Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File:                     8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier:          6ADiX2mD72e+54f5r2aXBzwwMKrW6lnQc+2k7yNvXR8=
Subject key identifier:   6F:45:94:93:59:1C:38:8E:13:D2:73:56:50:72:DF:5A:88:83:32:E5
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer:       /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial:       019EBE7F65DE7D3242516B25DD48F909AA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number:          168F
Signing time:             Sat 13 Jun 2026 01:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:20 +0000
Files and hashes:         1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: Wq1Fs0hmxOlNJtoy8AOVEMG12gBOSOxmzJX9gtEz0wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:65:de:7d:32:42:51:6b:25:dd:48:f9:09:aa:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
        Validity
            Not Before: Jun 13 01:01:20 2026 GMT
            Not After : Jun 14 01:01:20 2026 GMT
        Subject: CN=6f459493591c388e13d273565072df5a888332e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:69:29:b7:83:25:06:80:14:68:33:75:69:cf:
                    e0:b0:e3:1c:b6:d7:2e:b1:0d:49:15:37:58:3a:7f:
                    7a:d3:bb:02:c5:ba:12:e1:4c:6a:b7:43:d0:e7:04:
                    55:d8:c2:03:ad:34:0f:8b:07:a5:31:a4:f4:a1:88:
                    f4:6a:9b:56:05:f4:05:53:80:24:36:52:75:b4:93:
                    08:ae:ad:ec:93:62:74:e9:cc:87:86:24:1f:2e:58:
                    3e:4b:c2:01:23:17:e6:fc:a1:08:95:bb:3c:c7:3d:
                    aa:6e:8a:1f:52:85:85:6c:e5:5e:09:f1:6e:9f:2d:
                    82:a3:21:8b:a4:83:75:13:df:61:90:e8:97:06:76:
                    ea:24:62:1a:c6:52:78:60:1f:ab:fc:4d:29:0e:99:
                    ef:3b:0b:40:8d:53:ce:2c:36:ea:a3:12:ac:29:77:
                    fb:bd:f1:98:6a:e7:54:b8:bb:a0:3b:11:13:ab:b9:
                    61:65:14:17:1d:32:14:7b:0a:d8:9c:02:da:18:53:
                    0f:84:e9:9c:72:38:66:06:8e:00:43:19:99:d0:29:
                    4d:3d:0b:07:e8:c7:33:09:29:c4:26:eb:bb:b7:24:
                    11:46:03:f3:19:55:79:a7:d2:fb:2d:22:e3:82:1d:
                    73:7f:78:00:35:e9:c6:48:f7:78:31:4d:70:aa:c7:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:45:94:93:59:1C:38:8E:13:D2:73:56:50:72:DF:5A:88:83:32:E5
            X509v3 Authority Key Identifier:
                keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:6d:10:db:5a:9d:09:05:36:55:46:b9:fd:94:c7:2d:07:45:
         6c:de:21:9b:5e:ad:6f:be:ce:42:fb:06:9a:74:da:21:a2:67:
         2e:43:7b:66:fa:8f:f0:b1:7c:d4:9d:2f:01:db:ba:0b:75:34:
         42:e8:6a:4e:9e:82:7b:26:20:f1:be:0b:45:2f:ac:55:67:d7:
         89:86:db:b7:5a:34:7a:63:ee:ef:a5:4c:4a:53:ac:6b:f4:d7:
         30:d4:5b:df:a9:ed:31:22:cd:67:7c:d4:d0:e5:0c:a6:f8:f3:
         01:96:5f:87:b7:52:d6:01:f0:d2:41:15:70:19:31:b9:6d:14:
         cf:74:d8:62:0f:79:51:39:54:ad:35:7e:2b:6e:6a:e8:41:f9:
         32:67:82:a7:12:a9:7f:15:78:e5:6b:32:56:f3:95:fe:df:b4:
         45:87:31:2e:71:35:3a:73:29:c1:2c:37:08:3d:77:c1:fd:75:
         1b:1f:36:ce:90:b1:ad:0c:48:34:4f:43:08:e8:e9:a2:1d:4e:
         6b:a4:42:fb:07:95:c6:57:a3:72:f3:5f:f6:89:40:28:13:c0:
         ba:1e:67:53:15:1f:79:56:91:d2:74:31:78:fc:3a:e7:56:f5:
         d9:6c:82:75:ce:b3:da:75:c2:20:c2:ae:43:c6:8c:c0:46:53:
         a4:3c:36:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:04 2026 by rpki-client