Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File:                     Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier:          AwndIiiMEW01OfdR8iFeBjq1oUynOsRDotEAogoBNNw=
Subject key identifier:   63:6A:20:C6:C8:D5:FA:6E:46:98:1A:81:CA:A5:2C:18:A8:93:25:83
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer:       /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial:       019EBEB6577789CA4554448F47CE51548A8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number:          16A6
Signing time:             Sat 13 Jun 2026 02:01:21 +0000
Manifest this update:     Sat 13 Jun 2026 02:01:21 +0000
Manifest next update:     Sun 14 Jun 2026 02:01:21 +0000
Files and hashes:         1: AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa (hash: 4272KJRiaDFrIJ1v9/e6Ri/6Hq4jjOw6FRmI0faWzNk=)
                          2: AjYgA83fEMBqjUVh5HogDvcF4y8.roa (hash: HmdReTlwO7q9dM9EymrF4uah3KgbjfgTzrb6znj83rY=)
                          3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: awyDQIHJ7KO5AmqbS+XszDkBeKhWkSdhEViJQGjcU08=)
                          4: Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa (hash: Vvj30zXhMxPg9hIHuIBZfVJuw/gM4ZcLB86Kjx9twm4=)
                          5: UziBeF9vZhF9BgfMO9asPeRvxQs.roa (hash: b93bcZj29ys10OmZ+k4Z6n8bU3xxStbAH0qnq54JvrM=)
                          6: XRdK0Q38L08ZiH0X_7usVjWgOqU.roa (hash: NUYv2BvkNVVgRi3KArH9hMTA+2Ow1tmbVRQjMS4xPYw=)
                          7: kHpTZdJdGSTy5cL36tdDAiifHMM.roa (hash: t+ZN1J9Tad6u02+/g5NMqtaDNj7REzYTAjeN7U4LYyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b6:57:77:89:ca:45:54:44:8f:47:ce:51:54:8a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
        Validity
            Not Before: Jun 13 02:01:21 2026 GMT
            Not After : Jun 14 02:01:21 2026 GMT
        Subject: CN=636a20c6c8d5fa6e46981a81caa52c18a8932583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:a7:7c:d0:d0:14:df:ac:b7:b9:05:a1:e2:
                    c2:cc:2b:1d:96:20:6f:90:23:a1:dd:40:8a:33:1e:
                    e6:3f:a6:d8:40:4f:ed:8d:af:4c:f6:4b:6b:c4:22:
                    26:a8:24:ca:44:31:f4:ad:0b:7d:e2:07:c2:88:35:
                    db:2d:49:b6:3a:85:e7:8e:67:31:1c:21:62:2e:51:
                    e5:73:4a:22:8f:27:42:85:c1:e8:60:f9:31:8d:23:
                    71:0d:c9:14:16:51:33:49:1a:ba:9c:d0:f3:c8:1b:
                    d6:ef:3d:09:75:73:8c:10:18:7e:3b:de:de:7e:3c:
                    a8:95:84:09:a6:3d:0d:16:32:ba:85:3b:4b:ab:f7:
                    9a:72:10:dd:53:6e:4a:c1:52:4d:c8:ab:f2:20:e9:
                    33:88:a7:49:1e:83:af:d6:c1:2e:9d:86:2d:bc:0a:
                    86:06:9c:bd:81:ee:4e:17:ab:8a:8a:af:65:38:11:
                    89:e0:28:75:cb:6c:cf:7e:0d:58:0a:28:24:3e:c9:
                    f1:0e:49:d6:d3:b5:04:fb:db:2e:55:3a:f9:bf:8b:
                    be:e7:e6:3a:6d:b2:11:ef:86:b1:eb:d5:41:62:73:
                    ad:d2:a7:e7:4d:ca:77:3a:20:f7:aa:65:17:80:d7:
                    8e:8e:33:39:83:c3:1a:de:1a:93:4a:85:6d:81:52:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6A:20:C6:C8:D5:FA:6E:46:98:1A:81:CA:A5:2C:18:A8:93:25:83
            X509v3 Authority Key Identifier:
                keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:c9:71:45:bf:8d:16:71:4b:b7:b4:b8:59:b6:a5:c7:42:
         99:99:94:2b:64:d9:fc:cb:9b:d0:a6:35:cd:5e:95:60:ef:ec:
         65:ea:88:0c:3b:ba:80:ea:1b:04:6e:1b:3c:1d:13:4c:2e:a8:
         38:2f:6b:27:04:cb:59:72:88:fb:29:7e:ca:94:e9:95:71:ed:
         5d:65:ae:a2:de:54:ea:cb:38:87:1b:36:43:3e:b6:61:77:f8:
         85:e9:1e:88:c4:48:ad:cc:21:13:70:81:14:46:fb:7b:01:43:
         ba:ee:e3:22:3d:9c:df:db:de:df:34:24:f7:a2:40:b1:c2:78:
         73:31:dc:77:6a:1c:ad:06:ae:75:80:3d:39:ec:1e:18:96:d7:
         61:60:82:e0:bb:7c:9e:f9:4d:0c:1d:6f:38:3f:e7:17:b9:03:
         4e:15:42:90:f5:58:53:f2:40:a5:b8:90:79:4c:e7:fa:5c:16:
         19:db:3d:cd:be:07:8b:9d:f6:b3:f2:20:e0:fc:ee:0d:7f:25:
         ba:00:c7:20:9f:54:8d:90:d1:8e:fc:e7:95:14:f0:22:7c:2e:
         da:58:94:b5:d4:32:25:58:56:c3:ac:21:5f:5c:f7:2f:11:64:
         4c:1e:66:39:89:b0:a1:fb:72:6f:e8:7b:a2:98:c8:97:7e:1a:
         71:bd:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:03 2026 by rpki-client