Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File:                     e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier:          uowBF5nPhSTBpyymNoQ50xXubIbQNugkRz4mRqY/yx4=
Subject key identifier:   91:0A:30:90:CD:E5:56:08:35:AC:3B:14:C8:37:C4:D9:52:CE:49:B7
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer:       /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial:       019ED650E15632A18F1E1C54FC7EB6AE06A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number:          0FFB
Signing time:             Wed 17 Jun 2026 16:01:25 +0000
Manifest this update:     Wed 17 Jun 2026 16:01:25 +0000
Manifest next update:     Thu 18 Jun 2026 16:01:25 +0000
Files and hashes:         1: QagkOpEdpHhNgHY1gsbe4glnCSc.roa (hash: GXJi3OLC9i8a7LaOHVajb4K6NTzH/1utxRUiFymI5dw=)
                          2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: 4MfAwNvCKGvgFORi3pFNB1lMyKp14O+KgkrMF/dQVs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d6:50:e1:56:32:a1:8f:1e:1c:54:fc:7e:b6:ae:06:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
        Validity
            Not Before: Jun 17 16:01:25 2026 GMT
            Not After : Jun 18 16:01:25 2026 GMT
        Subject: CN=910a3090cde5560835ac3b14c837c4d952ce49b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0e:cd:7a:83:c4:8f:dd:ed:d8:f8:fe:5b:be:
                    5f:13:d0:67:a0:6b:57:bb:30:73:7f:16:c4:c1:94:
                    0b:ed:01:b2:8e:38:8a:e6:e2:f4:0f:85:f6:45:54:
                    e7:af:5a:2b:e7:fb:1d:b1:cb:3b:fd:2b:66:a7:b7:
                    97:84:1c:b6:13:b1:aa:b3:fa:94:a0:14:6c:5c:42:
                    6e:4e:0f:07:44:63:6a:ad:5c:6f:40:5e:32:8d:f2:
                    a2:e8:8a:67:0a:63:86:3e:f3:6d:08:bf:0a:24:39:
                    59:49:e9:3e:9b:10:14:8c:5b:ef:d9:3d:fd:4e:d5:
                    f9:c3:f6:c2:eb:02:28:c2:4d:c3:a5:31:f1:8c:6d:
                    42:7a:ec:bb:a0:bc:9b:26:a0:c8:ef:cc:f7:d5:09:
                    04:84:a6:44:8c:b5:da:6e:9f:48:f0:95:cc:f8:7a:
                    d7:29:9f:e0:bc:54:a5:02:3b:bc:65:07:e5:a4:6f:
                    01:82:2f:f7:7b:6c:b3:57:a6:39:c2:7a:4f:3e:7c:
                    5b:6c:15:94:ab:93:cd:d0:92:68:75:8d:2d:01:59:
                    a2:c4:4a:e0:1d:05:ba:f4:a3:a5:bd:07:e9:e4:aa:
                    d3:6b:7c:ca:44:fc:21:0e:2a:33:ac:cd:fe:b9:14:
                    d1:a7:e4:62:e6:10:28:0f:36:ac:cf:88:69:c7:87:
                    e8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0A:30:90:CD:E5:56:08:35:AC:3B:14:C8:37:C4:D9:52:CE:49:B7
            X509v3 Authority Key Identifier:
                keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3d:6a:69:2c:b1:23:2d:19:ee:be:fc:6a:6e:25:51:8a:5d:
         f4:1b:d0:8c:cf:52:74:1d:b2:c5:e7:75:ba:f8:95:11:e2:a7:
         7f:2e:21:bf:43:15:97:a8:ac:60:22:2d:9a:6f:dc:fe:ad:00:
         19:23:52:d3:a0:be:d3:f8:7c:db:33:8d:d9:74:9c:cb:c8:8f:
         33:6d:84:a9:2b:a4:72:19:15:bf:d7:1c:8c:04:9e:42:0e:6a:
         5b:e8:8c:e8:eb:99:2d:62:b0:0e:b9:c5:8f:ca:65:4b:56:de:
         92:12:3d:fb:31:0e:c1:fa:bf:0d:b1:b0:75:99:22:64:00:5c:
         fe:0c:ee:fa:5f:99:ea:68:57:33:f4:d6:06:7d:ca:17:ed:df:
         43:c5:94:47:50:d2:51:12:89:a6:d0:c1:2a:16:05:75:21:1d:
         e8:0b:a6:0e:8c:ab:6c:29:d8:e2:24:e3:f3:65:19:9d:a3:ab:
         38:62:a8:b6:ca:c0:3d:09:c8:51:7d:97:d6:db:0a:9b:4f:4d:
         3c:d0:19:40:54:33:91:bd:ad:45:dd:15:00:d5:b1:14:e6:2b:
         31:15:03:7f:95:42:aa:d8:1a:3c:9f:4b:16:f6:f9:9f:e5:df:
         55:b7:56:c9:82:67:4e:d2:1c:be:ae:2e:47:5d:9b:93:7b:c0:
         86:4d:ce:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 20:31:39 2026 by rpki-client