Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File:                     Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier:          7SN8wKFcBQoYNNAWMZmdJnWLa6dqNTXTDQc3V1jG/rk=
Subject key identifier:   58:72:DF:90:64:74:8F:E2:E8:7D:A3:9F:5B:18:92:8D:35:DD:6B:49
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer:       /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial:       019EC03653DCB515700D64A2287DD168DE20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number:          0768
Signing time:             Sat 13 Jun 2026 09:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:46 +0000
Files and hashes:         1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: 6jhI+H0i1ZD2nM0GQiqO8oiC9w+Wnyd4+LbknuYOEVY=)
                          2: lmGJr61Mn429__yMZ50UIOtKDTo.roa (hash: FZAxYj1+7XK5ZM4/SMzLX2AW7UQL0exFYNBa3AxvrbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:53:dc:b5:15:70:0d:64:a2:28:7d:d1:68:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
        Validity
            Not Before: Jun 13 09:00:46 2026 GMT
            Not After : Jun 14 09:00:46 2026 GMT
        Subject: CN=5872df9064748fe2e87da39f5b18928d35dd6b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:a5:27:6a:2d:89:1c:b4:b5:e5:10:34:8d:
                    69:0f:5d:bc:27:4e:b7:16:85:32:59:6a:a9:a1:49:
                    13:f1:77:c1:99:2a:22:52:23:09:f3:d7:70:41:a3:
                    e5:ac:79:7d:80:a7:7d:6d:6a:87:7a:a7:cd:4c:af:
                    16:b2:ce:24:40:af:9e:4f:7f:89:49:9e:74:e7:f7:
                    68:3b:da:27:30:98:0d:a0:5e:c3:21:c1:41:70:e8:
                    d8:53:1f:8c:89:50:ee:30:f8:ab:be:b7:d7:9b:16:
                    c4:40:e8:9e:f6:0a:53:74:9a:71:3e:71:9b:84:76:
                    3a:0d:b4:7a:09:14:8a:32:65:41:b9:a3:37:28:c8:
                    87:1e:90:41:e9:10:81:d7:68:63:b4:b5:e3:85:ed:
                    f2:e9:2d:2b:41:ed:51:08:b1:9f:41:e1:0c:00:38:
                    46:a1:61:c8:75:b7:1c:d6:cd:a3:6f:74:d0:81:e1:
                    0b:41:7f:ca:23:5d:80:48:eb:95:87:20:b4:43:42:
                    8d:50:03:69:e2:18:50:ca:b0:a2:ed:de:44:24:67:
                    b0:45:f5:a9:70:96:0e:b9:83:15:a5:cc:9e:c6:2a:
                    e1:99:86:aa:5a:32:1e:7e:fb:e7:45:ad:b9:49:1b:
                    9b:6b:ba:f8:01:a6:f5:46:c6:8c:27:2c:1c:d8:52:
                    96:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:72:DF:90:64:74:8F:E2:E8:7D:A3:9F:5B:18:92:8D:35:DD:6B:49
            X509v3 Authority Key Identifier:
                keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:20:ac:34:d3:b3:b1:bf:7d:ff:ef:5a:b8:73:a3:a0:81:fa:
         f3:12:31:5f:a9:89:f5:96:0c:9b:9c:47:0e:86:1e:27:a9:4a:
         11:ba:e8:ab:33:f9:4d:f0:b7:12:0a:dd:3e:c6:e0:c4:df:90:
         f9:14:ca:1a:73:a6:55:13:f1:5b:89:56:3c:9c:56:ef:a3:8d:
         ce:b4:8c:0b:36:70:39:5e:73:ae:79:29:7d:84:11:c3:f7:b8:
         6c:fb:24:7b:89:1f:64:e0:b8:47:0e:da:3c:51:08:86:84:1f:
         3b:95:33:ce:fd:65:9a:89:bc:41:45:c3:ce:5a:cc:92:13:73:
         d3:c9:55:fe:09:89:47:5d:af:d6:8f:16:c3:c7:f9:3e:6e:b7:
         3e:1f:0b:36:72:01:a1:6b:c4:6b:c1:d3:75:d2:73:fa:de:8c:
         75:e7:89:a2:4c:0b:ff:86:e3:f6:3c:78:e4:62:5e:52:67:d1:
         01:78:4d:5e:0a:2b:65:7f:06:92:09:36:39:9d:e7:ec:70:4b:
         4f:db:80:44:b3:33:b7:f2:07:e0:9f:03:93:3c:53:7c:80:be:
         ec:98:62:d1:b4:e6:64:8c:5a:52:fa:e3:c4:3b:92:90:f8:f1:
         32:34:ad:7a:37:3c:98:65:72:dc:3b:52:35:87:f3:bd:a9:7a:
         f3:43:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:39:31 2026 by rpki-client