Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
File:                     FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json)
Hash identifier:          6PR98CmM60vZqVXgoHek87shV0R1J5WVIPMUHWkTfAg=
Subject key identifier:   2A:DD:CE:8A:78:E1:57:CC:59:94:6A:5F:25:DC:7C:3F:17:41:85:42
Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
Certificate issuer:       /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Certificate serial:       019EC25C1949B39115709345E42811C0CB8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
Manifest number:          0231
Signing time:             Sat 13 Jun 2026 19:01:16 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:16 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:16 +0000
Files and hashes:         1: 6Qw2qfKOtpd_LKkKsTDZ3ejOc18.roa (hash: bj0QwSywJCHEKu3qq7k1s6hD+djiOxQDSPNiFdM0bYw=)
                          2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: H/Mn/ZpjiaanHlL1psjvdfhY/4oVUgVa4SA4TJmz3D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:19:49:b3:91:15:70:93:45:e4:28:11:c0:cb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
        Validity
            Not Before: Jun 13 19:01:16 2026 GMT
            Not After : Jun 14 19:01:16 2026 GMT
        Subject: CN=2addce8a78e157cc59946a5f25dc7c3f17418542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:37:f7:b3:26:3b:c1:2b:d8:67:68:67:f2:
                    97:1e:8b:0b:af:68:4f:25:e6:eb:35:3c:58:c5:98:
                    1f:a3:a6:5d:a8:b3:fe:ab:a6:0d:73:30:71:7d:dc:
                    f1:a0:3d:98:78:7c:09:db:eb:5b:7f:2f:a2:14:7a:
                    95:da:56:5c:8a:cc:55:23:cb:05:e7:5a:1a:cf:8b:
                    05:a6:48:1a:cc:5b:f9:26:2c:c7:82:3f:ec:8b:ac:
                    d9:b6:f1:9f:66:f7:fb:7d:d6:15:f0:da:f8:23:63:
                    66:5a:7b:50:79:10:c0:f2:05:ed:e9:8d:64:08:e2:
                    03:9d:74:2f:c4:44:b9:86:9f:fb:11:b7:20:64:1b:
                    4e:8f:5f:b0:e7:cc:4d:cb:71:26:30:c3:ad:be:7f:
                    6d:cd:f9:81:0c:83:31:2e:fd:c6:8d:c7:16:66:70:
                    a3:8b:0d:4b:6a:8b:34:2b:c1:77:b1:17:ba:68:66:
                    a5:86:72:0a:59:f1:f1:d1:3c:25:76:20:8b:8f:93:
                    84:1e:65:f2:50:ac:ad:06:8e:f4:8c:94:5b:74:3a:
                    08:ec:4d:4b:31:00:4f:6f:23:1f:05:82:31:ce:e3:
                    41:3b:a9:9d:65:e3:1e:0e:88:a5:e1:34:47:7d:da:
                    31:c0:a9:81:42:e9:73:59:57:aa:6f:ea:db:03:0c:
                    86:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DD:CE:8A:78:E1:57:CC:59:94:6A:5F:25:DC:7C:3F:17:41:85:42
            X509v3 Authority Key Identifier:
                keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:60:be:e9:90:bc:5f:b3:22:c3:22:58:5f:99:f0:1c:bd:99:
         f8:3a:47:ed:fc:3f:db:fc:fc:ac:5b:26:0c:e3:d7:49:6e:dd:
         6f:13:42:f3:ea:bd:0b:1c:0c:94:b1:44:4f:e2:6e:f0:e3:04:
         ca:80:0e:7c:4c:dd:90:d4:92:77:db:ce:ba:28:45:65:a6:1e:
         e8:83:d5:bb:50:2d:06:bc:62:fe:2b:09:57:5c:5e:75:c9:b4:
         a1:03:d5:f4:44:67:61:15:8f:d6:ef:73:66:67:c3:c2:d4:f7:
         2c:0f:c6:0f:13:26:bb:f7:8a:14:81:3b:96:f7:df:e0:6a:86:
         74:81:77:ce:19:7e:d5:41:4f:b4:00:34:a9:04:5c:18:d2:ce:
         2b:7a:f5:d3:e0:b6:d6:9c:1f:73:c2:77:4b:48:28:e8:1c:b5:
         d1:c0:1f:1c:b4:7d:3b:c7:50:83:08:4d:53:11:f8:e5:e5:42:
         2b:74:2f:93:9b:a2:09:bd:7e:c0:28:c7:1f:5e:8e:f1:ef:40:
         7c:9f:9b:51:68:db:24:dc:9d:e6:fb:9f:09:fd:e4:34:c3:04:
         c3:c0:fe:11:37:97:1b:01:ce:8f:82:6e:c0:9c:7f:d4:00:a1:
         19:89:d7:69:b8:50:84:df:ef:b6:eb:f6:48:2d:71:c4:09:0e:
         2d:b0:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:04 2026 by rpki-client