Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File:                     234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier:          5pZAfyf8ZjITXSw6bB0Mrzk2N1WO4PJ3lc1Nk/mUI4c=
Subject key identifier:   5E:B5:0A:8A:1B:D9:38:99:4E:5B:5D:AB:DA:31:1F:84:D3:6D:9F:F6
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer:       /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial:       019EBF23E51C63ADA215F644783D9BD7847F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number:          06BB
Signing time:             Sat 13 Jun 2026 04:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:01 +0000
Files and hashes:         1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: XwsTPMdFTFYd3MRMBiW3S24CPXrRmWtIGDIR/Fyrcfs=)
                          2: NnFd_WEgwW5v_Q4XnzqgHc73AUU.roa (hash: qPnnpRuZWwT2D2tSbOOn+WEnPUGhmP0A1leKPzarn0s=)
                          3: aJGaWlz_CFVJ2Nm0gy1yUmZTtS0.roa (hash: vHZJo0+5vZ38Mb8o++2KXKDyHid1BpZNVh84OdWoQD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:e5:1c:63:ad:a2:15:f6:44:78:3d:9b:d7:84:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
        Validity
            Not Before: Jun 13 04:01:01 2026 GMT
            Not After : Jun 14 04:01:01 2026 GMT
        Subject: CN=5eb50a8a1bd938994e5b5dabda311f84d36d9ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:15:dc:3e:0b:e0:72:95:34:6c:2b:75:60:
                    2e:76:e6:8a:de:17:59:b1:12:49:8c:1f:bd:ea:ab:
                    2d:47:ab:c5:9a:6a:d2:d9:15:72:55:a5:5e:49:a4:
                    af:ca:9d:36:f8:aa:28:f1:23:b5:a1:4e:72:ce:c8:
                    6e:86:de:1d:28:08:c0:4c:14:8a:58:15:8b:41:59:
                    0d:1f:31:f4:64:c5:3b:10:d6:35:52:d8:0f:28:a2:
                    2c:c9:25:6f:71:17:56:70:72:76:59:5a:3b:15:65:
                    ea:87:07:fa:1f:a9:f4:9e:00:74:fa:40:54:17:8b:
                    81:fb:cc:9c:7e:ee:5a:96:72:a2:3b:cb:e0:56:26:
                    6e:b1:19:16:6f:8c:d8:1b:a5:ef:b5:ed:26:ae:78:
                    0c:bd:6a:6d:3f:ab:1c:dd:d8:9b:f0:4a:4f:a6:d8:
                    69:82:2d:82:31:f6:49:9d:01:31:67:69:c3:b2:c2:
                    84:b8:bb:08:9b:1e:6c:86:0d:4f:7f:79:64:55:e3:
                    8e:35:32:e1:88:57:70:95:65:46:cc:68:b0:51:b1:
                    33:60:d5:bb:7c:f7:2f:82:39:ee:ac:54:f5:fc:b3:
                    9d:91:b1:c1:bd:09:36:e8:11:01:f6:91:43:03:2e:
                    90:e3:0a:36:46:c2:3c:80:19:70:64:8d:de:24:10:
                    d9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B5:0A:8A:1B:D9:38:99:4E:5B:5D:AB:DA:31:1F:84:D3:6D:9F:F6
            X509v3 Authority Key Identifier:
                keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cd:9c:35:31:78:ee:ef:fa:68:c5:ef:d6:4c:a5:06:d3:c1:
         d9:73:b7:2e:56:78:30:05:f4:f0:2c:23:39:5c:19:a1:0a:02:
         01:b7:be:b8:c9:c8:c5:41:f7:b8:90:73:87:ba:40:a3:dc:d6:
         ac:46:98:08:42:8d:c8:ae:8a:38:7f:ea:f5:0e:63:96:f9:20:
         22:44:79:6d:8e:0a:d9:96:0d:f9:90:14:0a:15:0e:b1:01:eb:
         bc:e3:ee:6b:95:d4:bb:ff:16:7a:e0:c9:3d:e0:b0:be:5e:92:
         48:c9:8c:68:0b:95:b6:5d:89:af:11:c1:b2:66:7c:6f:fe:b2:
         82:74:d7:91:bd:c2:7e:e0:71:41:04:b7:25:f9:d4:ff:39:e3:
         60:9f:d8:4e:e1:c2:b7:75:aa:cc:d2:cc:2a:bb:e2:fc:36:21:
         f3:8a:fb:07:7d:05:47:9c:3a:a3:26:51:e8:c9:3b:bf:ad:0b:
         8f:a9:7e:e9:a6:b6:c8:0b:56:44:15:fe:1d:50:f8:b3:75:05:
         f2:cd:4d:f8:8d:c6:a3:05:d1:4b:30:23:d9:40:08:da:26:5a:
         ce:4a:f9:b7:c8:77:96:da:73:94:37:9f:86:99:8c:73:4a:d9:
         64:24:eb:d7:e0:28:39:64:23:19:74:a2:68:7f:fd:4d:8a:81:
         34:74:27:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:21 2026 by rpki-client