Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
File:                     AOezY1s9V4VgNwpYMDz81c2SkQU.mft (raw, json)
Hash identifier:          3tk5Jo/0c/uEns79As2/q2+FvViPYF9bN9dE/egR/j0=
Subject key identifier:   4A:62:94:12:30:9A:50:96:17:A1:71:44:28:D5:2C:73:FD:C5:C3:58
Authority key identifier: 00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05
Certificate issuer:       /CN=00e7b3635b3d578560370a58303cfcd5cd929105
Certificate serial:       019EBE7EC7F8A96A35AFAD28BED23E52A03C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
Manifest number:          106B
Signing time:             Sat 13 Jun 2026 01:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:40 +0000
Files and hashes:         1: AOezY1s9V4VgNwpYMDz81c2SkQU.crl (hash: ylL3toV3fJAJ0em7gPFn3VZiSBnXPMFaKNPboikbeig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:c7:f8:a9:6a:35:af:ad:28:be:d2:3e:52:a0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00e7b3635b3d578560370a58303cfcd5cd929105
        Validity
            Not Before: Jun 13 01:00:40 2026 GMT
            Not After : Jun 14 01:00:40 2026 GMT
        Subject: CN=4a629412309a509617a1714428d52c73fdc5c358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:f3:01:ae:c2:2a:66:73:a4:bd:49:72:8e:
                    b8:5c:84:0e:95:7e:5d:55:0d:70:7b:41:e8:20:17:
                    8d:5e:4f:c2:bf:d2:36:0b:88:a6:7d:35:12:55:c2:
                    ad:39:47:38:2d:21:15:7f:64:46:80:04:37:ad:95:
                    2b:39:d6:72:cd:00:f2:79:a5:87:99:7a:cc:b0:1f:
                    3e:24:01:74:3e:f7:6c:a5:7c:af:34:0c:55:96:76:
                    77:52:77:5c:44:9a:f4:a6:f2:9a:2d:3d:62:a8:86:
                    cb:a6:88:f7:b7:30:6e:8b:bb:36:40:76:f0:6d:75:
                    f9:6c:a2:85:66:72:37:b4:54:f7:3e:5a:82:63:0c:
                    26:08:8e:5a:12:d0:3d:f7:8f:2f:19:c9:1b:bd:ad:
                    d6:e1:1c:40:28:4f:ca:15:bd:a8:fc:3c:68:fd:af:
                    80:4d:a5:40:3d:c9:7c:a4:f5:57:63:f6:5d:37:02:
                    84:3f:95:22:83:50:48:09:1c:bf:5a:d1:56:c0:73:
                    ed:d4:1d:16:8d:ef:6b:22:cf:f6:97:5c:af:ab:3a:
                    da:81:5d:9f:44:04:a6:69:ea:5d:85:6c:47:99:56:
                    ee:09:f0:d9:b8:16:80:de:ff:b3:54:67:af:52:f4:
                    18:92:73:24:5e:15:a0:32:07:44:5a:ff:9e:74:2b:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:62:94:12:30:9A:50:96:17:A1:71:44:28:D5:2C:73:FD:C5:C3:58
            X509v3 Authority Key Identifier:
                keyid:00:E7:B3:63:5B:3D:57:85:60:37:0A:58:30:3C:FC:D5:CD:92:91:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOezY1s9V4VgNwpYMDz81c2SkQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46238a-a19a-4915-8a47-a0cd141513cb/1/AOezY1s9V4VgNwpYMDz81c2SkQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:30:5a:a1:cb:20:6f:55:f2:95:5c:9a:9f:01:ca:04:3c:
         7e:f1:5a:56:8d:3a:fe:4e:15:4c:d9:b6:d3:09:1f:fd:02:12:
         5d:76:7b:75:2c:af:a1:7f:18:92:50:f4:d5:95:7c:55:55:d2:
         cb:89:fc:97:e0:be:e0:64:70:98:1f:7f:35:31:a3:28:79:85:
         02:9d:d2:d5:a8:6b:8b:e0:c9:5c:8c:92:c5:f7:5b:19:51:1d:
         2e:d5:25:51:9d:c2:54:8c:ad:c5:72:19:51:1f:8f:ef:e7:bb:
         83:26:38:0a:6d:a4:c4:71:d9:36:a4:31:4e:c1:96:e3:2d:b8:
         c7:7a:de:2b:93:50:90:58:a3:c1:db:14:f1:68:66:b0:c5:83:
         43:4a:03:ea:1d:3e:e5:da:68:af:82:fb:a0:24:63:2e:d7:25:
         4f:a9:57:82:56:91:46:8f:a0:e3:5b:02:1d:3d:a4:cb:d7:1f:
         fe:a8:77:a5:1b:9b:42:b0:62:50:f5:6b:71:e5:cf:b9:3f:e9:
         c1:9d:3f:b8:19:e5:10:ef:f4:04:c6:52:91:37:49:e9:55:20:
         33:53:0d:8e:7d:3a:6b:55:87:cf:3a:c0:76:42:1c:9a:8f:72:
         26:61:9b:5a:22:b4:61:68:91:99:0d:f7:e1:9c:b1:35:35:46:
         6e:0a:dc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:33 2026 by rpki-client