Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File:                     1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier:          JLEXTgTBv7e6NTN28BkpaQpXh6ADQCIX33bKg+vP1Rc=
Subject key identifier:   28:20:30:A3:2A:B0:50:06:F0:54:D4:69:3E:B4:C9:A8:67:F3:6B:50
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer:       /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial:       019ED318A7EA733B477770285BAD7A299A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number:          0AFF
Signing time:             Wed 17 Jun 2026 01:01:08 +0000
Manifest this update:     Wed 17 Jun 2026 01:01:08 +0000
Manifest next update:     Thu 18 Jun 2026 01:01:08 +0000
Files and hashes:         1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: OyAgcoNrEIiB3oR4cKButyPMBwErR/84uQMRMlx4eVs=)
                          2: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (hash: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:18:a7:ea:73:3b:47:77:70:28:5b:ad:7a:29:9a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
        Validity
            Not Before: Jun 17 01:01:08 2026 GMT
            Not After : Jun 18 01:01:08 2026 GMT
        Subject: CN=282030a32ab05006f054d4693eb4c9a867f36b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:6b:47:39:82:2b:27:f4:f8:35:c4:38:1c:
                    85:56:a6:2b:5e:ba:af:b4:a5:28:6d:10:41:db:7e:
                    66:2d:76:22:7d:cf:b3:2e:8d:11:0f:a2:a2:35:2c:
                    c0:96:e1:c4:d1:33:38:b7:51:17:95:0b:73:1e:84:
                    1c:c3:67:df:be:ad:bf:e4:39:35:9b:24:c8:e4:6a:
                    c6:f1:00:b9:00:87:1f:1b:40:ad:87:ea:ff:66:67:
                    0f:2a:eb:1d:5e:94:17:b4:77:fc:d6:cf:f6:24:22:
                    29:19:ba:22:09:41:dd:4f:3e:bb:95:4b:f4:ac:76:
                    0a:a0:08:90:40:64:52:94:4e:f7:a9:28:96:ff:78:
                    b3:a9:58:51:f2:6b:c8:78:6f:22:6b:5b:1a:7c:c2:
                    1f:a3:44:cf:ad:99:03:d5:f3:a0:f5:f7:b2:52:0c:
                    fe:ac:86:fe:b7:43:be:8d:b6:45:c3:67:e4:af:1b:
                    e2:ed:8f:8d:d2:36:22:d5:1a:80:cb:39:23:ef:ed:
                    02:97:a7:5a:76:56:d0:f0:cb:ea:64:fe:f2:22:e4:
                    7d:4c:de:81:f8:52:09:3e:2a:12:3f:a8:ae:0a:02:
                    28:21:d9:e5:4f:10:6f:81:6f:60:3b:ce:65:d0:43:
                    1f:78:5d:1b:66:bf:7f:87:9f:95:1b:b5:f5:9e:dc:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:20:30:A3:2A:B0:50:06:F0:54:D4:69:3E:B4:C9:A8:67:F3:6B:50
            X509v3 Authority Key Identifier:
                keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f7:ea:7b:b9:c5:60:f4:a5:e1:1e:ee:c3:4d:14:50:6a:af:
         30:d5:9b:08:04:b9:11:fc:2e:6d:eb:e0:b7:b3:e0:fb:48:f4:
         ac:84:ba:c5:3c:c7:92:48:2b:e0:d8:2b:dd:8f:59:e4:69:8d:
         6c:43:de:fc:60:75:21:7a:08:26:ba:d9:74:f1:6c:a4:71:0d:
         1a:59:ed:18:ef:9b:5c:24:d9:bf:1d:8d:66:bf:77:c3:a7:4e:
         c5:10:b6:f3:dd:1c:62:8c:b5:9c:c3:22:18:f9:3b:58:64:cc:
         c4:03:26:f1:a4:2a:5d:57:8a:a8:fd:f1:41:a6:19:47:91:0f:
         d4:1f:30:16:46:39:1c:a8:51:a2:d3:49:0a:39:d8:3e:7a:77:
         54:1a:2a:b8:7c:b8:7d:4c:41:25:be:a1:39:2e:28:90:65:c0:
         55:08:8f:58:14:e1:e7:94:2a:9d:cd:b4:aa:af:72:7b:84:ab:
         68:3f:0b:86:ef:c2:04:ad:bb:87:83:fa:2c:80:8d:a4:98:18:
         e2:a5:1a:bc:70:f0:25:2b:f2:88:2a:c2:98:1f:07:b0:f9:9d:
         f8:01:04:3c:e1:a8:71:db:58:cf:bf:a0:83:47:78:9b:36:d5:
         15:2e:87:df:af:71:11:09:3a:2a:2d:79:3f:7a:23:50:e5:09:
         6c:eb:b4:d6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ7TGKfqcztHd3AoW616KZqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzQ2OGRjY2FlNDNjMjM5Zjg1MzBlODIzNWUzYTJkNGZj
ZDNlNzMwHhcNMjYwNjE3MDEwMTA4WhcNMjYwNjE4MDEwMTA4WjAzMTEwLwYDVQQD
EygyODIwMzBhMzJhYjA1MDA2ZjA1NGQ0NjkzZWI0YzlhODY3ZjM2YjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGxrRzmCKyf0+DXEOByFVqYrXrqv
tKUobRBB235mLXYifc+zLo0RD6KiNSzAluHE0TM4t1EXlQtzHoQcw2ffvq2/5Dk1
myTI5GrG8QC5AIcfG0Cth+r/ZmcPKusdXpQXtHf81s/2JCIpGboiCUHdTz67lUv0
rHYKoAiQQGRSlE73qSiW/3izqVhR8mvIeG8ia1safMIfo0TPrZkD1fOg9feyUgz+
rIb+t0O+jbZFw2fkrxvi7Y+N0jYi1RqAyzkj7+0Cl6dadlbQ8MvqZP7yIuR9TN6B
+FIJPioSP6iuCgIoIdnlTxBvgW9gO85l0EMfeF0bZr9/h5+VG7X1ntyBcQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCggMKMqsFAG8FTUaT60yahn82tQMB8GA1UdIwQY
MBaAFPp0aNzK5Dwjn4Uw6CNeOi1PzT5zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uUm8zTXJrUENPZmhURG9JMTQ2TFVfTlBuTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTBjODE2LTc2NWUtNGQxYS04NjZi
LWIzZjA5NDJlNjllYy8xLzEtblJvM01ya1BDT2ZoVERvSTE0NkxVX05Qbk0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE2L2EwYzgxNi03NjVlLTRkMWEtODY2Yi1iM2YwOTQyZTY5
ZWMvMS8xLW5SbzNNcmtQQ09maFREb0kxNDZMVV9OUG5NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/fq
e7nFYPSl4R7uw00UUGqvMNWbCAS5Efwubevgt7Pg+0j0rIS6xTzHkkgr4Ngr3Y9Z
5GmNbEPe/GB1IXoIJrrZdPFspHENGlntGO+bXCTZvx2NZr93w6dOxRC2890cYoy1
nMMiGPk7WGTMxAMm8aQqXVeKqP3xQaYZR5EP1B8wFkY5HKhRotNJCjnYPnp3VBoq
uHy4fUxBJb6hOS4okGXAVQiPWBTh55Qqnc20qq9ye4SraD8Lhu/CBK27h4P6LICN
pJgY4qUavHDwJSvyiCrCmB8HsPmd+AEEPOGocdtYz7+gg0d4mzbVFS6H369xEQk6
Ki15P3ojUOUJbOu01g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:43:53 2026 by rpki-client