Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
File:                     0FWBRyuSqFqQyqHkfXIj14iuAUg.mft (raw, json)
Hash identifier:          2xlfn0PDVhLFmR1Sy0Fx2ogYeBx9RLrf9t2Dlpw1x0g=
Subject key identifier:   89:DE:14:3A:1E:79:DD:11:F8:42:94:44:4E:A9:44:4D:39:7B:CC:DC
Authority key identifier: D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48
Certificate issuer:       /CN=d05581472b92a85a90caa1e47d7223d788ae0148
Certificate serial:       019EC11259D30D0448725960C9AB36826010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
Manifest number:          046B
Signing time:             Sat 13 Jun 2026 13:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 13:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 13:01:05 +0000
Files and hashes:         1: 0FWBRyuSqFqQyqHkfXIj14iuAUg.crl (hash: fN7jx1/Vrm5LzDiIg++Y8Tnutpica8mZ7707uqduaZw=)
                          2: U9Itz99IoB0xO9lb2uXbc5d6ObU.roa (hash: Rq7o3WK0ubMoL9EbUwbev5XnPrwCebIUGmPBM831UuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:59:d3:0d:04:48:72:59:60:c9:ab:36:82:60:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05581472b92a85a90caa1e47d7223d788ae0148
        Validity
            Not Before: Jun 13 13:01:05 2026 GMT
            Not After : Jun 14 13:01:05 2026 GMT
        Subject: CN=89de143a1e79dd11f84294444ea9444d397bccdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:76:84:4e:a7:d8:d9:df:2c:91:60:51:34:
                    67:2e:29:49:c2:89:bc:9f:a1:7c:c1:5a:3c:d0:8f:
                    51:9b:86:d1:93:3d:04:b6:47:97:4d:54:5d:7b:49:
                    d4:44:61:5f:f8:4f:04:c3:d7:b3:21:d8:23:9d:f7:
                    9f:29:20:24:eb:18:8e:df:a9:a8:fd:f3:6d:59:4b:
                    69:c7:0d:ea:0c:54:fc:be:b8:4a:83:79:55:80:4e:
                    29:df:30:31:e1:97:2e:99:49:41:30:94:81:41:98:
                    ca:e7:8e:a5:82:f8:92:c6:16:b9:ab:1c:3b:85:1c:
                    67:11:aa:12:78:38:55:53:13:6c:96:11:a6:bb:87:
                    89:ab:b2:d1:ba:7d:31:26:a0:0c:5d:12:1a:46:3b:
                    b6:40:ec:be:6a:51:bd:57:b7:e5:c9:b6:61:4c:fd:
                    00:96:a5:44:0f:dd:0e:98:63:81:88:0f:a1:72:fb:
                    2d:b0:88:3e:b4:5b:30:49:25:3e:be:70:68:82:dd:
                    e7:8b:fe:ff:e1:7d:72:f8:8c:2c:eb:de:5d:2f:51:
                    07:76:33:d9:77:14:53:b4:04:62:e3:48:56:36:3c:
                    dd:a2:ab:7d:be:b8:00:dd:9c:2e:85:ef:27:b8:4e:
                    34:58:e8:13:55:54:0b:a7:3b:bc:3a:f4:8c:89:c7:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DE:14:3A:1E:79:DD:11:F8:42:94:44:4E:A9:44:4D:39:7B:CC:DC
            X509v3 Authority Key Identifier:
                keyid:D0:55:81:47:2B:92:A8:5A:90:CA:A1:E4:7D:72:23:D7:88:AE:01:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FWBRyuSqFqQyqHkfXIj14iuAUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a08748-8622-4e86-82ef-3bdaacb9d08d/1/0FWBRyuSqFqQyqHkfXIj14iuAUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:e9:1d:57:90:78:20:a7:a2:48:c1:48:de:d5:65:c5:a4:
         37:4f:68:a1:90:e6:d8:9c:ad:9d:30:e0:d8:5c:9d:9a:58:75:
         0e:57:8e:e1:aa:69:e1:5f:90:f2:01:bc:3c:b8:db:c8:9b:21:
         3e:2a:9a:ff:bd:e1:1d:ab:61:bd:a3:e6:02:a0:31:77:43:bf:
         fc:b1:1d:79:73:1e:5b:a5:cf:e3:f9:a5:3f:89:b3:01:b6:6d:
         f3:da:bd:c9:46:4c:70:23:9d:ec:c7:83:19:58:a0:1f:cc:aa:
         21:75:fc:f0:5a:37:ec:1f:a5:3f:db:b3:82:c7:8c:a7:b7:96:
         d5:67:4a:76:1a:71:3b:ec:c3:5c:9b:d3:43:f5:2e:84:e7:c7:
         cb:97:6c:90:3c:5f:ed:b2:2a:e7:06:9e:d2:09:88:16:ed:bc:
         47:83:9a:c6:64:7f:98:63:4c:73:c0:9c:77:29:d5:dc:92:64:
         8b:80:4e:85:7a:c0:5f:12:40:1e:82:34:69:28:c8:ba:76:d2:
         00:df:81:74:71:2b:49:7e:cf:a4:57:f5:40:b7:e3:48:5e:09:
         a6:63:c8:68:d3:b8:43:94:0f:ff:d6:4f:0e:a7:f3:02:2d:26:
         34:93:35:0f:3e:fc:a3:a2:ef:b2:42:af:ed:27:15:0a:0c:22:
         0a:8a:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:38 2026 by rpki-client