Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File:                     CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier:          /yEeizU3TrKzS08wqT2JR9ofTBm9axrz1PTWu/F80kk=
Subject key identifier:   9B:76:45:AF:BC:EF:70:6F:B0:4B:88:A3:87:4B:2A:19:7C:0E:9E:3A
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer:       /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial:       019EBEECB22613BA7B236B3C903FC451637D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 03:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:43 +0000
Files and hashes:         1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: lJjqhJeyY0hqqqG0knN0i+mqsHyApORk3GZX9f/0jmw=)
                          2: bcgCJp2ss3z06m9HQCfHzCBP0hQ.roa (hash: NnbPwHGrcdim6yrTkVQg/I67nU9XxwzvJk8QjULLx4A=)
                          3: oZr_EXsyQjW2TSmeXVYxNow-uRc.roa (hash: MMqu7TNNLRdy1w2DS9JU9E6roUikurSMo3WnZQdO9kU=)
                          4: zd8dlXTmCT-0m9TffsLEUAvTJYs.roa (hash: PkfGxsX99XUZA8APj8L5438qH49FAld+9Ynqz6Rjm9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:b2:26:13:ba:7b:23:6b:3c:90:3f:c4:51:63:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
        Validity
            Not Before: Jun 13 03:00:43 2026 GMT
            Not After : Jun 14 03:00:43 2026 GMT
        Subject: CN=9b7645afbcef706fb04b88a3874b2a197c0e9e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:71:7f:af:37:8b:71:97:34:53:58:1c:a2:e7:
                    05:d2:6b:75:28:16:de:b3:af:d0:40:68:dc:e8:a8:
                    da:dd:78:91:0d:d8:17:22:a4:75:d0:f6:9c:08:cb:
                    c5:af:47:81:fc:3c:8f:76:9a:79:5c:21:12:41:b9:
                    dc:05:46:c4:46:13:ff:3d:91:dc:de:e5:da:74:bc:
                    fb:86:c9:5f:d0:49:9b:bd:ce:5a:00:87:6e:c8:fd:
                    0e:4e:50:56:61:ef:10:e8:ed:80:dc:04:ab:41:9e:
                    53:fa:70:8a:1d:c3:46:6f:73:f0:21:d4:c3:b2:dd:
                    ae:b2:0d:d5:1f:24:f1:1c:22:a9:36:3a:dc:1c:e1:
                    dd:22:8e:91:94:d0:a3:91:60:91:b2:2f:eb:d9:5c:
                    79:1d:45:2d:e4:91:2d:00:ff:5a:85:2a:02:e4:e9:
                    3e:e2:47:1f:7c:b3:e4:a4:cc:59:cf:0a:81:f3:5b:
                    98:00:a6:2e:64:3b:93:93:a5:53:cd:4c:d1:c4:a0:
                    c9:3c:f6:77:ee:cf:6d:7b:cf:42:b1:83:d9:f9:a3:
                    f8:84:5a:5a:08:00:6f:77:ae:c6:dd:fa:84:a6:c8:
                    19:cd:0f:78:5c:66:97:6f:9c:df:a9:6b:5e:6c:42:
                    9d:87:66:ed:bd:02:57:1c:dd:a5:75:ce:ab:4b:ec:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:76:45:AF:BC:EF:70:6F:B0:4B:88:A3:87:4B:2A:19:7C:0E:9E:3A
            X509v3 Authority Key Identifier:
                keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:89:f0:f3:e6:c3:62:ea:90:37:4b:92:5f:62:98:2e:53:54:
         c8:42:43:43:db:4b:93:30:3e:91:65:5e:f3:0a:70:79:2c:03:
         9d:ab:6a:6a:b4:a8:19:9f:91:76:cc:ac:1f:52:a5:72:94:46:
         d3:4a:aa:51:15:1a:10:97:e3:d1:93:57:be:4f:bb:41:8a:63:
         6d:a6:84:99:18:2b:69:a5:d2:c0:e6:71:b7:aa:b9:ba:97:fb:
         27:58:02:5e:40:ff:20:8c:6f:54:21:ca:b7:82:4c:8f:9c:0a:
         fc:5f:af:19:46:6f:f6:c8:2a:23:67:f9:7b:cf:32:b4:b6:d4:
         1d:f1:77:9a:83:63:dd:49:08:be:5f:07:6b:03:af:a3:4b:cc:
         8c:d9:85:7d:3a:7f:5f:dd:68:ec:25:63:6c:48:1b:38:7b:11:
         1d:38:d6:c9:eb:01:1b:41:e4:97:6d:70:af:d4:2e:46:9f:eb:
         50:02:d9:2f:ab:68:96:c4:82:f6:23:64:ae:5e:cf:c5:06:35:
         69:5c:3f:ec:f1:a5:c0:93:3b:c8:6d:bc:40:0d:64:d3:b0:0e:
         bc:25:2c:5a:a0:3c:bc:0c:cf:f8:dd:c2:dd:5c:4b:23:5a:1e:
         bb:c9:85:d6:ba:36:39:d4:0e:40:2d:b5:e5:ec:e1:ac:7f:1e:
         82:9c:c3:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7LImE7p7I2s8kD/EUWN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YjRiZjM3ZjM5ZWVjNjI5ODJjNGI2MzcwOWZhYjVkMTQ2
YzczNzMwHhcNMjYwNjEzMDMwMDQzWhcNMjYwNjE0MDMwMDQzWjAzMTEwLwYDVQQD
Eyg5Yjc2NDVhZmJjZWY3MDZmYjA0Yjg4YTM4NzRiMmExOTdjMGU5ZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XF/rzeLcZc0U1gcoucF0mt1KBbe
s6/QQGjc6Kja3XiRDdgXIqR10PacCMvFr0eB/DyPdpp5XCESQbncBUbERhP/PZHc
3uXadLz7hslf0Embvc5aAIduyP0OTlBWYe8Q6O2A3ASrQZ5T+nCKHcNGb3PwIdTD
st2usg3VHyTxHCKpNjrcHOHdIo6RlNCjkWCRsi/r2Vx5HUUt5JEtAP9ahSoC5Ok+
4kcffLPkpMxZzwqB81uYAKYuZDuTk6VTzUzRxKDJPPZ37s9te89CsYPZ+aP4hFpa
CABvd67G3fqEpsgZzQ94XGaXb5zfqWtebEKdh2btvQJXHN2ldc6rS+z5sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt2Ra+873BvsEuIo4dLKhl8Dp46MB8GA1UdIwQY
MBaAFAm0vzfznuximCxLY3Cfq10UbHNzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMt
MjRlNmMwZDRmYWQ3LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8zNzE2ZDktNDczZi00YWYzLWExZDMtMjRlNmMwZDRmYWQ3
LzEvQ2JTX05fT2U3R0tZTEV0amNKLXJYUlJzYzNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEInw8+bD
YuqQN0uSX2KYLlNUyEJDQ9tLkzA+kWVe8wpweSwDnatqarSoGZ+RdsysH1KlcpRG
00qqURUaEJfj0ZNXvk+7QYpjbaaEmRgraaXSwOZxt6q5upf7J1gCXkD/IIxvVCHK
t4JMj5wK/F+vGUZv9sgqI2f5e88ytLbUHfF3moNj3UkIvl8HawOvo0vMjNmFfTp/
X91o7CVjbEgbOHsRHTjWyesBG0Hkl21wr9QuRp/rUALZL6tolsSC9iNkrl7PxQY1
aVw/7PGlwJM7yG28QA1k07AOvCUsWqA8vAzP+N3C3VxLI1oeu8mF1ro2OdQOQC21
5ezhrH8egpzDAw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:18 2026 by rpki-client