Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
File:                     _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json)
Hash identifier:          KxF8m9YDpgHQ4ouM2Sf4aEgMy35sdaLf72ZZ23h2ThQ=
Subject key identifier:   0F:65:23:C4:25:2A:EA:6E:52:22:3C:A6:C2:ED:E8:24:C3:5E:13:1B
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Certificate issuer:       /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial:       019ED53E2749BE6E3EDC5600855C513EE8AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
Manifest number:          03FA
Signing time:             Wed 17 Jun 2026 11:01:20 +0000
Manifest this update:     Wed 17 Jun 2026 11:01:20 +0000
Manifest next update:     Thu 18 Jun 2026 11:01:20 +0000
Files and hashes:         1: 6OMId8qLq9FNz-0vxg5RBukY9zs.roa (hash: xe2yi3J7qtfn/452oWa5yO6AXTtiMtVrNox5id3Mshk=)
                          2: MaydDWrUbLvw1QYZAkPLLUQxbi0.roa (hash: wvyXfigpqaIstAVGqzcAWkhhWQ5Hr2D2AHS65eJuN5U=)
                          3: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: IwqyLXZfxCk+k2LIXmpakmFBH2jPvNqmBHfIJHVL3P4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:3e:27:49:be:6e:3e:dc:56:00:85:5c:51:3e:e8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
        Validity
            Not Before: Jun 17 11:01:20 2026 GMT
            Not After : Jun 18 11:01:20 2026 GMT
        Subject: CN=0f6523c4252aea6e52223ca6c2ede824c35e131b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:1f:8d:91:cb:b3:3c:ea:0e:88:e6:b0:03:
                    98:10:41:45:1b:e8:ca:3c:cd:58:6e:35:a4:2b:35:
                    0b:cb:da:4a:d9:e0:d2:56:51:5a:b4:28:07:71:1e:
                    3e:ab:8f:b9:82:cb:83:70:9a:f8:8e:09:10:d6:64:
                    26:d6:2c:95:3d:ba:7e:cd:31:20:36:db:b6:1c:db:
                    c0:ec:33:ac:93:53:06:73:a5:52:90:13:d0:d3:f2:
                    47:03:ac:30:a9:4e:af:ca:34:bf:c5:c6:08:7a:16:
                    ee:88:fd:6a:f0:85:1a:ea:e8:55:b8:6b:34:28:bd:
                    ba:99:33:4d:77:ed:7f:f9:6e:2d:67:93:3e:ef:98:
                    09:b5:60:d4:a0:87:43:63:ae:7d:14:07:53:47:eb:
                    91:b2:cc:c0:f1:e9:8b:3c:36:ad:8f:22:20:15:4d:
                    1e:4a:3d:ab:03:86:90:74:6d:6d:54:e8:b3:77:43:
                    48:45:1f:ba:a2:ce:90:a0:78:79:dd:25:b6:7b:d1:
                    f3:c6:82:e7:23:33:1a:d1:a8:de:28:bc:75:1a:cc:
                    27:6d:21:33:60:61:f3:36:27:59:70:6e:ca:1f:06:
                    cc:9f:a4:74:09:09:9a:43:2a:9c:20:1c:1d:72:d3:
                    c5:2f:c9:81:ea:06:f7:54:36:6f:e4:9b:75:80:f1:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:65:23:C4:25:2A:EA:6E:52:22:3C:A6:C2:ED:E8:24:C3:5E:13:1B
            X509v3 Authority Key Identifier:
                keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:da:26:1c:89:37:ec:45:d5:ec:80:49:ba:69:7b:e6:52:85:
         6b:81:ab:70:cd:ba:ed:10:6d:2c:f1:56:06:f6:65:37:26:ad:
         35:04:4b:b0:5a:8d:74:10:cc:ea:2e:b1:fe:6b:2d:e7:eb:9f:
         3e:23:c5:f5:99:98:29:34:83:f0:8c:a2:22:f1:e5:44:1f:6a:
         78:2d:be:2f:a6:b3:b9:94:81:0e:b8:bf:e7:8b:44:d8:2d:fc:
         0d:46:78:86:fd:b7:58:4d:27:2d:23:6c:24:9e:46:ec:f8:e5:
         dd:60:80:28:17:ff:d2:e7:0f:a7:b1:9d:53:d3:66:f5:13:8a:
         4b:77:2a:d9:4c:05:1c:93:9d:23:a6:77:01:7e:c8:2e:54:45:
         a9:8b:71:64:5a:ea:47:88:e7:76:81:46:ce:f2:fa:5a:be:19:
         e5:8f:07:e9:e9:8f:17:8c:04:75:1d:8e:dc:3f:6c:76:b1:7f:
         92:6a:28:ab:cb:fe:e3:b0:8f:ae:5a:e9:8c:17:64:61:7f:86:
         7f:94:f5:a1:ae:4b:ba:e7:e5:80:ad:48:0e:1c:48:df:61:ec:
         d4:a9:6c:3c:83:2f:74:6f:65:14:67:57:cc:7e:52:f9:25:4f:
         bb:d8:62:64:22:10:54:1c:c4:f7:be:f6:e4:b1:13:2f:21:b9:
         38:66:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:33:20 2026 by rpki-client