Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File:                     1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier:          lXHqfdUO1gu4n9Hm+tEf98phHj4yXggrcrk5cHTCvSA=
Subject key identifier:   40:57:A3:B3:95:9B:9A:EC:F8:47:78:AB:E2:50:84:41:13:C7:26:71
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer:       /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial:       019EBFC8257CBE6D0E17C53042F5E1567ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number:          06FB
Signing time:             Sat 13 Jun 2026 07:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:25 +0000
Files and hashes:         1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: aYsRsryp1+6Jzj4AJj8VFiiBvbC6FC9kAuqhxlEjiCc=)
                          2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:25:7c:be:6d:0e:17:c5:30:42:f5:e1:56:7a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
        Validity
            Not Before: Jun 13 07:00:25 2026 GMT
            Not After : Jun 14 07:00:25 2026 GMT
        Subject: CN=4057a3b3959b9aecf84778abe250844113c72671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:12:74:6c:98:37:c5:c3:34:dc:59:21:18:
                    7d:b3:a4:ef:bf:86:f5:ef:da:6c:63:e2:f7:e1:cb:
                    05:48:81:ef:8c:eb:11:7f:3b:fc:6d:b5:de:9a:a4:
                    ac:20:16:11:5c:4e:ee:2d:9a:22:30:a9:94:b2:80:
                    1a:6c:b4:d1:1c:e7:29:1e:37:e4:7e:6e:8b:64:62:
                    99:f5:c1:bb:2f:4d:39:63:a3:40:38:c4:44:1f:d4:
                    39:22:da:e4:a3:33:d0:39:d7:df:41:ec:e4:1a:13:
                    c4:d8:2d:d6:52:10:e6:ad:b9:f1:d9:73:14:84:24:
                    8e:11:41:5c:7a:9c:b7:ee:25:9c:71:40:27:39:d9:
                    8c:2a:01:66:4e:f7:45:15:33:09:cc:0b:f8:d8:80:
                    b1:71:08:52:79:ce:01:56:a4:42:7b:d8:24:9c:8e:
                    fa:b5:9a:ef:b6:f7:19:c0:fc:d5:9d:81:0a:e7:2b:
                    06:a9:64:51:81:21:a3:3a:90:8a:4a:67:bf:36:9c:
                    ca:a6:2d:4a:fd:64:60:88:77:eb:16:73:58:58:c0:
                    ba:e2:5f:d2:97:79:f0:77:96:c8:e5:27:7d:d6:9d:
                    0d:ff:d9:d6:e8:a5:56:28:3f:93:d6:d1:aa:ef:d4:
                    3d:de:a2:da:3b:4f:66:e2:f5:e9:74:e3:d3:35:98:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:57:A3:B3:95:9B:9A:EC:F8:47:78:AB:E2:50:84:41:13:C7:26:71
            X509v3 Authority Key Identifier:
                keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:25:d7:7b:3e:a8:9e:09:7d:66:ad:23:96:82:d7:d0:c0:d3:
         ac:50:e6:2d:f2:be:42:d7:ad:7c:07:69:ca:6b:f2:fa:e9:64:
         7d:c2:2a:94:ec:9b:3d:bd:c9:3b:a2:f6:9a:56:9e:dd:b8:bc:
         3e:5e:3f:cf:59:d7:eb:ef:30:67:14:4c:73:5e:78:7c:fb:15:
         a5:3e:b8:98:66:2e:78:e7:ba:bc:4a:31:98:3b:0f:99:04:e4:
         b1:11:70:36:3b:a8:de:98:9d:a3:e3:1a:36:a8:46:71:89:76:
         1c:3b:ad:d4:5e:97:58:6f:0d:c7:dc:f7:e1:49:93:67:11:26:
         fa:be:53:19:dd:6a:f7:49:28:4d:4e:a7:b9:91:8a:d6:33:36:
         a8:7f:4b:72:fc:12:d0:c5:3d:39:4a:26:6d:3a:ba:49:e3:39:
         96:b7:4c:b2:8f:e0:82:8a:26:61:5a:5b:4b:b3:a4:18:31:6f:
         96:bc:e8:d3:41:20:5f:b4:c2:f3:c8:ac:9c:d5:4d:e6:46:3b:
         cd:50:97:34:56:9c:94:e8:e2:ae:ee:89:3d:04:fd:4e:9e:85:
         5a:90:b1:6d:7d:a6:93:40:e4:96:55:f0:1d:a4:0f:83:18:5f:
         32:ed:da:50:15:0f:00:e9:10:ec:50:2e:e3:61:59:91:7b:68:
         de:9f:29:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:31:49 2026 by rpki-client