Jun 14 03:01:31 2026 GMT
        Subject: CN=116e4d9fa3f6d1f2981947e629f225230473baec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:19:1c:27:b6:c3:7b:cd:26:29:57:71:f3:
                    a5:1c:be:11:a8:04:59:6a:d0:26:5c:c6:c3:23:02:
                    1f:9c:ec:8b:d2:7f:fd:6e:a4:db:0a:5d:23:b4:b6:
                    71:52:a3:4e:1e:88:01:12:f7:c9:ae:01:08:bc:d2:
                    51:f8:9a:2d:7c:ab:54:a6:9e:c6:53:4c:f3:55:80:
                    83:59:66:df:61:28:51:80:ce:83:d9:7d:a3:77:8c:
                    5c:5a:4f:4b:11:15:53:f1:6d:9f:f5:9b:43:2f:70:
                    8c:8c:ca:b8:9b:08:3e:76:cc:34:20:8c:3d:e9:97:
                    ca:4c:8f:5e:09:b4:05:94:0d:ff:86:79:e1:83:3f:
                    52:51:95:a8:d3:41:5f:5e:c3:92:b7:81:41:17:ab:
                    ce:26:8f:64:2e:fc:5a:7f:1f:11:2d:e4:08:8e:15:
                    a3:89:1c:6f:89:1a:a2:52:b4:88:97:d4:f4:aa:f0:
                    4d:3f:52:6b:eb:25:ae:98:08:2e:f9:dd:10:04:aa:
                    24:2a:ea:6c:dc:f6:72:da:b9:27:8a:69:28:1d:10:
                    1d:0b:aa:23:c2:05:1c:ea:d4:29:cd:74:06:0f:72:
                    e2:2c:8a:6c:11:7a:65:ec:dd:f0:af:bc:5e:2f:c1:
                    4f:21:e1:28:3c:da:bb:bf:01:f0:d5:a7:08:02:5a:
                    9f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6E:4D:9F:A3:F6:D1:F2:98:19:47:E6:29:F2:25:23:04:73:BA:EC
            X509v3 Authority Key Identifier:
                keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:a6:5f:c6:73:f5:81:36:0a:23:ca:c6:c0:0e:0e:8c:f5:
         f4:fb:67:10:6f:ad:ab:77:19:1b:f8:78:7d:ee:26:0f:8e:b1:
         ca:3a:e8:3d:64:ca:42:7f:df:59:85:96:8f:03:55:90:b8:77:
         95:a1:67:88:98:f2:1e:2e:86:2e:44:8b:ed:2c:1a:ae:8c:19:
         a1:46:f9:18:00:3f:3c:dd:ac:bb:5f:a8:52:d2:68:0e:45:1c:
         94:5e:f0:8a:16:73:4d:a6:c0:cb:f6:5d:5e:f3:33:df:75:a4:
         af:3a:79:b6:67:77:0c:b7:f9:df:7b:b1:62:5b:e1:d4:2f:c8:
         38:35:ee:ad:5b:fe:8d:60:8c:e5:ee:06:70:47:d4:a2:e8:b0:
         8e:3c:25:1e:5a:af:52:c6:76:75:a6:9e:a0:2d:24:8c:d9:dd:
         41:1d:25:23:9d:f3:07:5b:19:ee:30:a2:e2:9b:6b:94:2a:b2:
         57:fd:6f:a7:2a:c6:56:2f:7e:3c:32:d5:72:3b:e4:35:b2:ee:
         8d:ca:a4:47:ce:68:5b:b9:a4:90:a4:c5:55:3d:18:af:b7:32:
         fe:c7:22:a9:2f:26:8d:70:50:53:61:f9:aa:56:4c:a4:b2:48:
         44:9a:79:32:cf:fd:c5:06:d6:60:69:4d:a8:d0:6c:f0:13:55:
         58:94:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:15:48 2026 by rpki-client