Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File:                     AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier:          XySCtemrE6oAGBB9CexPDyRjMg6xwtfq07Pf42cPYzI=
Subject key identifier:   DF:46:8F:A5:F3:55:F7:73:14:3B:83:DD:CF:0A:0D:6D:FB:95:3A:05
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       019EBF5A7BE57300EA8408A40A1E5D774A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number:          0BA9
Signing time:             Sat 13 Jun 2026 05:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:38 +0000
Files and hashes:         1: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: 1zgxYDBqwyMzNmAxG33u9CpKvvjDhyEultU7tSDt8WE=)
                          2: wyy3rlzUUMeQq8PIhXfkhcAt_40.roa (hash: gHG1HjkTZWK4eYCE7NI/fkalfX+p2e1lN/BRfBXmaKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:7b:e5:73:00:ea:84:08:a4:0a:1e:5d:77:4a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: Jun 13 05:00:38 2026 GMT
            Not After : Jun 14 05:00:38 2026 GMT
        Subject: CN=df468fa5f355f773143b83ddcf0a0d6dfb953a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:0b:14:01:a7:a6:c4:b7:13:93:4b:42:22:
                    46:ea:3f:a1:9c:2d:06:aa:d3:c7:0d:c9:f7:26:65:
                    3b:48:50:5e:f5:1b:76:cc:a8:9c:ed:5c:6e:55:68:
                    ed:23:97:78:e3:96:f1:be:f6:58:35:1f:be:c9:57:
                    57:34:af:03:d8:82:f6:95:7c:4a:57:a5:f0:da:cc:
                    d6:39:85:4c:da:93:ca:89:6b:e3:37:d5:47:57:6e:
                    b9:2b:c0:70:b8:6d:ca:21:5e:0c:f3:fc:7d:0d:98:
                    af:a6:17:14:02:2e:3d:07:36:d1:a1:ef:86:25:ee:
                    db:41:31:ae:f4:a7:fc:b7:f6:b8:7e:4e:40:fd:57:
                    8d:cf:6d:85:58:6e:47:b1:e3:e7:67:f1:f2:fa:63:
                    8a:23:e8:ce:af:14:33:0b:52:90:a6:06:b7:43:34:
                    ba:3e:f4:70:10:38:19:e8:4c:8d:d4:a7:82:ff:61:
                    85:9d:f9:8f:01:4c:be:0a:7d:e4:43:83:6c:a2:33:
                    98:c7:af:9c:f4:d5:d7:3c:ef:c5:32:61:be:a5:65:
                    1c:24:d9:64:6c:c0:36:4d:2d:12:6f:72:b3:3c:e6:
                    5b:31:30:8a:95:8f:a2:94:e8:af:27:df:fe:89:d2:
                    03:db:7c:4f:dc:7a:e1:ca:52:bc:22:b3:dc:d8:74:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:46:8F:A5:F3:55:F7:73:14:3B:83:DD:CF:0A:0D:6D:FB:95:3A:05
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:22:b4:48:4c:05:85:7b:55:e3:09:ba:fd:69:44:36:b3:04:
         b6:56:1c:02:24:53:0f:e8:54:26:f6:b2:f2:6e:e9:06:32:1b:
         70:53:ab:d1:9a:76:86:3f:ff:56:9f:a0:a0:5c:e7:49:31:82:
         99:55:77:26:a9:b7:d9:7a:1e:7c:68:6c:d8:f9:ec:99:8b:bd:
         d1:57:e3:39:af:12:f9:e3:84:b6:31:c2:43:f6:ec:c0:24:d0:
         82:78:80:cd:e5:09:0c:66:8d:c0:ee:8d:81:44:fd:56:de:97:
         f3:d4:4f:ce:58:53:ae:ec:a3:b9:30:af:4d:6e:8b:8d:b6:78:
         31:81:b9:b3:94:94:2e:e5:6f:cc:5c:d7:cf:b2:d6:37:f7:7b:
         87:75:d4:b4:b9:1f:74:8b:df:e6:18:8a:e1:c3:5d:e5:5a:0f:
         4a:c5:b8:38:23:21:af:d7:7c:26:da:f6:73:71:0e:c9:14:4e:
         f8:27:0f:ee:43:38:36:6f:a4:11:1d:d8:37:44:ef:c7:cf:ef:
         45:30:00:8f:6e:9b:cb:9e:24:92:e0:d7:db:1f:5b:36:35:4d:
         57:72:d4:2a:7b:e7:8c:5c:90:eb:90:cc:e7:66:d1:c3:d4:3f:
         a2:ba:61:6e:6e:52:58:e1:1e:65:80:33:da:55:fe:96:8d:c8:
         f5:fe:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:06 2026 by rpki-client