Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File:                     A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier:          vBbKqxpIDn1gWom3t+7P67mtyyhLrDQxLTC+v0tm4uc=
Subject key identifier:   A2:59:ED:1D:DC:9D:BE:FC:F3:3C:B5:45:12:EF:86:1C:95:EF:28:10
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer:       /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial:       019EC1B717ED7644858FC815D4DC1DB00EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number:          0686
Signing time:             Sat 13 Jun 2026 16:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:02 +0000
Files and hashes:         1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: 0iJT2R3qy+C8A67Sb89Tx2G4NkHZWjlZJVfTN+qBiC0=)
                          2: _n9XrS5UkjXNT6ARRtv7DUuvjEM.roa (hash: TnwTYDlKPUNQjp/SqCH7ciXQlU62x/PX5ypSd1AHyds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:17:ed:76:44:85:8f:c8:15:d4:dc:1d:b0:0e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
        Validity
            Not Before: Jun 13 16:01:02 2026 GMT
            Not After : Jun 14 16:01:02 2026 GMT
        Subject: CN=a259ed1ddc9dbefcf33cb54512ef861c95ef2810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:0a:01:26:13:ca:15:ad:c9:8e:4d:df:14:
                    03:a6:a4:20:59:12:f5:51:ac:a4:2f:61:4f:1a:24:
                    da:57:a9:ee:0e:c2:89:ea:05:87:0c:25:ff:de:56:
                    75:38:82:2b:52:c9:63:76:0a:dd:8a:9d:8c:4a:79:
                    64:4b:c6:e5:fb:ee:17:32:3a:fe:64:09:e3:41:4b:
                    95:8c:41:f0:69:2f:53:7c:16:a1:dc:f3:ef:cf:e6:
                    47:9b:57:33:f1:c4:4e:0f:20:12:fb:22:92:48:b2:
                    0c:1f:09:14:8b:46:a9:25:51:ae:23:11:1d:69:77:
                    2f:1d:3c:66:3e:ab:bf:5c:46:86:d1:05:9d:15:ae:
                    e9:61:72:76:4b:47:07:23:cd:2c:c4:34:66:25:fd:
                    f7:59:e6:2d:82:d9:c5:fb:9e:f3:fd:ef:c0:00:70:
                    31:ef:f0:3c:20:a8:fd:6e:cc:5f:ca:8d:c7:bb:65:
                    f6:6a:75:2a:4d:ec:89:36:b6:0e:97:88:0a:7b:ea:
                    c2:32:46:0a:5e:5e:4c:57:18:db:31:ce:3c:cd:e3:
                    aa:e8:27:99:e3:d1:25:09:7b:d6:dd:76:51:e1:39:
                    53:72:8c:91:c5:b8:98:47:ed:1d:56:18:70:75:70:
                    db:4f:db:c6:41:79:79:a8:b3:11:cf:c2:41:1f:34:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:59:ED:1D:DC:9D:BE:FC:F3:3C:B5:45:12:EF:86:1C:95:EF:28:10
            X509v3 Authority Key Identifier:
                keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0a:5b:4d:32:4c:16:d1:17:cf:f2:df:47:80:e8:c7:a8:a2:
         1d:7a:bc:14:7f:ce:4a:09:45:91:b7:31:52:e2:1e:71:95:93:
         24:d5:55:38:36:96:a4:6d:66:f0:7f:57:6c:5c:f0:b8:f4:b2:
         7e:ee:05:e7:00:27:e0:b3:33:ad:7e:2e:4c:c0:a6:43:00:36:
         54:2f:41:b7:e8:da:9b:28:c6:d5:74:f5:3f:87:95:c0:98:ee:
         46:2f:0b:e2:00:15:43:a6:f0:74:a6:2c:7f:df:81:d2:1e:20:
         1f:36:e2:2a:15:ca:73:08:15:42:ff:a2:59:ee:06:d4:2f:f1:
         95:93:04:a7:4e:05:d0:0b:d5:dc:cc:87:0e:af:70:5e:eb:a2:
         cf:2c:01:b5:92:19:63:9d:82:6d:75:bc:43:07:74:4c:f1:37:
         20:e9:f4:2b:2f:8d:cf:fb:90:bf:e4:65:f3:69:ce:10:db:7c:
         c9:1b:20:67:d4:fa:96:fa:d9:41:c9:7c:d3:61:0a:eb:79:cc:
         7d:b7:20:c2:fd:b5:96:db:b0:3c:68:b8:75:a1:e9:3f:4f:7c:
         92:5f:d2:21:f2:9e:a4:a6:86:54:83:43:86:72:7b:dc:fa:8b:
         6a:df:3e:45:1b:aa:eb:b9:92:c5:42:70:1b:aa:f7:7b:20:b0:
         71:7b:3a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:52 2026 by rpki-client