Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File:                     1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier:          1d/Wsek4SIgQvNFMKxoyDNm+K58yAgVzALAXEamLoNI=
Subject key identifier:   97:08:F1:F0:48:5F:F4:90:3C:D2:3F:5F:F0:6C:B9:4A:83:53:7D:D6
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer:       /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial:       019EBE4798B107F709E881D7E6DC219E8DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number:          16FB
Signing time:             Sat 13 Jun 2026 00:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:23 +0000
Files and hashes:         1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: Cq2uedZPQNQBo/cLcDe62+uuuHgfu7765qYLZE6WJsI=)
                          2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:98:b1:07:f7:09:e8:81:d7:e6:dc:21:9e:8d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
        Validity
            Not Before: Jun 13 00:00:23 2026 GMT
            Not After : Jun 14 00:00:23 2026 GMT
        Subject: CN=9708f1f0485ff4903cd23f5ff06cb94a83537dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:6e:82:72:96:d9:dc:fa:9f:58:d8:a2:f7:
                    78:7f:90:4a:3d:f2:25:2c:ab:fb:5b:60:48:e7:53:
                    16:79:f7:42:75:8a:12:9b:a3:ff:47:f7:f7:4c:6f:
                    c3:d1:6a:29:e3:cd:74:46:74:a5:55:6a:35:a1:58:
                    7f:2f:fa:b6:8e:75:c7:77:33:0e:90:38:76:64:b5:
                    09:e6:10:75:04:0b:8a:32:4b:28:17:45:bf:26:f9:
                    90:53:87:57:c2:12:4d:50:68:c2:63:0f:f4:b3:e3:
                    04:fb:1e:35:e3:df:f2:b7:d6:ca:a0:a8:cc:68:d2:
                    e6:66:74:65:8f:2d:b2:6f:f8:77:7c:7e:ca:cd:fa:
                    21:28:6e:4a:3d:4f:ff:d9:99:be:46:66:17:b0:6b:
                    80:91:3c:0b:1b:95:f2:38:da:aa:73:dc:4f:15:1d:
                    65:1f:98:e8:42:e4:3e:eb:c3:cc:26:6b:3a:a5:54:
                    6d:f7:4d:af:8e:1e:dc:8c:1b:14:4e:14:68:20:6b:
                    9c:c2:d6:26:8b:4a:7f:5e:6b:fe:e5:55:54:a9:49:
                    58:ff:e9:01:5c:a5:af:c3:4b:8d:31:8d:f4:0b:45:
                    1f:cb:d4:ee:31:72:5b:ee:6d:a4:92:b0:17:c1:ee:
                    c6:db:73:57:b0:fe:af:c3:45:88:cb:70:82:55:d1:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:08:F1:F0:48:5F:F4:90:3C:D2:3F:5F:F0:6C:B9:4A:83:53:7D:D6
            X509v3 Authority Key Identifier:
                keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:02:71:7b:a9:65:98:e2:2e:3a:d8:4b:f3:ea:fe:e2:56:ef:
         cb:08:e9:bc:25:cc:89:4f:1d:f9:d6:72:07:a6:25:8b:68:33:
         c1:3c:ff:43:42:d7:3a:36:a3:a9:92:65:2e:dd:18:20:f6:f2:
         bd:35:4e:2c:bd:5a:2c:2b:40:af:87:86:35:4b:56:39:fd:e1:
         7f:a9:c3:04:5f:a7:98:17:ac:ca:ff:61:a5:49:b9:7e:61:45:
         a9:f4:12:e8:77:b2:6c:36:b2:f2:51:39:cb:ea:06:61:1e:9a:
         97:9e:dc:54:04:8c:ff:81:3a:fc:67:9c:23:1a:6c:8c:05:00:
         03:83:14:0a:a1:f5:a4:98:52:9f:ce:6c:fe:b5:12:09:89:91:
         3c:50:f3:e2:d0:cf:e3:b9:cf:8a:ef:ae:de:87:fd:5b:dc:b7:
         78:c2:a8:7b:a4:c6:52:22:67:5a:73:92:ef:69:ff:d1:4d:28:
         09:39:6d:d8:4a:d3:7b:d0:38:b4:62:fe:c0:4f:f4:80:2f:08:
         4d:35:14:27:e7:c5:23:2e:fc:99:e3:70:6d:36:9f:1c:c2:e4:
         c0:14:8d:ca:71:e6:20:82:0f:4e:60:74:97:69:53:8c:a3:f8:
         dd:02:50:ee:43:7a:60:58:27:d4:c9:39:f4:b9:c3:e2:3b:e4:
         9e:44:b4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:16 2026 by rpki-client