Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
File:                     8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft (raw, json)
Hash identifier:          bT0Wl5Tv2YgHIP7SIITG8QhX+RI0X3Z1qTafL7vDKpY=
Subject key identifier:   A2:CD:71:DA:10:86:26:2B:4C:A7:61:10:E3:B6:EF:01:D7:D5:AF:3C
Authority key identifier: F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32
Certificate issuer:       /CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
Certificate serial:       019EBF5A99164D1367E19F9ABB7E6D1E1075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
Manifest number:          0A69
Signing time:             Sat 13 Jun 2026 05:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:46 +0000
Files and hashes:         1: 4Ha_2CCRvgscsZ-r3GcIaCfRW64.roa (hash: 9pkWaCiovhlv2wqBCLqW3gVUQadAo/HKtdeFnVdYabQ=)
                          2: 8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl (hash: 2HDxbMRpPFNJ878xoZkYdXGg6O0/fUwvfRvMJ7lGtM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:99:16:4d:13:67:e1:9f:9a:bb:7e:6d:1e:10:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1af38ad44069be654d2e787f96c4e8fd26a5132
        Validity
            Not Before: Jun 13 05:00:46 2026 GMT
            Not After : Jun 14 05:00:46 2026 GMT
        Subject: CN=a2cd71da1086262b4ca76110e3b6ef01d7d5af3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:1c:2b:ac:b3:fc:1c:9c:35:77:a2:61:7f:
                    d4:63:98:0d:05:93:c7:e5:8b:ea:7c:27:22:7c:7a:
                    5e:7f:9b:14:7b:c5:97:df:00:2d:97:de:ca:bb:a5:
                    97:a7:90:ff:ed:c4:b8:7b:38:7d:9d:fc:22:c9:af:
                    5c:df:5e:d9:9a:9f:64:3d:3b:dc:2c:0e:d5:ae:6a:
                    0e:d7:fd:ba:3b:46:90:cf:5a:22:ee:7a:81:33:de:
                    07:f0:cf:28:88:c4:43:d8:50:6b:d8:26:9c:75:f8:
                    b5:7a:12:59:1f:8f:99:4d:ec:80:9b:44:11:c5:b5:
                    42:c1:1d:2b:cf:f4:d0:94:b5:7c:4a:9f:06:fb:96:
                    05:cc:57:5f:8a:fd:04:a6:47:84:11:8c:60:0c:94:
                    90:04:6d:f1:a3:6d:ee:60:0c:81:db:aa:ac:6b:ab:
                    6f:67:77:4f:b8:8c:66:f8:74:1f:ef:55:f7:9d:27:
                    d5:3f:9e:85:17:23:92:66:39:fd:e1:b7:92:06:a5:
                    09:e8:85:97:83:c2:83:a6:77:88:8f:e5:5b:b1:a6:
                    36:d7:8c:83:df:81:68:40:34:59:44:e2:67:cb:66:
                    ab:a9:25:69:1c:df:86:f1:cb:78:0b:4a:5b:28:b4:
                    68:ef:ca:84:d4:ef:62:ad:41:ff:50:61:59:fa:68:
                    c6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CD:71:DA:10:86:26:2B:4C:A7:61:10:E3:B6:EF:01:D7:D5:AF:3C
            X509v3 Authority Key Identifier:
                keyid:F1:AF:38:AD:44:06:9B:E6:54:D2:E7:87:F9:6C:4E:8F:D2:6A:51:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a84rUQGm-ZU0ueH-WxOj9JqUTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0fc3a8-0cf1-4e05-8e6c-d7a1b3df9a03/1/8a84rUQGm-ZU0ueH-WxOj9JqUTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:09:9c:4c:cb:81:bc:ba:e5:67:2f:3c:91:a4:b9:a4:27:
         c6:af:c3:9a:96:34:d5:b3:95:35:83:64:e2:27:a4:b6:df:3b:
         a9:67:ca:56:c1:0d:e0:a1:03:e1:85:c4:57:19:b5:27:af:cb:
         fe:42:da:35:60:f2:41:69:60:01:74:c0:5d:ca:43:cc:86:02:
         9b:35:1d:5a:4d:a8:cf:e3:ed:e8:ce:46:56:93:7e:bb:91:f2:
         f1:a8:a7:46:d5:dd:15:05:32:1a:b2:51:46:f7:f2:a4:12:c0:
         cf:6f:f8:3d:f7:ac:a7:56:e5:af:93:b2:43:be:19:8f:6a:0c:
         56:f3:13:60:98:04:cc:91:60:01:94:35:59:09:0d:ad:6f:e2:
         ee:ff:16:fc:7f:d6:5a:81:ad:37:6c:53:fb:b4:44:2b:f8:0e:
         6e:fd:59:36:53:14:d4:c2:98:d9:6d:b6:8f:e9:0b:7a:4b:70:
         df:be:f2:d9:c2:61:1c:d6:3b:43:6c:9d:ad:68:ce:c7:1b:c2:
         46:47:65:6e:39:ba:4a:7f:b0:17:8b:2e:5f:18:fe:17:09:6b:
         53:1a:b1:79:2a:a7:e5:72:e4:83:d8:e4:4e:87:82:54:e3:f7:
         a0:2b:39:10:d4:b1:bd:89:cc:c1:7c:65:f0:4e:ee:35:38:d5:
         99:5a:60:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:13 2026 by rpki-client