Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File:                     tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier:          G0ExVFAe/60FmZkdIECGW5Rp2SjwvO4pxHdur8FFrOc=
Subject key identifier:   44:F5:BB:92:01:0D:82:40:65:51:49:48:27:34:DC:CA:79:18:6E:9A
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer:       /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial:       019EC337363716994AE8F8333E96D09C0346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number:          0FDC
Signing time:             Sat 13 Jun 2026 23:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:35 +0000
Files and hashes:         1: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: 72LKdMsNTFRE5vxTb+LYRNoKXlQgxzFODlb9Ln5RRcI=)
                          2: wFIxH6rmc0pTO3lHbm1q54JXQUw.roa (hash: LdJ/iIkB/Qkjc76ikiZz0rGCtU2IPzIjdQ2qezYDSK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:36:37:16:99:4a:e8:f8:33:3e:96:d0:9c:03:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
        Validity
            Not Before: Jun 13 23:00:35 2026 GMT
            Not After : Jun 14 23:00:35 2026 GMT
        Subject: CN=44f5bb92010d8240655149482734dcca79186e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:93:87:2e:07:75:51:69:e4:6e:ed:35:17:
                    53:11:63:34:2e:3f:ef:02:db:12:0f:ec:5b:9e:90:
                    49:20:d0:8b:03:d3:5d:60:2b:9f:3e:6e:50:53:4d:
                    93:ce:93:ea:54:bc:05:8e:87:54:5c:7f:13:73:1d:
                    44:4b:a0:11:e7:ac:8b:c3:58:f8:a7:8d:c3:b2:cb:
                    e9:54:4c:96:89:e7:4e:e1:fc:5e:fe:d1:1a:6d:da:
                    78:87:a6:f7:ee:80:3f:e5:6f:8d:cd:58:fb:06:5b:
                    91:52:f7:be:29:81:cb:6b:ad:4b:86:fe:a3:9b:23:
                    74:87:f9:ce:a8:04:f6:de:11:82:de:11:6e:01:bf:
                    05:32:c3:2d:9f:cf:d3:65:47:d7:c9:8f:fd:fa:ca:
                    a6:d2:e4:e7:69:f8:2d:ed:e3:fe:47:12:8b:ce:ba:
                    ea:01:6d:c6:2e:4a:9b:de:17:f9:51:52:1b:6e:c8:
                    aa:c5:63:67:66:7c:bf:08:09:60:a8:2b:06:20:a5:
                    2d:24:73:a1:f2:31:ee:64:d0:02:76:27:a0:be:cb:
                    9a:c3:66:7e:ad:c4:05:0c:53:24:60:59:ea:6b:fb:
                    98:67:34:8e:bf:63:09:57:aa:56:05:7f:46:1f:0d:
                    eb:1c:aa:e3:99:f8:4b:56:e2:18:f0:cd:85:e7:49:
                    cc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:BB:92:01:0D:82:40:65:51:49:48:27:34:DC:CA:79:18:6E:9A
            X509v3 Authority Key Identifier:
                keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d3:24:80:b5:27:6a:8a:55:b2:21:bf:1b:c4:52:bc:7e:2b:
         af:22:ec:d5:da:c5:ee:73:4f:78:79:53:d3:1f:69:5a:ef:38:
         fe:b7:58:de:a8:a3:24:79:15:b6:83:eb:10:54:50:e1:97:c9:
         86:58:f5:b3:9a:66:ec:76:d4:b5:c1:b0:a7:a3:fa:e3:18:79:
         08:93:51:ff:34:b3:82:1e:7c:b6:b0:09:e4:10:33:37:fe:54:
         f5:13:a5:0f:fd:c0:c4:bb:b4:90:e4:ee:8f:e6:80:7f:e5:11:
         0f:ee:51:fe:b4:50:bd:33:02:23:61:45:6c:93:56:ad:27:a6:
         ba:20:f7:93:a0:b8:62:6d:68:e2:74:94:31:ac:6c:0d:ca:e4:
         a9:c3:88:cd:bd:43:9e:b5:ae:59:33:f1:ac:e2:2e:90:ca:0a:
         34:57:ef:a9:f7:a9:b3:e6:9d:bd:f3:39:0a:b0:63:f4:bd:b3:
         d5:c5:6d:44:49:08:c1:fc:a7:ce:9f:2d:87:ca:a2:f8:38:b7:
         2e:14:13:33:ea:49:26:19:20:63:5a:38:6a:5d:86:9c:da:43:
         ff:c4:19:43:9c:68:5c:3b:02:ed:49:80:f4:b1:ff:c1:da:95:
         d6:19:d3:d8:68:78:8b:74:b8:10:9c:da:e5:0c:45:97:a1:a4:
         d8:77:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:44 2026 by rpki-client