Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          v6z1tJYZp+yNBwomFGD3d6UI8N5OOqhE18NM8ZhGyV0=
Subject key identifier:   F8:DE:3C:28:F3:2B:CC:E0:0D:CE:54:CC:53:41:FF:61:0C:4A:AE:51
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       019EC1B6CAFE1A42D8DA4A31D912BC33673A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          1889
Signing time:             Sat 13 Jun 2026 16:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:42 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: ZVbzI6pMk7q7wNnmmZUeDzJxJoBhebeUoQzfXmLdVa0=)
                          2: TdxQhWG2wtulK5Vb9nCA77o4y_I.roa (hash: DQ1/x26NNKj14C8KsFmS1PfWzVr7cd7MQfy8SdkpOYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:ca:fe:1a:42:d8:da:4a:31:d9:12:bc:33:67:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: Jun 13 16:00:42 2026 GMT
            Not After : Jun 14 16:00:42 2026 GMT
        Subject: CN=f8de3c28f32bcce00dce54cc5341ff610c4aae51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:b9:97:d0:ab:49:09:ec:c4:9d:f4:03:90:
                    99:ff:e5:77:03:2d:89:bd:18:af:cd:2e:4d:29:9c:
                    19:14:da:fd:62:47:bb:78:7d:92:8c:f6:5d:7f:f7:
                    bc:58:60:05:14:d3:3b:c9:19:7b:72:89:81:40:43:
                    05:a1:a4:dd:36:de:88:74:6e:10:a2:00:87:0f:76:
                    2e:80:9d:67:66:cc:98:59:9a:21:1f:4b:ed:6a:a0:
                    17:f3:e0:26:f2:af:cc:c0:c5:6d:97:c2:c1:50:34:
                    8a:39:32:7f:a8:a7:bb:35:7f:50:b0:60:7a:44:a5:
                    b8:8e:6b:fe:b6:85:7c:58:13:a0:0c:78:5a:63:6f:
                    d7:87:3e:64:1a:16:0f:70:fa:02:74:18:4b:2a:f4:
                    3a:78:c7:af:91:e3:8d:3c:3f:7e:c0:97:41:28:ab:
                    10:ec:91:d1:52:9d:71:08:f4:ce:1c:78:93:a2:a6:
                    83:22:31:dc:1d:6f:b1:2e:a1:2a:37:8d:01:67:7c:
                    87:f0:ca:bf:69:c8:11:a6:cf:07:c0:bd:40:43:16:
                    1f:7a:ba:1e:5e:3f:83:cd:57:98:1c:6c:3e:52:ea:
                    c0:05:52:e1:7a:db:4a:20:ab:f7:25:7a:b9:56:05:
                    a9:71:0a:a3:a0:42:ed:84:06:a6:63:d8:9d:0b:58:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DE:3C:28:F3:2B:CC:E0:0D:CE:54:CC:53:41:FF:61:0C:4A:AE:51
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:81:b3:87:48:62:b2:ea:8d:4d:22:b8:7b:c8:85:bc:76:
         69:13:6d:a3:92:58:77:53:1e:69:83:42:d7:98:32:49:7a:52:
         0a:c0:20:1c:06:23:5e:c0:ea:b4:4e:9a:2e:77:a7:fd:70:05:
         82:01:58:b4:03:e0:d2:10:dd:57:ea:15:e5:0e:f3:22:84:92:
         fc:ec:21:50:22:64:48:35:18:ed:b4:63:40:4e:e7:ac:fa:8a:
         6c:ce:14:57:20:1a:61:30:1e:f3:73:de:d0:3a:12:c1:33:4c:
         97:3d:04:d8:52:de:94:5c:33:f5:9c:7e:58:93:7c:e2:89:0b:
         6d:a8:99:32:aa:3a:2b:b5:bd:43:64:d0:4f:14:42:78:ec:2a:
         41:63:46:25:74:c4:d2:18:f9:5f:2c:eb:41:79:38:31:36:b1:
         27:77:b9:f2:3f:23:aa:ac:f8:a8:1a:8d:f5:27:54:41:73:e5:
         b2:32:fa:66:f5:fc:33:0b:31:aa:e3:39:ee:a3:2b:16:c4:1a:
         92:4d:c9:2f:90:93:d4:7d:8e:50:69:09:85:af:86:89:0a:56:
         0a:46:46:58:37:c5:97:94:01:05:72:bd:24:eb:f3:1d:4a:3c:
         ec:7c:96:bc:9a:77:3e:99:ca:fd:49:04:d5:0b:0a:33:4c:5a:
         7d:82:32:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:58:18 2026 by rpki-client