Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File:                     _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier:          izortkW5zYOOHD/b51bamY6khfjWo5kaJ+Bw3O57Wss=
Subject key identifier:   D5:B8:18:F3:9F:7A:B2:4E:73:04:92:F6:C6:F3:F2:7C:59:EC:10:4B
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer:       /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial:       019EC1B704DC212AE5BD55E441116B7F7A1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number:          0462
Signing time:             Sat 13 Jun 2026 16:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:57 +0000
Files and hashes:         1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: YrdlB2lbhnrptvznnM+ZWGUl7F8seG7z6Hn4aC88Z5c=)
                          2: gZN0ubYqOfKHhkHWa3AckTvwRLw.roa (hash: tkY9Znd59Usph4Tm3soVWPi523DI015PBAn20gIz7Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:04:dc:21:2a:e5:bd:55:e4:41:11:6b:7f:7a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
        Validity
            Not Before: Jun 13 16:00:57 2026 GMT
            Not After : Jun 14 16:00:57 2026 GMT
        Subject: CN=d5b818f39f7ab24e730492f6c6f3f27c59ec104b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:5d:f0:ee:14:4c:83:83:87:f3:e8:98:6a:
                    cc:af:6c:80:ef:86:80:5c:b6:e2:64:bf:44:70:c9:
                    f1:7a:ad:af:37:c5:0c:50:d9:37:6e:c0:a2:18:c9:
                    ce:38:d8:cc:22:48:61:fe:94:4d:23:fe:dc:4e:2b:
                    94:54:95:a7:1f:87:16:28:89:7f:d7:56:11:a1:ec:
                    45:eb:44:86:d2:13:da:89:49:93:63:12:8a:0c:b6:
                    9f:19:e2:27:b7:32:b1:37:cd:75:50:2c:87:20:ac:
                    ed:96:66:5b:88:8a:af:21:f4:5b:a0:50:6a:ff:1e:
                    95:51:eb:66:84:01:c1:fa:b5:0e:27:49:81:68:77:
                    ff:20:a7:f7:8f:79:09:c9:be:65:f8:af:c7:f3:9f:
                    f0:93:7a:23:da:39:57:32:d8:15:21:c0:7e:5c:02:
                    ea:44:29:1b:5b:d7:aa:59:1b:6c:00:eb:e2:10:8b:
                    ed:e9:e1:b1:73:fc:ea:ae:3c:45:8d:66:08:61:5a:
                    f3:9f:00:f9:02:c1:1b:f2:99:ef:8d:9f:e2:7c:79:
                    1f:0e:1a:e9:f2:07:3b:de:36:0a:28:46:08:aa:97:
                    b7:9a:ec:3c:5e:f0:f3:55:ec:7e:c1:db:40:67:ba:
                    ee:54:d5:85:18:4f:c2:a1:05:3e:85:68:17:03:0a:
                    99:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B8:18:F3:9F:7A:B2:4E:73:04:92:F6:C6:F3:F2:7C:59:EC:10:4B
            X509v3 Authority Key Identifier:
                keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:d3:e0:77:ab:f5:a2:87:34:88:59:8a:10:04:ae:21:4f:fc:
         97:a2:c1:7e:4a:6c:e6:89:25:f0:6f:b8:82:86:d5:3e:1d:1d:
         ba:06:52:7b:06:a0:9e:91:59:82:22:0f:e1:70:a5:c7:aa:fd:
         a6:72:d3:98:03:3d:2c:d4:72:a8:8d:3d:dd:92:22:d3:75:74:
         5c:90:44:0b:f2:d5:fe:a3:d6:ed:dc:12:f5:47:44:7d:b4:6e:
         91:99:4d:7b:9a:7a:87:7f:4e:87:d8:21:79:c5:9d:60:3e:5a:
         cd:0e:b1:21:17:23:16:9e:13:2c:d3:0d:e8:96:0c:1e:e6:8c:
         69:f6:bf:2f:66:ed:7f:6b:0d:aa:52:48:ab:84:38:4a:02:92:
         be:da:77:32:74:83:26:3f:b8:62:20:0d:71:be:c3:3b:94:d4:
         9d:ef:dd:4d:5a:5b:67:cd:91:03:b3:9e:cf:1e:d8:97:0e:fd:
         75:05:c0:2d:83:d5:4c:67:32:b1:a7:06:44:77:9d:50:bf:da:
         a2:c0:d3:bb:ca:bf:98:ad:bf:c4:48:ff:02:da:49:03:0d:84:
         5e:92:53:14:fd:6f:3e:ec:83:5d:e4:e9:3a:99:e3:6c:98:0f:
         cd:e5:67:19:6c:4a:30:c5:e9:b8:a5:ff:22:dc:65:95:8f:72:
         0a:5d:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:04:52 2026 by rpki-client