Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File:                     1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier:          wjDTisWvBqH6Kx52LxkPQVIOBTqLpO97kp6/337A/Oc=
Subject key identifier:   69:1D:11:B4:7B:8D:A5:00:F1:33:24:B9:51:9A:98:75:F9:55:51:A6
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer:       /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial:       019EBEECDF33750EED5B03B865A69E01A74E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number:          0F06
Signing time:             Sat 13 Jun 2026 03:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:55 +0000
Files and hashes:         1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: nMdvu4SqZb+D0GzOj9yFYtTaaWD+PZQ4JLb0wc/7jFk=)
                          2: 6mH6k6-yfE-5uJguxrrxcn8Nc78.roa (hash: w+XRQI8DwIMKW+5qZ+WNzfdMTML+TBZqmZMFXNnfl/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:df:33:75:0e:ed:5b:03:b8:65:a6:9e:01:a7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
        Validity
            Not Before: Jun 13 03:00:55 2026 GMT
            Not After : Jun 14 03:00:55 2026 GMT
        Subject: CN=691d11b47b8da500f13324b9519a9875f95551a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:a1:f8:2d:a9:3b:fe:c1:fc:13:b3:fa:d3:
                    b0:b4:77:2b:60:b6:0a:2a:80:11:69:c3:d0:49:fe:
                    53:17:c0:90:73:c4:da:db:f1:17:78:31:5d:64:cf:
                    60:70:99:7c:fc:77:4b:03:74:74:8f:52:53:78:61:
                    a5:24:1c:60:7b:b0:f0:89:69:00:0c:7a:21:e9:2c:
                    56:31:6f:f1:cd:e3:85:ac:6e:4c:5d:bf:31:bb:75:
                    b8:34:b6:6e:ea:90:e6:fd:c0:ec:27:a2:75:c4:73:
                    ea:65:4e:7f:9e:83:3b:21:b5:e1:54:ed:9b:cc:9d:
                    4f:34:c9:eb:3c:d5:3b:f5:fd:fa:dd:2f:9f:ba:4f:
                    6e:8c:c0:64:08:40:d6:af:b3:6d:f8:0e:07:68:8f:
                    56:05:f1:38:96:a1:70:5b:31:48:4b:c9:99:a0:17:
                    f9:4a:77:cd:d5:10:e2:36:e3:21:0c:bb:c0:2c:c8:
                    38:a8:21:f5:cd:b9:03:eb:b0:5c:bb:7b:0f:7b:6a:
                    ac:d6:a8:b0:1c:ff:94:56:6a:ed:fa:33:88:a2:c4:
                    2a:46:41:b0:31:9d:81:bd:a8:ee:18:a5:aa:70:52:
                    ad:6e:d8:ed:d0:59:c6:2b:af:32:ae:07:59:b8:b7:
                    b9:0d:41:d9:5c:fe:4b:4a:43:29:f4:a0:21:1b:0c:
                    f1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1D:11:B4:7B:8D:A5:00:F1:33:24:B9:51:9A:98:75:F9:55:51:A6
            X509v3 Authority Key Identifier:
                keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:43:65:f6:fc:61:44:25:fa:79:51:35:e9:ab:ff:ac:be:c5:
         a0:50:b1:3a:8a:c4:d5:eb:c3:6b:67:e5:1d:dd:3e:a5:0c:f6:
         a1:b3:79:b3:6b:c3:d4:45:9f:ed:50:0d:43:2b:c5:72:08:af:
         e5:f8:65:56:6c:e2:4d:b3:d7:7d:66:d7:59:3a:59:f5:d1:ba:
         ca:20:16:26:1d:42:09:ce:9c:a9:a0:99:a2:bc:b6:e6:b6:8a:
         cd:14:f5:2b:1d:4a:a1:74:02:61:e6:e0:2a:fe:af:56:88:fd:
         ca:97:62:d5:fd:55:a6:50:0c:02:1e:2e:31:22:d2:12:ea:4a:
         cd:b0:fb:ca:9a:82:77:5e:b9:d6:d5:c2:06:2e:9b:aa:df:ae:
         1c:79:de:51:1e:03:0a:1f:64:fc:41:42:af:74:c9:f4:16:1c:
         e3:4d:41:1f:1f:8a:45:d2:f0:67:17:27:34:aa:44:34:13:01:
         1e:33:53:7d:57:57:73:fa:8f:5b:e4:2a:8a:c5:f8:d0:4d:9c:
         1b:21:aa:80:d4:5e:54:f5:4e:f4:c4:0c:23:45:cb:ab:9b:a4:
         2f:38:c7:9e:08:fd:55:0e:e5:ce:3e:2f:39:61:7d:78:d9:4f:
         d0:7d:e8:81:b4:01:ed:b1:f5:c6:73:52:e1:28:e0:6b:41:55:
         4a:cd:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:26:16 2026 by rpki-client