Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
File:                     _6AZpcGWu9HMF9Go02xNZX84FqA.mft (raw, json)
Hash identifier:          sGYsEMXNIOTgaxvPncytX3HDgt9rBHda4YfBK/6MpyQ=
Subject key identifier:   56:FA:D4:4D:83:DD:6A:12:E4:B8:A8:67:35:3E:D5:4A:BE:B2:AA:AC
Authority key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0
Certificate issuer:       /CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
Certificate serial:       019EBF5AD15536552C67F963E37DA606BD89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
Manifest number:          020A
Signing time:             Sat 13 Jun 2026 05:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:00 +0000
Files and hashes:         1: UBIEdD9qA-F9T8nxlsMSK5FtYzE.roa (hash: jOYSslPxBrJRqsrU66rP66QSxw2oakgO9xp5/EB14jA=)
                          2: _6AZpcGWu9HMF9Go02xNZX84FqA.crl (hash: 2idT9HeOvd53QI4tSKkX0bugIaSXL8PAirnHYZmUnio=)
                          3: cHHYrdipeY5NlcG_Etj-ESKeV-E.roa (hash: cMykkeb+MqrwdvTEyDZmptksYNLf1s6n3czlPS8jDMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:d1:55:36:55:2c:67:f9:63:e3:7d:a6:06:bd:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0
        Validity
            Not Before: Jun 13 05:01:00 2026 GMT
            Not After : Jun 14 05:01:00 2026 GMT
        Subject: CN=56fad44d83dd6a12e4b8a867353ed54abeb2aaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:bb:6f:ff:91:71:64:d2:65:10:79:51:87:
                    09:79:83:43:ac:61:88:ef:33:06:77:c3:64:66:dd:
                    4e:51:91:4f:29:0e:1b:b3:74:c8:77:b3:e9:ec:2d:
                    5f:31:e1:84:9d:4d:f8:cf:36:be:97:e2:cf:44:86:
                    50:10:35:d2:bb:2d:ba:70:22:98:a2:87:06:85:44:
                    61:ed:41:c7:0c:c6:4c:71:b3:70:61:0c:bb:15:47:
                    b5:56:7a:ca:5a:cd:d5:58:15:96:95:f3:85:2b:e5:
                    71:40:bc:b8:13:79:b5:ea:7e:d3:f3:08:aa:30:25:
                    e9:27:3e:68:cc:d1:00:ca:ae:a4:d3:65:d6:64:41:
                    33:3a:68:fc:a8:68:9c:e2:1d:a4:77:b0:1c:5f:b5:
                    bf:5d:f2:50:93:82:8c:d4:f2:ab:39:16:5a:f6:03:
                    f5:cb:00:e9:cc:10:79:7c:1b:3c:eb:39:b5:35:ec:
                    68:5c:74:3a:41:b2:e4:21:1f:df:76:08:88:90:bb:
                    d4:0f:27:9a:2d:ff:3c:32:dd:97:90:cb:a6:a6:7b:
                    d7:3e:db:5e:57:ec:47:f0:7b:2e:19:80:14:e0:4d:
                    84:c6:97:f8:44:50:e0:cd:f4:62:de:8a:12:44:3f:
                    63:43:1b:f7:1c:9e:4a:49:e9:3a:de:be:c5:87:fb:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FA:D4:4D:83:DD:6A:12:E4:B8:A8:67:35:3E:D5:4A:BE:B2:AA:AC
            X509v3 Authority Key Identifier:
                keyid:FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:64:26:cd:8b:ea:3b:04:fa:9a:74:e9:fb:5c:81:ac:49:5c:
         f5:19:a5:68:33:2f:b7:89:01:90:13:e7:73:72:01:b2:9a:93:
         d5:06:66:e6:36:87:7c:7a:f5:ee:63:8e:13:fb:56:07:a1:6b:
         81:e3:19:11:ec:de:e0:0a:e6:c4:13:96:3a:49:f7:21:51:53:
         91:f3:31:c5:4f:a6:cb:20:4f:21:d7:5d:23:f6:e4:67:48:9e:
         e4:3e:98:b0:52:16:cc:cc:fe:07:47:7a:62:00:7b:18:7a:26:
         c6:fa:1d:38:01:1a:fe:cb:42:7e:da:32:69:64:e8:55:37:3f:
         b4:73:52:be:76:27:42:72:61:9c:81:45:79:28:df:0a:b4:a1:
         35:9b:03:dc:95:99:2e:f9:59:77:d9:4b:d8:7f:d7:58:95:fd:
         98:de:48:f0:14:d0:89:e6:c1:dc:e0:76:75:ff:1d:c6:a8:2b:
         bf:dc:66:46:d6:03:fe:aa:be:fc:8f:45:29:8e:1c:45:2d:6b:
         ea:6a:7b:6a:95:e3:1e:a0:5b:ef:50:5d:ab:8a:85:0c:27:45:
         5c:97:d8:ac:90:1b:a8:24:3c:cb:8e:bc:63:78:14:5e:de:8e:
         85:b0:fb:8b:e8:44:de:61:96:11:d7:bd:f0:6e:a2:54:11:26:
         99:1b:fb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:16 2026 by rpki-client