Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
File:                     ahRjzDw0FHZhFRif2a-ORMXblBI.mft (raw, json)
Hash identifier:          6rg/RC0M7mSnDHq5b6/wzUCCg1T3EPeBKWp2sVpktRk=
Subject key identifier:   28:5E:6B:65:68:29:BF:D7:D3:7C:69:86:61:79:E5:9B:87:12:24:EB
Authority key identifier: 6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
Certificate issuer:       /CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Certificate serial:       019EBFC947782A3FE349B96B3697B7998ABD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
Manifest number:          47
Signing time:             Sat 13 Jun 2026 07:01:39 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:39 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:39 +0000
Files and hashes:         1: 7A5Mo_HCT5tIYge5BK9JUhMg5Hw.roa (hash: Ep+Z/ryezb/UZFnKTPmt1RNdUI3JuXr1O0msLtfQ0TA=)
                          2: ahRjzDw0FHZhFRif2a-ORMXblBI.crl (hash: Huv3B89jiMTYl5+yG2M9mhwMOkz12c33JLeuEvbwjoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:47:78:2a:3f:e3:49:b9:6b:36:97:b7:99:8a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a1463cc3c3414766115189fd9af8e44c5db9412
        Validity
            Not Before: Jun 13 07:01:39 2026 GMT
            Not After : Jun 14 07:01:39 2026 GMT
        Subject: CN=285e6b656829bfd7d37c69866179e59b871224eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:71:4f:cd:0c:99:02:ec:82:5f:a9:36:59:8f:
                    a7:77:6b:fe:3a:30:89:1c:c3:c2:5f:47:ad:06:b7:
                    12:39:3c:b7:23:3d:69:45:d3:01:94:3b:81:66:fc:
                    e2:b5:d9:4b:b5:0f:07:fb:6f:af:30:d7:d0:1a:27:
                    f8:f1:f5:64:fa:75:3e:3b:40:ba:f5:5c:7f:30:5b:
                    61:4d:0d:12:2e:75:09:d4:61:cd:28:b3:fd:09:08:
                    b9:b8:e7:39:64:6b:a2:0b:93:80:54:0a:6c:50:e2:
                    e5:5a:b9:05:92:cd:db:02:d4:93:1f:02:93:1f:49:
                    7e:d8:05:8e:48:54:a4:ec:60:c6:cb:5e:a7:aa:43:
                    3c:9f:10:45:ab:a4:b7:6a:ba:07:b5:d1:13:97:bc:
                    d8:d4:97:75:b2:cf:52:23:c1:d8:b1:b5:dc:ff:92:
                    10:96:b5:de:e5:28:aa:02:e5:51:8e:e6:fb:37:f3:
                    ae:a0:9f:e6:3e:c2:00:d5:7f:45:a7:26:58:02:65:
                    d3:86:eb:87:ad:df:8d:b6:1c:20:c8:a1:84:58:28:
                    ad:c3:2f:a8:c1:71:c3:f5:bb:88:70:85:8d:4c:11:
                    78:95:a4:2c:c7:af:29:e6:2c:fc:b4:04:e4:c4:5b:
                    cc:0e:07:31:42:8e:97:de:93:c2:9f:70:b4:b6:56:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5E:6B:65:68:29:BF:D7:D3:7C:69:86:61:79:E5:9B:87:12:24:EB
            X509v3 Authority Key Identifier:
                keyid:6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:de:88:8d:52:f4:f8:7e:5d:6a:b3:e3:d0:22:6c:e3:78:d9:
         b5:93:6e:c0:f1:8a:32:7b:a9:8a:be:fb:21:80:a0:bb:b5:df:
         95:03:4d:0a:01:33:cb:a9:9c:02:aa:94:4e:30:0c:11:4a:b3:
         df:2d:19:8d:56:62:d1:e9:87:0a:3b:2c:d5:35:e9:69:e4:43:
         5e:c8:be:64:80:9a:66:a9:91:3c:eb:cd:b2:d6:4e:8b:5c:54:
         1b:db:44:f6:e4:ae:72:72:d4:55:89:ad:1d:f6:f6:43:c0:e3:
         47:92:19:bd:37:5a:f5:a2:a0:6d:31:dc:90:ad:53:d9:a7:b6:
         ca:a2:ec:92:1f:7a:07:07:d1:c3:4e:24:f1:d1:99:3c:f2:08:
         98:08:92:39:3d:f8:58:1e:6d:ad:d7:9e:d0:4f:0a:46:fc:ea:
         61:54:d0:8f:3a:20:da:8c:20:72:f0:19:f8:22:08:c9:be:30:
         10:5c:11:8b:13:0b:0e:fc:1f:69:15:1c:86:a5:ec:73:61:60:
         84:fd:41:a3:1f:c8:3a:e6:bb:7d:4d:57:ea:a4:d7:dd:73:99:
         48:b5:6c:93:1d:3a:2e:6c:d3:41:04:2b:e9:ca:0d:0d:d7:a5:
         28:76:1c:bf:ae:ae:08:a3:98:d0:d8:89:b4:70:9a:f6:89:b4:
         50:9c:ac:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:55 2026 by rpki-client