Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File:                     A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier:          szX3ueKYruCo6rO9cgCWlX5BecFSgQzNCP0KTrMZalw=
Subject key identifier:   A7:54:B9:47:00:3C:8C:67:82:15:45:3D:1B:36:78:33:FB:35:65:BC
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer:       /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial:       019EC3376909F51B26457FDD46791CDBADB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number:          056A
Signing time:             Sat 13 Jun 2026 23:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:48 +0000
Files and hashes:         1: 4vob8D5i4e8yxUzOgD_ndBkImWg.roa (hash: 8D0W8BBjVRTsnLo388gZyiwxnGWuD1QilZO3INgNv28=)
                          2: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: QHcv+d40Gt0N7oLsWKbJAy+XWYngQYIC4PQ2xBZrTJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:69:09:f5:1b:26:45:7f:dd:46:79:1c:db:ad:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
        Validity
            Not Before: Jun 13 23:00:48 2026 GMT
            Not After : Jun 14 23:00:48 2026 GMT
        Subject: CN=a754b947003c8c678215453d1b367833fb3565bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:54:16:f9:0b:55:6a:46:e8:85:fb:37:60:
                    f7:66:75:11:67:f9:3b:87:ab:8f:4a:b0:09:7f:28:
                    99:24:2c:48:7d:b5:34:92:2c:55:c5:3d:4e:54:20:
                    b7:47:76:f1:2b:d7:72:06:37:1b:e1:52:54:49:73:
                    90:c9:05:29:81:04:42:9b:50:6f:20:07:86:1d:8a:
                    47:09:79:71:e9:1c:b5:e0:3e:8c:6b:fd:bd:1c:f2:
                    e3:c2:5e:38:cc:3b:ae:b9:8e:94:60:d0:eb:66:c7:
                    8e:d6:6b:ea:4e:bf:65:bc:45:a3:c5:a9:17:5f:9a:
                    b0:5c:6a:22:14:16:e8:3a:e5:86:b5:a1:b1:6a:ff:
                    67:cf:f1:26:71:48:10:8f:3d:f5:38:04:80:27:b7:
                    5f:b7:1e:51:6f:06:0e:cf:4b:e3:a4:a5:96:af:ba:
                    3e:3d:df:c8:c9:3b:ec:13:26:ef:10:39:67:20:58:
                    b6:4f:44:9f:16:e7:15:66:29:a0:92:7e:a9:44:fe:
                    4e:b4:f6:72:52:a7:5b:33:3b:5a:4a:d7:76:e4:a9:
                    fd:c7:0b:6b:cf:b4:06:63:a9:d5:ee:b1:ea:6f:db:
                    f0:b3:1c:44:f0:00:e8:78:88:4d:cc:19:14:10:ba:
                    ec:a7:c3:22:9e:1f:39:4e:e1:2c:01:96:6e:87:35:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:54:B9:47:00:3C:8C:67:82:15:45:3D:1B:36:78:33:FB:35:65:BC
            X509v3 Authority Key Identifier:
                keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:24:9b:6f:c5:62:cb:95:fa:41:c6:35:ad:fd:94:6b:17:23:
         78:2e:5e:a1:93:43:11:b4:1d:d0:62:77:07:63:81:c8:00:11:
         b5:02:57:af:ac:1d:19:cd:25:2f:d2:fb:17:b6:ba:7b:11:45:
         b5:6f:72:ef:68:5c:5f:fb:e1:e4:fe:03:e5:e3:a6:1d:56:c7:
         f6:a4:08:77:1c:02:a7:6a:10:22:0e:4e:5f:c8:a5:71:8a:df:
         f4:97:18:df:fb:65:3a:0f:a7:92:5c:a5:b7:be:c3:7d:df:bc:
         90:4b:73:b6:62:7e:66:3c:1d:4e:31:94:66:96:e1:c5:07:37:
         9e:20:6e:c2:6c:07:cc:3f:3f:9d:ce:29:bd:43:96:cb:c9:8d:
         1d:b7:10:01:97:0d:57:81:39:59:30:2e:fc:4f:cc:b6:f4:75:
         b7:43:ac:ba:ea:9b:55:37:c9:54:4b:96:7d:f5:13:6f:9f:3e:
         97:e7:34:f3:e0:e6:f8:1e:02:02:60:9d:d6:01:f5:1c:eb:bf:
         df:52:58:11:b6:94:71:84:00:58:35:57:e0:38:66:7f:9d:40:
         bb:b9:92:b3:94:96:91:3c:b3:1b:75:1a:8c:b9:e1:85:93:f2:
         2e:2f:29:59:91:fa:50:a9:9e:80:b9:ff:c5:bc:04:92:bd:61:
         2a:49:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:39:59 2026 by rpki-client