Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
File:                     A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft (raw, json)
Hash identifier:          NGdc0gCDfHCjnEkVc8MOWSk6qVtDU/U0Te6yxtpyhoc=
Subject key identifier:   45:7B:81:BD:16:A9:9B:38:E4:1B:E8:B3:62:B6:16:4F:DA:F2:43:CD
Authority key identifier: 03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E
Certificate issuer:       /CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
Certificate serial:       019EBE477258A6B03C705E447FAB05FFD87C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
Manifest number:          08EA
Signing time:             Sat 13 Jun 2026 00:00:13 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:13 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:13 +0000
Files and hashes:         1: A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl (hash: awh2W0cXUbR5Z74xMdagL6oe9q/B4ZjzL4XTMO33P6M=)
                          2: fPatIQG_vn-KpCzLNpi1KmGZICQ.roa (hash: rt2SMboQCCIlzb5Lym5TzRN3RtHv+A8V2C5lF65IdPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:72:58:a6:b0:3c:70:5e:44:7f:ab:05:ff:d8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035845f86cbc3cfa9e0e7987a0382d5d0dd7ce3e
        Validity
            Not Before: Jun 13 00:00:13 2026 GMT
            Not After : Jun 14 00:00:13 2026 GMT
        Subject: CN=457b81bd16a99b38e41be8b362b6164fdaf243cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:83:d6:02:9c:85:22:5c:8a:11:5d:e8:73:
                    0a:1a:63:f4:90:05:7f:73:45:26:bc:0f:bd:21:cf:
                    27:45:42:10:86:f3:22:30:5d:dc:27:0b:f8:22:b0:
                    b1:23:6b:53:e6:73:51:73:04:a5:47:f1:63:e4:ab:
                    0e:b7:57:d0:4e:8a:c0:b4:22:e7:d8:5a:cb:ab:03:
                    04:b9:c5:6c:b7:c3:7f:bb:b3:38:24:b8:81:eb:63:
                    8e:73:b5:e7:80:24:7c:96:13:c4:bf:13:1e:d0:63:
                    10:33:7b:50:5a:2b:7e:91:ca:be:68:e4:dd:1d:ba:
                    a9:6b:d4:89:20:bd:4d:2d:ad:38:98:2c:59:ff:2f:
                    62:89:9f:af:29:a4:c5:5c:d0:9e:bc:45:63:7a:c3:
                    29:67:31:2e:19:ea:9d:33:87:73:cc:da:b4:31:3a:
                    00:ab:4a:fa:bb:eb:67:3f:5f:8c:9f:d4:73:a5:26:
                    ec:a7:92:86:f2:c5:e5:e7:1e:26:0a:4d:25:c3:8a:
                    41:45:49:7e:50:c8:c8:b0:18:75:2f:a1:a5:7c:98:
                    68:97:90:ae:ee:eb:2c:54:05:67:37:dc:8d:e1:0e:
                    80:af:8e:75:cd:20:4f:73:e5:1b:f9:3a:bb:c6:03:
                    0d:21:7e:db:c6:ef:2a:bc:b8:a6:95:1a:d4:5f:2b:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7B:81:BD:16:A9:9B:38:E4:1B:E8:B3:62:B6:16:4F:DA:F2:43:CD
            X509v3 Authority Key Identifier:
                keyid:03:58:45:F8:6C:BC:3C:FA:9E:0E:79:87:A0:38:2D:5D:0D:D7:CE:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d279d3-947e-45c7-a890-3b84d79abdaf/1/A1hF-Gy8PPqeDnmHoDgtXQ3Xzj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ef:a9:0a:9c:0f:bc:cc:40:40:10:74:55:ad:02:1f:c9:f6:
         cf:cc:03:41:5c:82:aa:96:f0:98:e4:ee:32:6f:15:d4:19:bf:
         48:95:c7:77:f8:3a:61:49:a9:7e:02:dc:19:5e:6f:21:86:44:
         51:1c:9b:c1:4a:cb:18:88:e1:c7:2e:f9:03:b8:dd:52:d3:f4:
         19:21:5c:43:5f:d7:a0:5d:41:cf:0d:9a:c2:9e:ba:d0:45:d2:
         b2:5a:d7:0c:79:18:62:ac:db:d2:25:e1:a3:bc:cb:e0:fe:d9:
         4a:68:89:21:7d:a6:f8:ea:66:9d:4b:91:b6:b0:5b:77:31:43:
         93:a3:46:d3:ca:d9:39:7b:45:bf:a7:81:2c:83:85:93:11:0b:
         06:fe:94:f4:da:97:68:b3:ca:dc:4a:8d:c0:6a:3d:3a:86:0e:
         fb:ba:93:e6:69:7f:18:2a:18:87:87:5d:00:12:4d:aa:63:77:
         9a:cb:49:0b:ce:0a:2c:4c:93:66:80:53:4b:7a:b9:68:1d:6c:
         59:a6:5b:5d:da:0f:24:2d:e9:14:aa:34:7d:0e:5a:e0:b2:30:
         e5:d1:7d:9f:db:6f:28:2e:4f:a4:b1:d1:cc:eb:f1:e2:cf:ae:
         4a:d1:fa:43:f0:a3:55:33:95:d6:c9:5c:84:1a:f9:b9:01:02:
         d8:35:03:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:38 2026 by rpki-client