Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
File:                     gDLAf6oi_rWWn_HztJBdHqHk3us.mft (raw, json)
Hash identifier:          9Un3MlvMrLFC+z55hCMwZPxCjJyyGSGnHw4nlw0H1vA=
Subject key identifier:   85:79:E4:19:FF:71:32:06:F4:B3:45:B9:47:16:67:E5:90:4C:60:C9
Authority key identifier: 80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB
Certificate issuer:       /CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
Certificate serial:       019EC3DCB8B1D4C628D010208EEC42490AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
Manifest number:          161C
Signing time:             Sun 14 Jun 2026 02:01:22 +0000
Manifest this update:     Sun 14 Jun 2026 02:01:22 +0000
Manifest next update:     Mon 15 Jun 2026 02:01:22 +0000
Files and hashes:         1: CiIrcBM9yA3ZewdtgV4N1CH8GZY.roa (hash: /RFq6SqUsBxBmefl/oJJgPlTdelQAi+UQdtXbYFfKHs=)
                          2: gDLAf6oi_rWWn_HztJBdHqHk3us.crl (hash: 04yqOXV8LPb7NhztPCGwfbKblx5bBsgHF3/4XO+AfOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:b8:b1:d4:c6:28:d0:10:20:8e:ec:42:49:0a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8032c07faa22feb5969ff1f3b4905d1ea1e4deeb
        Validity
            Not Before: Jun 14 02:01:22 2026 GMT
            Not After : Jun 15 02:01:22 2026 GMT
        Subject: CN=8579e419ff713206f4b345b9471667e5904c60c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:70:8f:fa:ab:a2:38:d4:ea:e5:3c:78:95:d9:
                    b0:51:b7:2d:88:8c:4d:11:15:ff:e8:9c:44:7b:ee:
                    2d:27:b1:72:c5:32:fd:44:63:50:d6:e3:b8:e5:aa:
                    70:0b:ff:57:ef:99:a8:58:09:01:99:8f:7b:5f:9f:
                    fd:0c:97:f9:61:a6:22:20:01:91:a7:e0:d8:53:a6:
                    3a:e1:11:00:0d:87:54:57:ff:1d:cb:63:73:fd:f5:
                    55:3d:69:47:7e:53:9a:08:de:5f:ea:0b:54:0f:32:
                    61:0b:08:10:82:a5:7b:ea:e3:9d:8b:ab:32:26:a0:
                    66:0a:ff:b1:bc:5c:32:e0:27:67:a4:30:af:7a:3c:
                    11:bf:04:d0:2c:7e:b9:b0:7b:03:05:68:63:be:59:
                    4d:79:f7:e6:ce:fe:24:90:6b:1d:b8:c3:04:31:fe:
                    d3:08:3e:6f:e4:43:57:f7:1d:e8:e9:5a:e3:cf:bc:
                    7c:ab:0f:2c:bb:8c:9a:8e:41:9a:74:5c:7b:24:ec:
                    9a:1a:5b:40:b5:b8:59:c0:89:0b:7d:be:89:d7:56:
                    a5:8a:49:01:49:2d:26:a2:33:9b:83:8c:bc:a9:cf:
                    ca:69:c5:a7:7c:c8:c5:f2:e0:71:c3:f5:32:b2:24:
                    6c:d4:6a:d0:a6:e0:4d:b1:db:68:11:b9:78:b5:e9:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:79:E4:19:FF:71:32:06:F4:B3:45:B9:47:16:67:E5:90:4C:60:C9
            X509v3 Authority Key Identifier:
                keyid:80:32:C0:7F:AA:22:FE:B5:96:9F:F1:F3:B4:90:5D:1E:A1:E4:DE:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gDLAf6oi_rWWn_HztJBdHqHk3us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a96ac3-3990-45aa-b48e-870cc5f43cd5/1/gDLAf6oi_rWWn_HztJBdHqHk3us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:83:1d:48:f5:85:90:f2:2e:9c:85:b8:f8:cf:a7:22:73:f7:
         07:bc:36:58:16:b2:cd:f8:7f:a2:b6:42:f8:b8:4f:3c:87:01:
         00:d4:6b:3b:6e:a5:1e:b7:b5:00:57:34:01:b3:1d:60:9a:6a:
         69:4c:4d:bd:9a:7c:29:5b:b3:fc:6d:71:49:db:3b:70:c8:4c:
         ac:c1:a2:1a:e7:eb:f9:8d:e6:10:f9:43:fa:cb:32:1e:77:53:
         de:c4:d7:90:4e:e3:50:dd:f1:7b:c7:c1:9c:d6:5d:40:4b:10:
         c0:5e:15:32:91:7e:35:3d:9c:ea:e1:12:fe:f8:58:b6:dd:0c:
         58:18:b9:fb:6a:9f:e0:68:a9:12:52:c5:37:5b:7b:e2:69:5e:
         e4:e9:7b:f8:ef:09:65:e7:03:24:14:8a:8f:cc:31:7b:fa:10:
         c5:a1:6b:2f:c1:e1:04:f7:60:76:64:b2:8e:44:8b:a1:29:76:
         78:a6:7b:9b:e1:98:56:4e:b3:bf:f8:98:e3:03:c8:6a:43:86:
         0d:33:50:4a:59:53:b0:72:95:84:55:dc:24:c6:4e:03:ae:8c:
         54:71:b3:45:e1:42:bf:e9:69:68:0d:a1:2c:60:fe:81:99:a0:
         ce:9b:d4:ab:d8:05:cd:a9:bf:8a:49:e0:b4:08:29:ef:d8:02:
         69:bb:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:54 2026 by rpki-client