Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File:                     9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier:          L3EDJpiSn2JVxoQaTWiovbX8HwP03Sq8rEFcNT/vdR4=
Subject key identifier:   4B:97:1C:2A:41:7A:DD:0F:D0:4C:90:AC:8D:3F:C2:13:9B:31:1E:B5
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer:       /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial:       019EBE478DEDFDFA3189FD9CD4E0DBA5CB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number:          08F3
Signing time:             Sat 13 Jun 2026 00:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:20 +0000
Files and hashes:         1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: 0oIUrPcH5SqLG5lslvVqyxm1iEF8b7Uoj0DuKZ+XgLU=)
                          2: bOWNnQQVbM5f-UYg-QV5mDSs02I.roa (hash: ZHzPwAfR/0qTdqa3UIdlS72kIIMUcV3Y09FsBOM1tW0=)
                          3: c3mRC2zskUzL_6AdndC0KZP1S14.roa (hash: BCkPN8vUy3sfeplOO5KxZSim29zaECBgi+38mZOABLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:8d:ed:fd:fa:31:89:fd:9c:d4:e0:db:a5:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f566016d878230128b58e279d661c195e6399588
        Validity
            Not Before: Jun 13 00:00:20 2026 GMT
            Not After : Jun 14 00:00:20 2026 GMT
        Subject: CN=4b971c2a417add0fd04c90ac8d3fc2139b311eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:85:b8:3f:78:b2:d2:5a:e2:32:34:19:a9:3b:
                    4b:7d:b8:95:95:92:d3:ba:5c:16:8a:5d:84:83:39:
                    97:6c:2d:df:09:db:75:80:e0:3d:e4:d4:26:28:05:
                    b4:e1:f8:0f:7a:af:db:b3:58:d9:86:7f:46:83:70:
                    73:e4:be:37:bb:51:ee:62:db:7e:d6:87:fd:27:2c:
                    8e:61:63:43:37:01:db:3e:3d:f4:ed:94:b2:cf:48:
                    66:3a:60:0c:07:29:7c:78:2c:35:1d:fa:f5:04:cd:
                    4c:17:a3:e1:01:a4:89:ea:94:6e:64:9b:40:3d:f2:
                    40:bc:4b:56:6a:a3:9d:ed:d2:db:5d:84:75:1e:70:
                    f2:14:ea:37:12:0e:61:1d:34:fb:96:9c:f2:a1:1a:
                    10:1d:69:e2:b0:ab:d9:df:e4:db:ea:7e:3b:b6:22:
                    ee:a1:d0:87:30:34:22:c4:94:c3:fd:f3:af:5b:f9:
                    64:30:85:05:0f:3d:2d:f2:f4:52:39:3d:36:fd:2a:
                    27:d3:66:b2:ca:60:c1:d3:a7:72:9d:a2:6e:2a:5d:
                    3a:34:5d:89:37:10:63:30:f7:51:f6:6e:b3:b3:44:
                    2f:15:24:3e:56:4c:79:b5:ac:a2:b1:6b:36:9f:66:
                    db:88:b8:c1:bd:51:2e:11:c5:42:59:b9:30:8e:07:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:97:1C:2A:41:7A:DD:0F:D0:4C:90:AC:8D:3F:C2:13:9B:31:1E:B5
            X509v3 Authority Key Identifier:
                keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:85:d3:0f:d6:1b:3e:78:57:8e:9e:9e:fb:78:7f:0c:9d:09:
         9d:d9:60:b4:d0:d2:4d:74:68:37:46:5e:62:0e:8a:a1:23:64:
         b0:59:1a:48:b2:a1:6f:27:14:26:2f:24:a8:85:b9:07:f5:b3:
         9e:33:7f:86:ac:11:2e:b5:76:03:12:e6:3c:2a:85:de:f3:5d:
         70:cf:89:4f:4e:df:9e:ee:c9:4e:96:48:67:84:49:b6:81:88:
         ba:d0:a7:17:f1:cd:22:8d:93:47:71:4c:da:5f:ed:43:78:51:
         d5:21:fb:0b:92:8c:42:2f:0a:33:14:e0:e5:7e:1d:d3:2e:e7:
         93:ca:16:b2:a0:e1:fe:b9:cc:e6:ef:a5:58:a3:27:7a:fe:9c:
         97:af:bf:8e:e7:57:fe:3b:e1:33:ae:f2:3c:25:d5:f9:e8:73:
         fe:99:41:fd:1b:ec:cc:33:7a:d6:b3:00:fe:b0:a4:fa:87:13:
         19:74:ba:03:20:f7:10:09:03:8c:08:99:d0:cc:ce:bb:d9:44:
         7e:6e:b5:e6:31:a0:b5:fa:43:e6:6f:e5:bc:49:76:19:d1:ff:
         a3:bd:91:33:2e:65:4c:8f:73:c8:c4:86:c9:4d:f0:31:a6:23:
         1f:b0:be:5b:2c:c2:ec:c7:2d:9c:e0:53:30:c1:b1:03:9c:6f:
         59:11:2c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:55:31 2026 by rpki-client