Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File:                     1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier:          XMcUHrVKTLnTrY1xqixmDMRzKU0TOQkIXsVZXFr7kYg=
Subject key identifier:   B9:5F:60:73:5C:79:CF:0E:BE:26:2E:95:2B:34:1E:75:F9:2F:7A:C6
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer:       /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial:       019EBDD9BC80CD284EB10649E1F54CF9568A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number:          096E
Signing time:             Fri 12 Jun 2026 22:00:23 +0000
Manifest this update:     Fri 12 Jun 2026 22:00:23 +0000
Manifest next update:     Sat 13 Jun 2026 22:00:23 +0000
Files and hashes:         1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: IaZRTUywO7NJKeqM2DLejmXfaFMXvWV490lI0er51Ik=)
                          2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:d9:bc:80:cd:28:4e:b1:06:49:e1:f5:4c:f9:56:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
        Validity
            Not Before: Jun 12 22:00:23 2026 GMT
            Not After : Jun 13 22:00:23 2026 GMT
        Subject: CN=b95f60735c79cf0ebe262e952b341e75f92f7ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:e3:c3:83:bb:55:e3:89:42:05:dd:54:53:
                    80:d8:a7:7f:48:93:ee:2b:74:77:31:77:f6:06:16:
                    63:6e:b6:7a:ef:49:32:f2:0f:9c:c9:b4:cc:41:99:
                    a0:7b:7e:2b:92:4a:bc:59:d5:90:c1:97:b4:ba:ab:
                    43:c1:93:ed:55:aa:5e:57:9c:a7:05:b1:48:e4:8a:
                    9b:eb:32:7d:07:3e:e9:53:d6:40:95:21:9c:f3:63:
                    f1:c5:eb:fc:3b:75:3a:b3:c1:0f:25:05:29:ae:21:
                    bc:62:ce:e5:f2:a2:7f:cd:1d:de:71:03:37:ff:e8:
                    cf:b1:1c:1d:06:ae:55:95:69:ef:de:65:b0:5a:6c:
                    5d:37:77:8e:e0:7a:a8:5c:ab:8c:1f:83:cf:87:60:
                    a9:e3:cc:79:c2:c3:cc:2c:56:1e:f2:37:f2:8b:5e:
                    41:56:d7:16:9f:ca:d5:32:2c:40:dd:3d:fa:e9:49:
                    71:4b:48:1b:35:39:47:14:56:80:30:ca:d5:c3:6d:
                    29:22:17:68:f1:79:37:9b:9b:5c:57:a7:7e:33:f7:
                    af:92:8e:db:37:c2:1e:0e:3f:82:1e:8e:3d:3b:3e:
                    8c:93:61:9e:58:e9:41:1f:59:94:a9:76:58:6d:25:
                    e5:9f:04:41:ed:6d:6f:95:1a:91:fe:2c:9d:2b:dc:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5F:60:73:5C:79:CF:0E:BE:26:2E:95:2B:34:1E:75:F9:2F:7A:C6
            X509v3 Authority Key Identifier:
                keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:11:ef:55:13:1b:73:6d:bb:2b:8c:b0:32:05:5f:ee:46:3d:
         7a:f6:16:90:4a:cd:a3:20:0d:a4:d1:c2:87:72:ea:08:23:06:
         ba:53:7b:f3:85:47:fe:d8:24:9c:64:93:fd:34:4d:46:e9:b7:
         49:72:b6:f8:a7:d8:ee:6c:8e:46:d7:fc:77:9d:f4:8e:94:ba:
         82:60:bc:4f:cc:af:09:b9:f6:51:8c:63:09:3e:e4:0b:1b:63:
         3a:18:e2:12:66:8a:6f:58:f5:7a:9a:ae:f0:7e:b3:e9:ce:2d:
         fc:63:a0:fd:b6:28:b5:a9:93:5e:42:eb:74:18:56:4d:a7:a5:
         f4:e4:c2:20:3d:08:5d:ef:47:7a:17:0e:05:cf:38:df:2b:e1:
         c9:4f:68:8d:87:d0:72:e3:97:de:68:4e:ae:a6:2e:b6:54:eb:
         77:c2:d5:6b:68:26:41:b4:fc:18:fb:64:1e:3f:7f:eb:04:b1:
         aa:39:a2:15:90:f6:aa:86:2d:03:0b:cf:23:aa:cf:e5:bf:50:
         1e:71:96:42:51:88:bf:76:96:be:9c:71:9f:bd:0e:26:c1:e8:
         6f:82:2a:07:81:32:73:41:f3:eb:bc:0a:82:fc:58:b8:df:36:
         cd:a5:b5:83:4d:ec:5f:81:af:70:de:fb:3b:3a:0e:05:da:d5:
         07:c9:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:30 2026 by rpki-client