Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File:                     e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier:          xffwAHoO1yaOYXTUx8sto+tye28TY323iGMDxSGImcQ=
Subject key identifier:   60:43:ED:BC:AB:1F:56:44:D3:44:5B:BD:74:42:3F:A6:F2:3A:94:70
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer:       /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial:       019EBDD9AFB9539F30669AFAC02691DC1E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number:          0813
Signing time:             Fri 12 Jun 2026 22:00:20 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:20 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:20 +0000
Files and hashes:         1: ISogQh6QwDS4WqmRWDRDC0aPBY4.roa (hash: 25nzQ6cM0A1+BLJDqBPIcNwyNh5oOrug8KrgFXgei7A=)
                          2: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: wqzbKDU62h2Q/7xbuxFinvxGsqb6WCk54ZVrxCW1xrE=)
                          3: g9ua57B68Th2qHv-LwwTCs4_D70.roa (hash: ixgw1P9zw7Z7z4MdMiYSxnHOT3jBJhnJXOHzvec5R28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:af:b9:53:9f:30:66:9a:fa:c0:26:91:dc:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
        Validity
            Not Before: Jun 12 22:00:20 2026 GMT
            Not After : Jun 13 22:00:20 2026 GMT
        Subject: CN=6043edbcab1f5644d3445bbd74423fa6f23a9470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:64:ef:77:61:3f:59:92:e5:9e:b1:89:d6:
                    b4:fa:30:fc:7c:25:54:a6:e0:54:2b:98:3a:33:da:
                    fb:71:24:ce:ee:6e:57:30:4d:b7:69:c2:7c:63:c1:
                    8f:34:e2:67:62:63:e5:fa:2d:88:9c:84:9b:05:33:
                    d2:e8:ae:e3:41:a8:fc:ac:eb:e4:ca:1c:b8:79:94:
                    98:28:28:08:5d:15:2a:a1:b4:b7:81:73:ef:7a:2f:
                    97:92:3f:78:d7:9b:1e:10:f8:e4:f7:25:15:f1:33:
                    88:11:f9:2c:cc:e8:15:58:f6:d6:97:d3:1d:17:5e:
                    93:b2:c5:f3:4a:70:b3:be:cf:c9:70:22:dc:de:58:
                    0d:8e:e6:38:a1:04:be:25:34:64:47:1c:90:88:d9:
                    0a:4e:5d:61:25:d6:36:06:fa:ba:a0:58:3e:ec:97:
                    d4:cd:26:44:5c:56:8f:45:15:92:63:09:ea:9a:31:
                    be:3c:41:ad:d5:46:ae:c2:12:57:cb:a8:18:ec:8c:
                    f6:c6:47:36:98:14:b0:95:a2:13:46:b6:83:fd:80:
                    e0:45:40:23:db:fd:7a:75:77:2d:0b:c8:8b:ee:92:
                    28:61:23:2c:57:cf:c7:16:70:2f:96:3f:03:e8:33:
                    2e:13:9e:c7:d3:c2:f3:35:0e:57:b2:c9:29:24:8c:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:43:ED:BC:AB:1F:56:44:D3:44:5B:BD:74:42:3F:A6:F2:3A:94:70
            X509v3 Authority Key Identifier:
                keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:13:87:27:fd:b1:a6:3b:f1:8f:7f:ea:02:23:1e:0a:76:
         71:48:14:91:09:cc:d5:48:75:fa:39:cc:e8:67:01:9f:a1:34:
         6c:18:c4:e1:7a:9e:a5:df:26:2a:25:f3:d8:ea:ae:09:95:62:
         19:e6:f0:63:60:2a:fd:3a:d3:c4:cf:95:7b:54:d6:44:bc:9c:
         d5:04:16:a1:c1:8a:8d:3a:a2:ba:86:d9:c7:51:a6:b1:0d:ea:
         78:c0:e8:2a:8e:ae:2e:67:f7:0c:78:30:50:53:79:d4:8c:60:
         26:b4:09:b9:db:0f:70:6c:6a:8c:78:ab:f4:6c:4b:9e:d9:4b:
         71:e4:63:ed:b1:e0:e7:17:1a:19:2a:0e:38:f2:95:46:da:b5:
         fb:d1:02:64:1a:a9:63:35:74:07:7b:20:24:aa:4c:d4:6b:b5:
         8d:e4:ca:d0:2f:48:16:37:52:83:da:5a:d8:de:1b:3b:66:d5:
         b2:9a:34:2d:08:ba:b9:0d:37:bc:7a:15:e3:8e:05:27:b6:2d:
         83:14:5d:05:06:33:80:0f:f2:63:2f:a3:b8:e9:8b:eb:60:96:
         ce:25:dc:0c:12:a0:4d:68:d3:c8:b6:1d:9c:25:d9:01:10:67:
         8f:b7:13:9f:c3:51:c8:43:c6:7d:27:17:b0:46:56:a5:81:b8:
         20:55:60:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:10 2026 by rpki-client