Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
File:                     A9aopjn4iq8fQ21qILQXezjTkPw.mft (raw, json)
Hash identifier:          Cpv7l1Ht45N4tZ81kpesFAx91831EbB65xIKasd8vCg=
Subject key identifier:   9A:16:9C:61:42:D3:1D:C5:83:97:3E:73:8F:0B:63:19:B9:9C:64:4C
Authority key identifier: 03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC
Certificate issuer:       /CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
Certificate serial:       019EC29264DCE8DE0CD7A4B16480EE9CEF52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
Manifest number:          063F
Signing time:             Sat 13 Jun 2026 20:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:34 +0000
Files and hashes:         1: A9aopjn4iq8fQ21qILQXezjTkPw.crl (hash: mLX31hDnJUvoE4mJLOuc6BxOtgYKEdckjcbRcQz9de8=)
                          2: R_tuRGNyH8maQImtyJX8ka61Rts.roa (hash: CI3pZc4MmuEvMGaaRVV9hzb41var6bWscwqeDxkewRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:64:dc:e8:de:0c:d7:a4:b1:64:80:ee:9c:ef:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d6a8a639f88aaf1f436d6a20b4177b38d390fc
        Validity
            Not Before: Jun 13 20:00:34 2026 GMT
            Not After : Jun 14 20:00:34 2026 GMT
        Subject: CN=9a169c6142d31dc583973e738f0b6319b99c644c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:e1:5d:4c:84:e1:6e:b2:97:b9:90:3e:0e:
                    55:6c:58:94:34:c6:5e:c0:7d:3e:3b:ef:1e:f8:90:
                    39:7c:ed:cc:e3:2b:be:24:58:33:ad:b2:ed:87:2f:
                    3c:6c:01:68:bb:09:b8:40:b6:72:1e:30:3e:65:7a:
                    f4:67:29:0d:15:65:88:4d:74:d0:cb:d6:f6:f2:cb:
                    0a:f5:a7:a3:41:69:0c:f8:13:39:8f:fa:17:1a:d4:
                    0b:3b:4c:31:e7:97:a4:5b:1e:8b:76:d7:09:db:0d:
                    59:e4:b9:29:07:5d:c2:92:c6:d8:3c:d1:c5:4b:a9:
                    60:e3:70:45:cb:5b:a3:a0:86:08:7e:44:e8:b6:ff:
                    8f:ed:7e:7b:0f:2a:a6:1c:a6:ce:56:79:f8:53:f2:
                    45:12:67:5e:e0:e9:87:9e:e3:97:92:84:1c:6f:ce:
                    bd:ab:1a:60:65:4e:5a:57:ec:6c:cd:a6:d6:a2:72:
                    40:97:7e:9e:a0:c6:73:b6:55:e6:26:42:7b:f1:e6:
                    c0:52:07:86:51:d4:d0:cd:5e:db:dd:76:2e:45:72:
                    83:ad:7a:4d:11:35:7a:fb:ce:ce:9b:4d:2c:a1:f5:
                    da:10:cf:ad:8c:e2:82:78:a4:b5:37:f1:e6:bb:e1:
                    eb:cd:e5:4e:ad:8c:b5:ba:1f:d8:c0:78:64:48:45:
                    8f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:16:9C:61:42:D3:1D:C5:83:97:3E:73:8F:0B:63:19:B9:9C:64:4C
            X509v3 Authority Key Identifier:
                keyid:03:D6:A8:A6:39:F8:8A:AF:1F:43:6D:6A:20:B4:17:7B:38:D3:90:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9aopjn4iq8fQ21qILQXezjTkPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c18105-d90f-442f-8b1d-c20de543c0df/1/A9aopjn4iq8fQ21qILQXezjTkPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:61:6b:d1:c9:f3:ad:c9:14:69:45:fb:05:32:00:57:5c:f4:
         7a:44:8a:8c:b4:54:0e:b0:17:c9:70:cc:fc:0e:cd:cb:3d:54:
         35:e7:9e:6e:81:8b:b5:b6:2a:69:42:ec:59:23:2e:fd:ed:31:
         76:2c:59:93:03:56:2a:7b:54:10:4c:61:3f:4f:b7:3d:93:01:
         51:4c:1d:12:72:f6:02:88:08:48:7d:5c:b6:cd:fb:65:ff:1f:
         da:46:10:36:ed:5b:62:85:16:39:b2:57:bd:9f:cd:9d:7d:ec:
         3d:08:b3:03:a6:3e:b9:bb:8d:0d:8c:26:12:9e:59:ac:a1:d6:
         e9:9a:b3:fe:0e:ed:00:45:c8:c7:fd:b4:47:0c:c2:0b:02:52:
         56:26:57:91:09:d4:3c:36:14:42:0e:6d:c5:a9:7e:e0:82:98:
         11:20:76:cc:83:f9:b6:2a:a7:88:05:95:bf:10:f0:08:64:3b:
         79:eb:83:5a:ac:db:68:27:c8:34:46:fa:c5:d6:1f:d1:de:31:
         35:b7:e6:27:2a:a3:f0:d8:19:ef:90:51:04:df:49:a7:5f:1c:
         ad:48:f7:b8:68:94:45:bf:fd:0c:f7:95:41:9f:66:dd:f9:1e:
         fd:39:12:b9:c6:53:87:b6:8a:83:28:97:66:c6:6b:f3:74:68:
         3b:e4:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:16 2026 by rpki-client