Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File:                     sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier:          YX1PQxqQTjg15AdhxEbrKSn2XGd216agXmI0Uqdm4/A=
Subject key identifier:   3A:63:74:69:23:38:5D:84:AC:D2:E8:2B:4D:A6:13:C9:3B:5D:64:08
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer:       /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial:       019E205A6114270C379E84F30F96945F6CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number:          0C99
Signing time:             Wed 13 May 2026 08:00:54 +0000
Manifest this update:     Wed 13 May 2026 08:00:54 +0000
Manifest next update:     Thu 14 May 2026 08:00:54 +0000
Files and hashes:         1: _by7AscKsdigQ-BwL976HgZ5JQ8.roa (hash: wziiFvH1qv+pWQ/UztPiXiVxbkfYgEe33kjW55/pvyo=)
                          2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: 6Wx5ujPD840s4sbKbbusxJiHKi3ABsd9ACLtreytL5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:61:14:27:0c:37:9e:84:f3:0f:96:94:5f:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
        Validity
            Not Before: May 13 08:00:54 2026 GMT
            Not After : May 14 08:00:54 2026 GMT
        Subject: CN=3a63746923385d84acd2e82b4da613c93b5d6408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:0e:42:84:b8:cb:8f:de:a0:df:69:39:76:
                    84:27:f8:a2:67:3e:62:5a:3c:86:06:8a:51:8c:78:
                    95:04:a2:e7:f4:03:e1:94:17:06:b3:47:cc:8c:d9:
                    80:f6:82:60:f4:b3:71:9a:95:ce:57:7a:72:83:e7:
                    6b:d1:53:34:01:ac:68:0c:4e:e5:25:f9:8b:63:8c:
                    97:d2:2c:72:2d:20:36:fc:c2:9c:59:a0:42:74:78:
                    ab:0e:d7:90:c0:9e:71:90:05:44:b3:19:29:bb:e4:
                    78:ee:33:24:54:30:a9:fc:6e:12:78:78:7e:67:cd:
                    6c:20:7a:40:8a:8e:6b:0e:0f:10:34:f7:11:84:46:
                    27:6e:b3:e7:09:65:f6:38:57:e0:50:c2:c0:31:b6:
                    15:45:ea:a1:95:c0:f5:c7:a4:de:12:df:a7:96:b7:
                    7d:bd:b9:f5:34:2c:a7:74:72:eb:c3:c7:7a:65:99:
                    71:61:cf:4f:a0:0d:a0:c5:fe:e1:8a:1d:e4:7e:90:
                    29:18:5c:41:dc:54:ca:00:7d:9f:37:91:f6:bb:eb:
                    16:90:0a:e4:da:e4:39:11:8b:65:49:d8:0b:37:fd:
                    b9:93:ee:07:3c:94:34:b8:27:86:c5:03:a7:fd:25:
                    5a:bb:67:44:b4:57:9e:5b:e2:f3:4d:13:3a:1d:9a:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:63:74:69:23:38:5D:84:AC:D2:E8:2B:4D:A6:13:C9:3B:5D:64:08
            X509v3 Authority Key Identifier:
                keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:42:b4:eb:69:c1:5e:73:6b:d0:a8:e3:63:d1:29:42:fc:ab:
         89:1c:e5:77:62:a3:77:ff:4a:2c:c7:5a:d4:c4:31:9f:62:97:
         d3:2f:4d:dc:83:b3:8f:3c:4a:82:66:49:b3:67:9b:7c:a1:fb:
         47:de:72:b3:72:bf:2b:50:0d:fe:93:0b:3f:e2:30:fd:c4:e2:
         2d:32:44:1c:b0:d5:d4:6c:f3:8f:dd:8f:51:f0:d1:3c:db:92:
         78:e5:aa:7e:7f:bc:f4:99:a2:c3:13:7b:76:49:33:15:d4:0d:
         78:98:ba:5f:82:f4:da:1c:c4:f1:09:85:a9:42:2b:9f:f8:81:
         74:1c:5a:f9:f3:a5:aa:a8:21:fd:26:13:dc:ce:eb:3b:a1:ad:
         39:26:9e:02:90:72:28:e8:9d:91:e0:d7:7f:ab:54:e9:ce:59:
         17:ea:ca:c4:03:e1:81:2b:f5:5f:cf:9b:79:d6:cd:19:86:57:
         2b:62:ba:e1:c5:93:03:ec:98:db:57:57:58:fb:0a:53:fe:43:
         dd:d3:24:e2:2e:d2:8a:d2:85:3d:19:fe:33:fc:51:6a:9a:4f:
         5c:d5:71:e1:9f:84:ca:d5:7e:2d:85:3a:70:96:f7:9b:13:4c:
         fb:71:b9:6d:b7:06:c4:68:d9:ae:7a:75:91:c9:6c:4f:49:b1:
         6b:00:ec:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:07 2026 by rpki-client