Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
File:                     ilO0ULfn3BotU89ppeuJpWXTkTo.mft (raw, json)
Hash identifier:          TNjL1F8MJA1iaiJP2tChZ9hlWpcIYjqfLmXXAfLw+1M=
Subject key identifier:   F0:2D:80:4D:54:C7:4A:08:79:40:37:5D:8A:DF:B1:0C:3C:4C:75:C4
Authority key identifier: 8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A
Certificate issuer:       /CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
Certificate serial:       019EC18009EC2FE620BCEA51301FC9DCC429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
Manifest number:          02F9
Signing time:             Sat 13 Jun 2026 15:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:54 +0000
Files and hashes:         1: _UEWpOo-pCf8CHkjr-vl8NQNBGs.roa (hash: IR3FkIPCV8kC9J8tgW1IORlWK++PlHql1pIWXK2QksE=)
                          2: ilO0ULfn3BotU89ppeuJpWXTkTo.crl (hash: oRP32JgZKEacRUZHKN+j6YdlOEO4K93sqCrgOODhcAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:09:ec:2f:e6:20:bc:ea:51:30:1f:c9:dc:c4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a53b450b7e7dc1a2d53cf69a5eb89a565d3913a
        Validity
            Not Before: Jun 13 15:00:54 2026 GMT
            Not After : Jun 14 15:00:54 2026 GMT
        Subject: CN=f02d804d54c74a087940375d8adfb10c3c4c75c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:38:09:3f:c2:db:ad:4e:91:4a:41:b4:e5:
                    49:c3:d0:55:52:7b:e4:81:36:6b:63:5c:53:63:f8:
                    9c:9e:a4:25:21:f6:2f:31:98:bb:33:50:e8:3a:19:
                    da:44:a0:0f:ce:87:70:2a:79:61:de:6c:35:82:86:
                    e1:88:93:65:89:ab:e1:02:de:5e:02:28:ce:73:8d:
                    ec:6c:15:e4:fc:ef:c6:a5:44:a8:4f:e7:05:30:8c:
                    71:bf:b1:8c:ef:2d:af:85:72:09:23:35:6f:71:f3:
                    dd:76:8c:08:83:4f:94:4f:54:0b:a7:eb:85:9b:68:
                    23:2d:7c:b0:cf:84:fa:82:ae:80:26:31:75:8a:89:
                    c7:d7:74:68:d1:c5:47:1e:f4:0d:62:6c:0b:4e:b9:
                    10:c0:71:d3:b8:87:0c:25:be:74:7e:34:55:88:44:
                    ea:a2:28:9a:71:8d:4a:66:9e:10:bf:65:e7:15:df:
                    71:1a:6c:69:77:1b:a1:2d:73:f8:10:62:55:d9:d1:
                    9e:3c:f3:e1:d6:63:dc:8b:f0:a6:b2:5b:bc:47:06:
                    62:2f:b9:85:da:e3:24:57:a2:9f:2e:69:8b:94:bc:
                    79:86:e4:05:c1:bf:29:da:df:af:28:45:89:71:fe:
                    9a:6f:bd:29:fd:5e:e4:31:97:d1:7d:a5:2e:33:84:
                    27:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:80:4D:54:C7:4A:08:79:40:37:5D:8A:DF:B1:0C:3C:4C:75:C4
            X509v3 Authority Key Identifier:
                keyid:8A:53:B4:50:B7:E7:DC:1A:2D:53:CF:69:A5:EB:89:A5:65:D3:91:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilO0ULfn3BotU89ppeuJpWXTkTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/19fe3b-0993-4178-8e94-9f67386249c2/1/ilO0ULfn3BotU89ppeuJpWXTkTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:6a:23:fd:96:49:c6:7f:e0:51:04:f5:21:7c:6b:89:cd:
         5a:53:e7:ea:80:9a:5a:4f:2b:5d:7f:23:77:af:11:ee:91:9e:
         4d:38:06:8b:ab:df:88:cc:bf:69:e6:76:be:43:e5:47:5e:e8:
         7d:50:79:a6:cd:6d:7d:1a:c8:40:56:49:dc:5f:18:67:2c:92:
         35:34:d4:b9:10:29:22:a5:32:d4:96:3f:bf:bc:b5:54:e5:90:
         f4:37:80:f3:96:08:79:6c:aa:40:8f:c6:76:52:a4:e2:ad:93:
         ec:ce:ce:83:c9:a4:42:36:71:0e:4b:6e:fd:a9:76:ef:0c:a9:
         86:56:25:1c:b7:d0:01:c8:a4:9c:4d:64:a9:09:c7:ef:fa:fb:
         7c:f6:52:be:65:4d:10:1d:d6:f8:79:06:de:5a:66:5e:6d:7f:
         17:eb:f3:77:6d:74:51:83:91:1d:d6:e2:a5:f7:45:63:f2:85:
         bf:0c:34:28:5a:6f:c5:44:e2:0f:c8:20:e4:e0:98:5d:33:da:
         9d:ff:e5:79:57:25:9a:c5:fb:4c:11:bc:03:aa:9b:47:fc:31:
         ba:fa:77:41:5d:e2:80:f1:32:88:f7:28:16:5b:76:9e:e2:01:
         2b:94:5a:f7:01:15:af:be:8d:ee:ad:d5:c2:ca:40:34:53:9f:
         a8:c3:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:36 2026 by rpki-client