Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File:                     ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier:          HnAQN+5MaiXP9O/7LR/IStritKZzMu/j3wIPqstR79U=
Subject key identifier:   A9:F9:20:5D:7A:23:67:E3:00:2A:E8:98:87:6A:BA:2B:80:9F:2D:56
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer:       /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial:       019EC1493A80ECD27140D0D10E3BA2C9EA58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number:          15F3
Signing time:             Sat 13 Jun 2026 14:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:02 +0000
Files and hashes:         1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=)
                          2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: OBNL613Kd1qvnYG0DJJHdaYZ7iGYEVggAXeZNV1zaMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:3a:80:ec:d2:71:40:d0:d1:0e:3b:a2:c9:ea:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
        Validity
            Not Before: Jun 13 14:01:02 2026 GMT
            Not After : Jun 14 14:01:02 2026 GMT
        Subject: CN=a9f9205d7a2367e3002ae898876aba2b809f2d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:38:e8:d2:09:f0:cf:e8:64:1d:14:55:64:
                    1e:33:09:99:1d:ab:44:13:b2:4e:b1:cc:61:86:ea:
                    64:8f:a2:55:de:70:f1:2b:c5:ec:38:df:27:a9:a1:
                    e5:4b:4d:6d:be:a8:50:f8:a3:19:de:3b:68:c2:6f:
                    dc:35:59:83:60:c7:22:73:aa:54:1d:6b:f3:8b:a0:
                    57:01:c2:2f:6f:fc:bb:cb:62:d4:1e:6b:76:7e:96:
                    dc:35:3c:3c:23:fb:9a:67:d1:cd:66:7a:39:88:a1:
                    6a:34:8c:81:74:14:e8:0a:a9:5d:03:63:a4:7f:4d:
                    94:7c:b6:3b:00:7e:88:ba:53:a8:93:b6:ed:38:a8:
                    b5:92:62:36:56:25:f6:6e:ad:10:99:3b:be:5b:e9:
                    9e:42:5e:46:8a:63:da:95:01:07:83:8e:9e:d2:c7:
                    31:2e:b6:32:42:b3:1e:f7:ab:eb:b6:ae:0c:06:8a:
                    06:0c:eb:0b:83:ac:1f:31:5b:44:15:68:a9:46:f5:
                    98:ca:07:94:96:4b:96:b1:76:37:f1:41:03:96:8d:
                    fe:ff:66:f2:78:e5:eb:29:f0:97:bf:a2:2c:e4:52:
                    25:79:ae:ca:49:d0:ea:8e:00:bb:57:92:a4:28:09:
                    57:66:2c:c4:b9:11:2d:01:ad:8f:30:af:b5:32:b2:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F9:20:5D:7A:23:67:E3:00:2A:E8:98:87:6A:BA:2B:80:9F:2D:56
            X509v3 Authority Key Identifier:
                keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:e2:8e:ee:1a:05:1c:d0:37:a7:e7:63:d7:22:dd:d1:bb:73:
         33:c8:d2:46:f5:f5:0d:00:a5:3c:36:03:3d:a4:50:f3:fe:a1:
         a3:32:12:aa:7c:73:c1:bc:da:a2:f9:4a:12:dc:e4:b0:1b:fb:
         d7:d7:76:4c:0a:2c:49:cf:b4:48:ab:ae:d0:dd:a5:31:fb:f7:
         e0:3f:ac:86:0b:c5:7e:58:0c:63:0d:0f:94:63:98:02:61:11:
         99:98:fd:08:87:74:8a:ca:80:3e:0f:43:71:eb:06:2d:37:57:
         e5:a1:99:ae:89:f5:da:43:2b:a4:e2:a1:9b:92:2f:74:d0:7f:
         24:eb:e3:3e:f4:e2:83:71:44:37:a6:13:3b:38:d0:c2:27:84:
         85:7e:32:a4:f7:34:ce:91:c7:9b:8b:48:37:4b:25:d4:d1:89:
         49:97:53:6c:0c:cc:5f:0d:c0:7f:17:c7:55:13:9a:d7:23:1d:
         03:9e:05:45:e3:ae:a7:ef:c0:d4:03:31:db:ad:0a:a8:eb:e6:
         ce:3f:27:ad:ce:04:4d:30:d7:d3:63:87:dd:2e:03:da:18:92:
         5e:ae:4b:fa:8e:d2:6b:56:ef:db:50:2d:da:49:20:4b:dd:7d:
         37:05:c6:d7:8d:5a:09:d2:a8:56:f3:7c:47:9f:35:c6:50:f0:
         e5:de:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:56 2026 by rpki-client