Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
File:                     1balyjfq0x_So1CwtBLXfZUyCSg.mft (raw, json)
Hash identifier:          Dv8OxLYa/5IccLLkNkBpf5Mbek4zuv6yLVdnoIJAjCs=
Subject key identifier:   0B:65:65:55:3C:43:1F:B3:69:3F:88:28:8D:8F:6B:07:36:D6:2A:87
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Certificate issuer:       /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial:       019EBE7FCEBB010E36517F8E8B75E2135CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
Manifest number:          11E8
Signing time:             Sat 13 Jun 2026 01:01:47 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:47 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:47 +0000
Files and hashes:         1: 1balyjfq0x_So1CwtBLXfZUyCSg.crl (hash: OVCMg0DXQThe1/dOsdraxWKNDVnak3O3Of4n88UV7Dw=)
                          2: 1qgUA35hbbIGcm-jImU1wJP1uAg.roa (hash: pVjSDhFzGgaJ+xSK7dqGwBjTwMA/n9tQ1SKH0O/Fad0=)
                          3: Bh-T23qknIeIH3OoC5e589rNtKc.asa (hash: fzH1wDHUsYlpNJwrEYlI/LoWVi84gSQemumRr98/KQM=)
                          4: JWV8R4TfRRoO8EKRkWQEhGBYa6w.roa (hash: PEKThMrpJCdPtYK4KnaIvA8wKCSWObeFX4VH05QYfXg=)
                          5: k7K2nGDuPiO7Se_nhxH46pUsKyo.asa (hash: xc6+rKQG4W4vPyLrCUrae4qpuB00CQX79V15oGw6dqM=)
                          6: nH4QGJOU2j3EPIWo9AxW00IQFnk.roa (hash: IWD2BtbqLOYthCXactOhK7e4mOG0DXsr0Rz/2aTPlOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:ce:bb:01:0e:36:51:7f:8e:8b:75:e2:13:5c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
        Validity
            Not Before: Jun 13 01:01:47 2026 GMT
            Not After : Jun 14 01:01:47 2026 GMT
        Subject: CN=0b6565553c431fb3693f88288d8f6b0736d62a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:00:35:39:f7:84:d8:66:0d:01:11:ef:58:a7:
                    f1:be:67:4f:2f:53:1c:fd:8c:66:15:ce:b8:ca:bb:
                    c3:75:62:09:22:21:63:38:06:ab:89:17:08:a9:c4:
                    62:72:c0:88:7f:26:7c:90:de:8f:8b:32:9b:bc:9f:
                    9e:bf:b9:a4:1b:8f:24:a6:fb:9a:09:83:5e:c1:88:
                    39:71:40:d8:bd:2d:b0:66:92:87:64:49:2e:d0:f2:
                    39:2f:1c:81:55:35:5b:fd:f3:e6:44:72:fe:c7:3c:
                    4c:fb:a6:b7:d1:7e:71:55:0e:3c:17:56:e3:d7:c1:
                    1f:4a:c1:99:35:97:d6:a0:4c:23:d9:4c:a7:a5:19:
                    ea:d4:74:af:ca:43:8b:fe:70:03:b1:43:52:c7:c5:
                    86:12:57:12:a6:87:d0:bf:fa:4d:7f:4d:dc:91:91:
                    9a:a7:1f:d2:54:64:be:ec:99:f2:27:c4:96:3b:da:
                    16:0e:1e:2b:29:6d:b7:c7:a8:d0:c3:1f:8c:0f:af:
                    6b:8c:e4:9c:28:78:ee:13:33:95:e7:26:3a:f0:ac:
                    97:bf:1a:01:15:45:48:06:ff:1c:c2:55:57:e2:bc:
                    11:d0:e8:a8:e2:f6:82:82:f9:1a:e8:d6:8c:ea:ff:
                    87:f1:4d:08:0e:ac:cb:32:57:f5:bd:d1:b0:ab:c0:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:65:65:55:3C:43:1F:B3:69:3F:88:28:8D:8F:6B:07:36:D6:2A:87
            X509v3 Authority Key Identifier:
                keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:ff:35:73:df:54:11:50:50:2a:01:ed:0c:08:e5:b8:47:
         f4:eb:35:3d:12:e1:d3:a9:c4:a9:20:22:f7:f4:9c:18:ec:c6:
         16:16:40:cf:1a:e8:6f:fc:3c:53:18:bc:dc:6a:af:38:da:69:
         5e:34:9e:50:f5:35:cb:87:46:ea:bf:9d:a5:e5:22:a5:e0:74:
         f4:1b:9c:1d:0e:a7:9e:22:4d:be:91:a0:cb:02:00:51:d9:a8:
         ab:7e:f4:ee:b0:ca:a5:9c:c6:5c:7d:46:20:ea:d0:1c:c0:11:
         9f:ef:4e:00:af:76:2a:38:87:02:de:86:74:a0:11:a7:1e:08:
         2f:5e:00:88:35:03:e5:a8:03:ec:e2:81:bc:7c:22:40:c4:18:
         f8:62:5d:7d:5a:71:f3:b9:3d:19:e7:b2:0e:c3:f7:81:12:54:
         9b:1e:2e:a8:13:a6:38:1b:f3:dd:41:24:65:4b:6d:50:fb:b5:
         eb:0b:09:67:47:f5:72:2f:15:10:97:f4:bd:c3:f5:d7:74:55:
         48:77:cd:4f:46:67:f6:9a:6e:5f:6d:ab:5f:55:37:1c:60:8e:
         10:ee:f3:ea:61:65:f4:23:ad:6b:73:41:df:0b:bf:a7:ec:e1:
         64:1b:53:01:f4:4e:00:01:c5:dd:33:6f:cb:f0:82:57:bd:4e:
         6e:8b:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:54:49 2026 by rpki-client