Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File:                     AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier:          9R3o5Qn/QIURPs4bnifraMsD793M65Sy2Ea+VF8b924=
Subject key identifier:   36:14:DD:E8:FC:B2:FD:91:C4:87:5B:90:F5:BE:FD:75:67:26:4C:FD
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer:       /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial:       019EC18021CEF95C6B853D3406E73A05E35C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number:          0480
Signing time:             Sat 13 Jun 2026 15:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 15:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 15:01:00 +0000
Files and hashes:         1: A9rhd59_7voAjZbMragLA3ftrbw.roa (hash: jQKHOIkJndimLRm6Iut1TREkFlVZwkrcXKBUSUJBxdk=)
                          2: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: BAPebtcfkT/L+3A3r+0vJHfpRU5Ab2y96pi11+U4LhU=)
                          3: ofJXmIsyK_jDudPiA8bDAQbKAlU.roa (hash: +olJpgKdSnPRSUcTlissuMFWoxiuQFVYufPs4uhUsXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:21:ce:f9:5c:6b:85:3d:34:06:e7:3a:05:e3:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
        Validity
            Not Before: Jun 13 15:01:00 2026 GMT
            Not After : Jun 14 15:01:00 2026 GMT
        Subject: CN=3614dde8fcb2fd91c4875b90f5befd7567264cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:33:b0:02:20:f8:71:7e:62:71:c1:1d:b2:
                    11:df:e5:9c:c5:09:b0:52:f9:9c:76:4e:c3:6e:60:
                    6d:ad:35:25:57:71:5f:b4:a6:f2:45:8a:92:d1:cd:
                    7c:f3:7b:99:38:1c:26:3e:2c:04:5e:8d:03:34:9a:
                    d0:ba:d6:00:b0:a1:fb:f9:0f:fc:23:83:2d:a8:a5:
                    05:ea:ee:76:c4:b7:3b:f7:1d:fe:73:ad:9e:7d:06:
                    45:1a:9d:ff:0c:69:15:fd:05:b1:de:84:6a:2a:cf:
                    ff:6e:d9:00:a3:53:cc:17:12:44:cd:9b:6a:87:0b:
                    2e:90:b3:82:65:f9:06:21:80:8f:ce:9b:8b:cb:35:
                    64:d1:9e:5f:0a:19:4f:56:94:4c:29:7d:f2:3e:82:
                    ee:3c:34:5d:3a:c3:2e:af:6e:20:55:ff:5f:d9:7b:
                    2e:f8:fe:34:1f:32:9c:46:00:97:12:a8:9a:5b:f5:
                    11:ef:2e:a1:b8:dc:03:ba:7f:51:fe:ae:66:11:30:
                    1e:1f:bb:0a:ca:ac:71:ca:b6:71:98:7e:e8:c4:1e:
                    7e:86:7e:a6:07:fa:64:d2:ac:ee:ee:ca:be:23:21:
                    0a:c6:c0:87:c2:21:90:f4:b3:08:16:fc:23:c9:8c:
                    07:66:2c:fa:67:56:f2:5d:ec:26:0b:29:cb:1e:e1:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:14:DD:E8:FC:B2:FD:91:C4:87:5B:90:F5:BE:FD:75:67:26:4C:FD
            X509v3 Authority Key Identifier:
                keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:77:14:18:19:27:68:a7:c7:31:7a:44:2e:79:58:55:da:df:
         30:3b:cd:09:b3:33:19:0c:de:56:27:a6:b4:d3:3a:82:56:8b:
         11:52:45:a1:68:d3:7b:ca:b5:ee:c5:bd:57:d5:14:cd:4b:5c:
         6e:73:8e:50:08:72:31:c0:f4:fc:a7:f8:f6:36:d6:e6:85:b3:
         2d:af:88:c4:f1:06:66:d1:db:ab:0b:58:13:6a:f9:d6:66:fe:
         09:94:a9:9e:4e:e1:e6:61:53:41:db:fe:6f:c9:78:a3:5c:55:
         0d:29:3d:4b:fc:36:be:db:a3:da:ab:e4:00:f6:15:67:ab:fc:
         0c:78:df:65:71:e7:2a:e0:bd:06:77:de:27:c5:09:14:22:34:
         4b:f5:05:03:6e:f4:c4:5e:3e:e1:99:a4:69:a1:ec:e1:6d:7d:
         47:f8:5b:56:13:85:2b:58:26:ba:b9:80:b4:e2:c0:81:c0:1f:
         a5:54:dd:00:18:db:23:93:59:35:f5:6f:9f:c5:bd:6b:d7:73:
         76:d2:0f:4e:98:a2:c7:ca:29:ce:a2:f7:aa:fb:44:42:b9:ae:
         16:52:e1:cd:51:97:ef:d5:05:94:76:5e:7f:ab:f8:61:14:96:
         bf:a5:36:af:76:e5:88:ce:a8:c8:0f:ab:85:ec:37:24:e9:ce:
         c9:d2:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:07:28 2026 by rpki-client