Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
File:                     FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft (raw, json)
Hash identifier:          b4Iuw6hvI7nqi3TGfnlFGlkFtZCQColHAk2dyYXu6WE=
Subject key identifier:   47:00:BF:4E:8F:66:6B:82:18:69:91:E7:E6:29:C1:1E:5E:2F:00:F3
Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0
Certificate issuer:       /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
Certificate serial:       019EBEECCF1D69B01656B61B34E59DF42CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 03:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:50 +0000
Files and hashes:         1: FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl (hash: 0EXLcRalF8e81pyaT8cKx1etpGhOnlHry+qO/ZyZQlc=)
                          2: OE-vaTYmCvvkebOY3MrRx4ljmi8.roa (hash: 0FkLAj5wepnlrTHbT8freYwSEALt3SIuuxDXD7TpUMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:cf:1d:69:b0:16:56:b6:1b:34:e5:9d:f4:2c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0
        Validity
            Not Before: Jun 13 03:00:50 2026 GMT
            Not After : Jun 14 03:00:50 2026 GMT
        Subject: CN=4700bf4e8f666b82186991e7e629c11e5e2f00f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:b0:ec:01:ea:ed:49:91:86:9e:a5:ae:f6:
                    3a:06:77:a7:95:5b:9e:53:dd:43:85:7c:2c:5a:99:
                    84:f6:e4:2c:8e:8e:07:93:e6:c1:1e:ae:59:86:d4:
                    ac:05:9e:07:40:4f:1d:ba:fe:03:38:f9:0b:9d:0a:
                    05:23:2a:8b:03:87:61:97:11:e2:f7:42:e7:53:99:
                    95:cc:77:27:db:f4:5c:53:7c:6c:93:e7:c2:c5:3f:
                    e5:10:0a:4c:26:b2:f3:32:90:b7:ca:b2:20:e7:d5:
                    ef:ef:0b:c4:a5:fe:8c:9b:04:f5:1c:59:fd:dd:ef:
                    ee:28:24:75:89:07:f0:ce:34:6a:9f:41:0f:eb:ed:
                    b7:f1:31:45:2f:bb:46:82:4f:58:a4:57:0a:64:7b:
                    4a:ee:57:11:92:2c:73:6a:c9:3b:d7:3e:f3:26:3e:
                    8c:31:a5:f1:f4:29:85:2b:d8:ad:15:83:2a:e2:1a:
                    a1:e9:59:f9:9e:76:4d:f9:0b:d3:68:81:7c:a6:66:
                    f8:7a:77:63:00:1b:ed:28:86:41:e0:92:3f:a5:8e:
                    00:0a:ae:3a:61:3c:04:7e:0c:0b:10:ef:d5:2f:a2:
                    50:34:05:f1:0c:3b:51:a7:4d:90:84:64:2e:29:e8:
                    ae:46:f5:3f:9b:41:ca:12:e9:dc:b9:43:e8:70:05:
                    4e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:00:BF:4E:8F:66:6B:82:18:69:91:E7:E6:29:C1:1E:5E:2F:00:F3
            X509v3 Authority Key Identifier:
                keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:d0:2b:74:51:7a:7a:64:43:9e:21:fd:5a:99:3e:63:b2:
         e7:3f:69:48:37:83:9e:d3:83:65:46:06:2d:95:06:57:25:29:
         88:09:74:4e:c0:37:1d:91:16:58:7b:1c:3c:4e:c0:a5:59:2d:
         86:9e:69:bd:20:45:1f:a5:88:0c:0c:48:7d:18:2f:3c:7c:ca:
         db:66:90:49:e8:f5:fc:2f:3a:49:ce:d0:65:86:30:91:20:e0:
         4c:2b:cb:75:f6:c9:19:6c:53:29:28:50:b6:a7:55:8f:c5:47:
         78:9b:1b:0a:d8:dc:99:a1:90:97:84:ec:34:8b:9a:25:52:56:
         8a:bb:4f:3b:d8:b1:5c:7f:ea:ee:3b:74:5a:5d:6c:ee:f5:1f:
         44:e5:01:e1:f0:a2:00:59:98:01:0c:c2:a0:21:84:d7:d8:48:
         50:2e:c8:b3:10:c4:a2:a2:12:48:7f:0d:aa:ed:cf:e7:b7:a4:
         fd:f4:29:83:d5:90:c2:87:e5:a7:de:6a:ae:5a:ec:03:63:b4:
         5c:4d:6c:4f:83:43:6f:9a:40:9a:38:d8:eb:8b:f3:54:12:a6:
         49:3a:9e:e9:ee:38:31:fd:a2:95:5a:86:c1:7c:ee:b3:c9:73:
         52:eb:f8:8b:4f:2d:64:50:12:a2:58:ab:bf:b2:c2:d2:26:e8:
         5b:3e:c6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:11 2026 by rpki-client