Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
File:                     7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft (raw, json)
Hash identifier:          ywHY48+GcsMj9sH3+L+Ma5EABgGNikW1i7WRXD9rN5o=
Subject key identifier:   3E:66:7E:C6:77:F5:2A:94:5F:75:13:1F:D4:FF:DE:CB:93:95:F6:97
Authority key identifier: EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52
Certificate issuer:       /CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
Certificate serial:       019EC1495D6E7579B187610A92ED2E9FE1F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
Manifest number:          8A
Signing time:             Sat 13 Jun 2026 14:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:11 +0000
Files and hashes:         1: 7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl (hash: xxn92ADq7BJjikWw+0Q0HK0QmCZbkF2Tg7yMv7pRPJQ=)
                          2: PaSCSViEAOmnkxIlKs2oejLqNDc.roa (hash: C95nSsqwtFhFODAGdM0T/xTl1c5zR83Twu0Y8s23u5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:5d:6e:75:79:b1:87:61:0a:92:ed:2e:9f:e1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece1b7bdc9f570ec58359995dea4f739fcfc0652
        Validity
            Not Before: Jun 13 14:01:11 2026 GMT
            Not After : Jun 14 14:01:11 2026 GMT
        Subject: CN=3e667ec677f52a945f75131fd4ffdecb9395f697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:38:9e:c0:b3:05:f6:0b:18:a4:0e:d4:1b:2d:
                    9b:3f:85:36:b4:93:26:41:59:98:08:11:fc:22:95:
                    36:4c:e6:00:c6:e1:5d:d5:9d:a4:32:a3:c1:7c:63:
                    0f:c1:b9:99:4d:8a:a3:18:58:65:ed:ac:e4:ca:39:
                    36:45:57:b5:26:63:9e:a8:7b:f2:86:55:d1:94:3a:
                    af:3a:2d:cb:9b:f5:4c:13:d5:87:00:a3:93:e6:60:
                    69:ff:d5:27:48:59:85:0b:ba:44:60:f8:84:8a:e5:
                    9f:e7:c6:1f:80:b6:f8:f0:6c:ed:f4:d6:a8:3d:00:
                    ab:98:b3:1e:13:9f:50:3e:b8:38:54:e9:18:dc:68:
                    55:65:b9:12:8b:2d:ff:7e:cc:61:0d:1e:ca:f0:bf:
                    90:d8:d0:ff:85:1f:c8:53:c6:aa:7d:a5:a5:fd:bb:
                    31:d4:45:35:66:f1:3a:60:46:3a:5c:a5:67:8f:eb:
                    fa:0f:ca:95:d9:05:d0:c5:ea:64:ae:63:39:75:3d:
                    f3:be:fc:28:e4:dc:26:24:e6:f8:ae:5a:64:86:d2:
                    80:ff:9a:6d:c2:53:93:b9:59:14:fb:cb:a9:07:5a:
                    31:b8:f1:fa:0b:0c:5b:9d:be:73:5f:1d:4d:34:f9:
                    f1:7a:45:44:8a:2e:38:9c:ae:cb:99:6f:85:4f:4e:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:66:7E:C6:77:F5:2A:94:5F:75:13:1F:D4:FF:DE:CB:93:95:F6:97
            X509v3 Authority Key Identifier:
                keyid:EC:E1:B7:BD:C9:F5:70:EC:58:35:99:95:DE:A4:F7:39:FC:FC:06:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/961369-8463-48d7-928b-cd88e6a25752/1/7OG3vcn1cOxYNZmV3qT3Ofz8BlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:f3:f9:90:66:b0:ff:6a:26:53:2d:fe:98:03:28:9b:03:ee:
         93:10:03:99:b8:39:c5:05:c4:cc:cc:8c:43:7b:a7:c2:7e:cf:
         b6:df:c0:5d:9c:d7:df:e0:2f:8f:40:af:b0:24:dc:0a:78:21:
         4a:3d:23:9f:29:0e:8c:43:c1:ef:66:db:45:6d:9d:12:f1:47:
         ea:4e:b3:6b:c6:e7:da:1f:72:8e:c5:3b:aa:a4:10:da:c5:db:
         28:38:5f:b1:53:95:a6:4d:be:64:d8:d9:be:3b:3e:dc:26:30:
         c2:58:d5:e2:e1:e5:ff:ed:b7:59:de:c1:df:16:bf:a7:d8:c8:
         39:d6:81:67:15:86:89:f3:e3:ff:a4:6f:9f:93:f8:18:58:f3:
         a8:67:2e:06:9d:f2:62:54:d7:e9:1f:91:61:88:e2:77:86:2b:
         c3:f7:10:41:ed:00:54:5a:91:5a:27:e3:5a:95:ba:c7:3b:df:
         c4:b8:15:c4:0f:b6:61:8f:d7:4c:00:31:52:f8:ef:7c:bb:77:
         94:2d:df:52:64:16:84:4d:44:b5:e9:86:21:c4:a4:ae:da:8b:
         88:26:08:7d:04:bb:09:c7:23:10:13:d6:4f:fc:bc:a3:5b:33:
         a7:07:64:15:54:9e:40:99:ef:17:d0:50:cb:74:32:84:28:44:
         b1:b2:cd:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:29:07 2026 by rpki-client