Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
File:                     ASBXSFLGu5I_yzgEJcT9PtXAupM.mft (raw, json)
Hash identifier:          oIe1F5GsBqJt9HYByv9p8cQSLG4nzruo6CTCyF0PWo0=
Subject key identifier:   77:E1:52:0C:7B:78:BD:F3:8A:79:E2:07:F8:A7:DF:33:29:48:96:39
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       019EC1B6EBC72DC4C682636F0ABA655573B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
Manifest number:          0FCF
Signing time:             Sat 13 Jun 2026 16:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:50 +0000
Files and hashes:         1: 9pE-MzpxUWjMwN57topeGGEUf_Y.roa (hash: +r9c8Shr2KLHGQZe5b0OVCErW9cr3Dze6HgtdQg6FcU=)
                          2: ASBXSFLGu5I_yzgEJcT9PtXAupM.crl (hash: 8fw8T2RbcWuD3dx02CTkeyqKsL6fqZCHZvbWYvax/Gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:eb:c7:2d:c4:c6:82:63:6f:0a:ba:65:55:73:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: Jun 13 16:00:50 2026 GMT
            Not After : Jun 14 16:00:50 2026 GMT
        Subject: CN=77e1520c7b78bdf38a79e207f8a7df3329489639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:aa:ed:db:16:63:0f:76:bf:26:b7:29:f5:3f:
                    91:f2:0d:b6:88:0e:fa:f8:f9:db:ee:dc:24:d2:3e:
                    ec:4a:4b:f4:0a:23:5e:5b:ea:62:47:a4:75:56:72:
                    22:07:f9:3f:eb:24:f1:4b:4c:0c:4f:62:ba:5e:9a:
                    99:48:41:19:04:ce:a9:f2:1a:5b:32:7c:8d:f0:27:
                    cb:2f:03:06:53:9b:1d:78:d2:a7:06:f7:05:3a:88:
                    95:a7:ed:bf:c4:fa:ae:70:f2:8b:98:00:4b:b2:cb:
                    61:e5:67:64:cd:e8:a0:4e:da:aa:75:1a:8e:e3:82:
                    f8:de:3d:50:51:b0:fb:28:45:7c:fb:f3:9c:bd:0a:
                    4b:9b:95:ca:f7:c7:1d:d5:5b:68:6a:c1:89:17:e7:
                    86:82:ad:58:23:9e:9f:48:d1:05:a5:1c:fe:71:07:
                    b0:37:fe:cd:4e:fa:29:99:92:ea:54:50:f6:46:c8:
                    b2:b7:ad:12:bb:9a:9f:89:8e:6b:7e:b7:8c:9e:68:
                    73:48:01:3a:c2:d6:a3:b7:07:26:94:e4:e1:c0:ce:
                    26:42:4e:ac:1e:54:5a:46:05:05:ed:af:92:30:20:
                    ad:83:ed:2f:99:6c:9c:d8:80:b7:cc:6d:cc:f8:5a:
                    4f:1e:be:eb:98:7b:5c:13:c5:6d:00:fe:a8:92:45:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E1:52:0C:7B:78:BD:F3:8A:79:E2:07:F8:A7:DF:33:29:48:96:39
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:71:9a:a7:dc:03:3c:40:83:37:9d:1e:7d:c2:c2:8e:40:95:
         ae:86:a6:1a:73:15:6f:97:7b:52:42:92:39:e2:bb:68:af:95:
         3e:a3:67:43:c5:6a:0f:9d:5d:05:5b:32:29:57:c1:22:1b:e5:
         d5:7a:22:61:d3:c8:f9:38:87:ce:0e:50:73:2d:0a:ea:99:02:
         8c:06:cc:12:90:2a:f7:c2:30:e3:bc:60:ea:4e:23:b5:96:94:
         8a:16:c4:b0:ff:21:76:44:a0:34:c4:9a:65:92:0b:00:90:37:
         e0:51:ec:1d:af:b6:3c:05:41:79:ea:f4:01:02:2a:cb:d1:06:
         6d:d6:9f:cc:b1:fa:3b:b4:3b:38:e5:82:d3:bd:0b:67:94:4d:
         63:f1:a0:53:e6:13:ef:00:51:8a:d8:d2:26:93:20:a7:a4:3e:
         6c:82:f8:35:ee:ba:f1:64:8d:80:29:85:1a:9f:16:b3:b3:9a:
         c3:30:56:7f:e9:63:50:fd:b7:d6:9d:48:7b:ed:36:42:73:b1:
         02:1d:77:ed:4e:a1:fc:bd:11:3c:d4:7f:d1:84:9a:f1:2c:6a:
         b1:93:c2:55:d6:6e:96:27:47:01:c6:fd:f8:40:69:93:57:9f:
         46:39:41:e7:39:8a:3c:1e:b2:f5:2c:77:c7:ed:10:fd:e8:93:
         f5:43:fa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:54:48 2026 by rpki-client