Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
File:                     1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft (raw, json)
Hash identifier:          vkLU5kHwvuyY6kl4OPZNMUITJojq0YkzMjF9tjMbGxg=
Subject key identifier:   B3:F8:FD:15:36:17:BA:53:2F:88:11:DF:B8:EF:DD:83:8E:26:93:34
Authority key identifier: FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
Certificate issuer:       /CN=fa160e75add6ebf6f44581321477fab92d22e44f
Certificate serial:       019EC25C9B9CF480D06A1C4E37E7ACCA6434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
Manifest number:          016E
Signing time:             Sat 13 Jun 2026 19:01:49 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:49 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:49 +0000
Files and hashes:         1: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl (hash: TmjkrmTGBfP96+aarxICFheVfo08b5GG40DqAWCqIBs=)
                          2: thQigH6iIZFTzygl3Rx0-Gq-vvI.asa (hash: 0qoZ/U/Zc4qr6dxGiq1WxSNmVGjBwb4uBW1cZmhhZq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:9b:9c:f4:80:d0:6a:1c:4e:37:e7:ac:ca:64:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa160e75add6ebf6f44581321477fab92d22e44f
        Validity
            Not Before: Jun 13 19:01:49 2026 GMT
            Not After : Jun 14 19:01:49 2026 GMT
        Subject: CN=b3f8fd153617ba532f8811dfb8efdd838e269334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:b0:8d:a1:3e:9a:ff:3a:52:23:79:15:a8:
                    5e:20:23:04:e9:22:5e:a1:af:69:bb:f1:4a:4f:6e:
                    53:3e:d7:79:11:50:ff:57:b8:27:42:0e:f9:c2:09:
                    0a:cf:00:e8:bd:0c:85:a5:5c:bc:e3:7a:a6:92:cd:
                    d6:b1:a8:6e:b7:d0:66:4e:32:da:41:75:4e:88:b7:
                    79:53:62:8d:e1:c2:d8:5b:0f:33:2e:ee:57:4d:6d:
                    b3:32:34:ee:27:bf:be:bb:66:cb:e1:46:6d:a8:47:
                    2d:37:19:b8:60:03:50:38:ec:ce:4f:42:8e:4e:50:
                    0e:22:dd:21:85:c4:98:ee:b1:0c:9c:04:3c:f7:2d:
                    97:17:5a:ce:c8:6c:f2:6c:9d:87:e2:a9:5b:45:84:
                    52:31:a0:00:bf:ce:2c:f2:ab:5c:31:f9:b4:5f:73:
                    02:63:10:b4:04:49:46:9f:f6:b1:b7:b8:29:eb:6b:
                    e4:97:9c:7d:6f:95:d4:ac:11:5f:dc:bf:e6:31:81:
                    b8:26:3a:48:e5:fb:5c:08:79:a0:a8:04:80:d4:46:
                    12:a7:a5:d1:a8:f2:16:e9:92:67:42:0c:f0:d7:43:
                    bd:c5:66:c4:df:43:f0:d3:09:c9:a5:22:da:56:63:
                    ee:15:29:fa:02:39:76:e2:34:39:ae:6a:d5:40:88:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F8:FD:15:36:17:BA:53:2F:88:11:DF:B8:EF:DD:83:8E:26:93:34
            X509v3 Authority Key Identifier:
                keyid:FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1f:33:b0:11:89:a4:5c:38:68:ad:07:a2:6a:4b:8c:46:53:
         ae:f6:38:8d:e4:d1:f6:64:fd:62:15:c9:bf:f3:87:77:05:02:
         05:03:c6:1a:4e:8d:4d:ca:fe:7e:8f:2c:cb:51:f4:89:56:f8:
         e0:55:08:94:83:5a:e6:5a:89:a9:6b:3e:8e:ea:c5:c0:8b:ba:
         4f:cd:c0:fd:e5:91:64:af:e7:bd:9a:16:75:e6:9f:dc:41:c2:
         e3:b5:35:80:d5:00:d3:a0:56:c3:73:97:a5:bd:72:13:79:bf:
         f3:c9:1f:a3:77:a8:f5:5e:29:dc:59:51:aa:98:2b:e6:36:61:
         9f:40:cc:d6:90:cb:e5:b4:f7:75:e8:fe:8b:b7:2c:d7:21:76:
         7b:17:9a:ff:36:c7:da:c9:eb:2c:10:7d:92:e4:c5:8d:02:90:
         ae:01:6f:d9:08:7e:df:af:1f:04:c2:5e:3e:cd:cd:d6:f5:c1:
         ce:b3:39:02:4f:e7:2c:d3:6f:d5:98:bf:c0:b6:36:79:85:56:
         db:2f:17:39:8b:86:5e:6c:59:f0:28:9f:68:07:ca:b7:c9:a1:
         56:f9:c0:e8:4c:d9:1c:d0:4e:01:9c:9b:e3:3d:41:41:e9:97:
         07:24:c0:0a:2b:9d:30:b8:a7:36:df:7d:23:7b:68:4a:01:eb:
         21:4a:d6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:24 2026 by rpki-client