Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File:                     8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier:          BY3uDXazTlh4Xp4aKTwWWMHFdSuxi/dfDRGfks8FD0o=
Subject key identifier:   1B:72:96:C2:AC:CE:A5:AF:F0:2B:D2:F0:08:AA:87:55:3B:53:F7:18
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer:       /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial:       019EBEECEC44A54AB76C3B7CEA8EFDDA4F5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number:          0A47
Signing time:             Sat 13 Jun 2026 03:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:58 +0000
Files and hashes:         1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: JDnhBnmebdfigpdXRd9H+xJQqltkvYclBTpeJEnBqhc=)
                          2: L2SGUtmn8iVoAZusJiJO0lWPz-c.roa (hash: tzCEkWtWLJDnUs8JcskBJsxe43rrrZgahQVNHwJxPJs=)
                          3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:ec:44:a5:4a:b7:6c:3b:7c:ea:8e:fd:da:4f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
        Validity
            Not Before: Jun 13 03:00:58 2026 GMT
            Not After : Jun 14 03:00:58 2026 GMT
        Subject: CN=1b7296c2accea5aff02bd2f008aa87553b53f718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:ed:b1:b5:25:95:a0:49:c5:51:3c:db:c8:
                    60:80:3f:66:c3:93:fe:be:36:23:1b:12:a6:09:48:
                    39:5e:54:0f:34:f4:a5:cb:6c:cb:ff:d4:e8:48:08:
                    ed:95:69:73:e5:53:bc:9d:fb:dc:08:30:c2:3a:de:
                    58:ac:2d:8f:c4:90:01:b5:d3:84:e4:1c:5e:6f:35:
                    93:63:22:e9:26:6d:af:c1:f2:3f:fc:82:8f:32:a4:
                    d1:b3:16:e6:8d:bf:c9:5a:56:95:a5:3d:4e:10:80:
                    b0:fa:c1:15:26:68:fd:cb:d6:b0:94:d6:5b:4d:f3:
                    02:52:2a:2a:23:82:43:3a:b2:9c:08:b1:f6:89:a9:
                    53:9a:e2:94:cb:4f:3d:12:3c:4f:07:0f:05:fc:65:
                    7c:c9:b4:02:88:23:f3:0f:ca:82:5c:bc:df:d6:d0:
                    bb:3b:2c:d0:08:56:1f:8c:b3:93:e9:ee:97:69:a2:
                    66:da:04:c8:d9:a9:37:aa:dc:93:38:e4:25:79:6a:
                    50:c9:09:c8:79:81:ce:59:8d:87:de:8a:f2:a0:bb:
                    e9:11:cf:02:c3:32:ad:50:6a:65:a8:47:59:2e:f7:
                    ba:25:28:b6:29:84:3d:11:5f:af:8b:17:4e:5b:80:
                    a0:b9:c4:be:21:19:89:50:aa:1d:ee:39:ff:cf:d9:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:72:96:C2:AC:CE:A5:AF:F0:2B:D2:F0:08:AA:87:55:3B:53:F7:18
            X509v3 Authority Key Identifier:
                keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b9:4b:eb:51:b7:8f:94:f0:df:ee:d9:d9:0d:0d:be:9d:3c:
         35:04:b3:97:7a:13:c1:f6:ff:aa:4c:2d:e1:f1:cd:01:16:05:
         f5:a0:37:5f:b2:f4:f3:a3:bd:f9:af:74:7f:ea:7e:6a:a3:84:
         b2:2c:62:74:cb:a4:59:ab:13:0e:57:98:83:fd:1a:bd:89:5b:
         b7:93:c8:e7:da:de:58:69:1e:fe:85:34:3b:32:b0:72:f1:0b:
         ac:f9:31:c9:54:86:51:83:12:c4:9c:67:3b:aa:0e:5d:66:79:
         94:06:9e:30:76:75:06:f0:c9:86:7d:56:28:ab:18:34:7b:cd:
         6d:0f:42:44:e3:61:60:0f:cc:c3:a9:54:72:09:b7:3a:a4:f9:
         a1:6b:1e:b2:25:b6:1d:b9:78:39:98:1c:15:fb:8d:18:c1:82:
         73:d2:73:35:a6:7e:b3:be:e2:01:24:02:8b:18:09:51:b7:e2:
         fc:78:e6:5a:1b:28:80:3b:eb:1f:10:cd:a2:4f:0a:78:9c:40:
         d8:eb:9d:ac:52:36:eb:fc:cc:92:82:d1:f9:f8:f9:77:db:13:
         d5:ba:3a:72:22:c1:bd:2e:ec:00:fc:1a:8e:37:62:51:00:4d:
         2f:a0:9e:91:f6:20:77:ac:7b:c0:b6:9e:8f:6e:3f:a1:53:49:
         68:a2:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:52 2026 by rpki-client