Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File:                     169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier:          r5aBCsup4NBs2PX+lYWN+FrndbOraJ+7nIq8YYKIMss=
Subject key identifier:   D5:9B:32:F7:3B:B1:7E:0E:72:0D:7E:33:D5:93:89:1E:4F:C9:7A:60
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer:       /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial:       019EBF23F4EA3E72F4E37349A3159877BC58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number:          0F02
Signing time:             Sat 13 Jun 2026 04:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:05 +0000
Files and hashes:         1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: iX4Ysdqe34J6O6y1XhkXkDpyZH79+DGxKkCB4ylbSow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:f4:ea:3e:72:f4:e3:73:49:a3:15:98:77:bc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
        Validity
            Not Before: Jun 13 04:01:05 2026 GMT
            Not After : Jun 14 04:01:05 2026 GMT
        Subject: CN=d59b32f73bb17e0e720d7e33d593891e4fc97a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:49:97:b5:44:17:ee:f0:56:a3:21:d5:33:
                    0e:98:c2:f4:0d:4c:cb:42:72:b3:47:73:71:06:96:
                    69:9b:e2:1e:93:a9:13:f7:cd:24:a6:81:c9:d4:96:
                    04:2b:60:a5:cb:98:5c:ef:17:de:bc:50:fa:52:12:
                    8d:8e:37:30:d0:7c:70:d5:0b:52:51:f8:e2:c0:40:
                    6b:10:4e:5c:20:38:dc:2a:61:94:a0:93:63:db:dd:
                    fd:0a:7b:da:ed:64:a3:64:08:91:0a:56:35:ab:e4:
                    4b:ff:4a:bb:20:8e:8a:40:ef:5d:15:ae:e7:0e:8c:
                    5a:ad:ce:2a:50:40:52:9c:5c:84:f1:81:74:8b:82:
                    e5:f8:2a:ab:db:29:48:b1:68:9c:be:e9:65:f4:c1:
                    d3:49:be:4c:70:b8:16:c6:4f:bd:ae:d7:fc:f9:10:
                    35:b1:2d:b8:c7:8d:64:cd:ab:dd:cb:99:fd:6f:16:
                    55:57:e5:49:9f:23:2c:3d:be:2c:b7:43:f6:bd:19:
                    0f:ff:de:30:06:5d:df:f6:58:3a:32:f4:e7:41:57:
                    ec:e2:30:05:12:5f:91:d5:cd:26:44:66:54:c6:fe:
                    11:f5:ac:41:7b:4d:86:86:9f:4d:99:e9:d9:0b:8c:
                    16:85:5d:d0:1f:82:9e:9c:0a:49:9b:c2:90:66:ea:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9B:32:F7:3B:B1:7E:0E:72:0D:7E:33:D5:93:89:1E:4F:C9:7A:60
            X509v3 Authority Key Identifier:
                keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:95:8f:39:e8:58:97:6c:89:03:49:14:8a:e1:1c:03:ae:7a:
         88:b2:44:76:25:a6:c6:38:d6:c9:aa:6e:67:66:06:8a:72:5b:
         d9:60:3e:33:4d:1f:84:3c:7a:33:ac:8c:cd:ae:7d:65:28:0d:
         8e:eb:c8:60:21:d5:10:ae:80:af:85:5b:e4:e2:32:c7:60:d6:
         da:86:03:73:0b:18:7b:2c:95:bf:20:2a:9b:f8:2e:37:00:e7:
         1d:65:67:a0:42:75:d5:00:1a:1b:1a:d6:c0:bf:1c:13:78:7b:
         dd:40:92:c6:0a:81:04:c1:76:ec:d2:3b:5f:74:a4:94:e5:06:
         27:88:a0:ee:45:05:84:08:70:b3:d3:57:70:3a:b9:6c:cd:b1:
         6f:99:ee:b4:b1:5a:b6:a4:3a:87:97:83:75:46:0a:e4:d0:80:
         1e:89:a0:9d:27:42:c6:48:05:1e:94:55:bd:1a:21:8b:b4:48:
         20:32:09:43:b8:0c:ef:49:9f:10:c0:23:58:a4:de:b6:d5:86:
         cd:35:3b:c5:9d:80:74:2e:25:77:8c:79:9d:a9:97:56:ba:3f:
         05:10:d8:26:8e:2c:93:87:5b:8e:ca:00:a4:af:93:90:12:48:
         e4:c8:73:c4:40:83:5c:dc:fc:0a:7a:25:f8:8e:25:87:8e:5f:
         45:06:c9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:29 2026 by rpki-client