Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File:                     f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier:          Ygh2YDg+FgICpD/Y2OOkGl2epEDQNDQwNb9Cw5UCXK0=
Subject key identifier:   29:62:AF:D1:DD:57:3F:C4:D7:7E:D2:CC:9C:A1:72:BB:6D:E9:18:4F
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer:       /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial:       019EC0A42EFBF1CC06BF093D04EA034DB7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number:          069B
Signing time:             Sat 13 Jun 2026 11:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:45 +0000
Files and hashes:         1: 2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa (hash: KLT4hK24Sh8oeO2o5C+Q82TS186W3R8CPounbGac6TY=)
                          2: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: nt3nl52f355ATcOdXfKLMj7x+xv14ArDIQuCwB8OE/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:2e:fb:f1:cc:06:bf:09:3d:04:ea:03:4d:b7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
        Validity
            Not Before: Jun 13 11:00:45 2026 GMT
            Not After : Jun 14 11:00:45 2026 GMT
        Subject: CN=2962afd1dd573fc4d77ed2cc9ca172bb6de9184f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:0c:10:50:28:95:73:95:02:7a:d1:c0:96:
                    b1:45:ab:48:6b:34:1b:ab:08:6a:1f:ee:90:d9:d8:
                    8a:08:00:76:81:5c:85:55:40:54:04:d5:e6:9c:e6:
                    2c:03:0e:1f:2e:26:dd:29:72:59:ef:d9:d9:ec:d9:
                    c6:cd:a0:aa:35:36:b4:61:01:62:bd:ca:04:20:74:
                    fb:1e:74:38:83:1c:18:8c:e6:5c:0b:4c:05:77:13:
                    a0:6a:9e:5a:98:1d:35:79:93:af:3a:31:fe:50:a5:
                    ad:ac:fb:d8:36:11:51:57:51:0e:c7:55:47:d0:3d:
                    68:fa:94:e8:9c:3f:70:ef:a8:ac:ae:5a:83:56:5c:
                    95:cd:f0:1a:d8:a2:4f:0d:5a:c3:61:a8:0e:fe:e3:
                    4e:34:cc:a9:8c:75:ef:02:a1:c3:bb:b5:e3:1d:eb:
                    83:ad:26:89:29:5a:7a:c4:e8:90:59:72:71:b0:4e:
                    be:42:3f:37:ed:38:a0:82:a8:54:e1:78:2b:dd:db:
                    2f:91:fe:f0:c5:5c:5b:71:91:7b:21:fa:49:15:1b:
                    d4:fd:04:e4:90:12:6b:ef:81:57:33:17:be:a8:74:
                    5b:f0:77:9e:d9:3a:46:6f:ba:28:45:36:9f:a7:a7:
                    83:f3:46:4a:d7:0f:cb:38:46:61:be:e9:e1:1d:d2:
                    0e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:62:AF:D1:DD:57:3F:C4:D7:7E:D2:CC:9C:A1:72:BB:6D:E9:18:4F
            X509v3 Authority Key Identifier:
                keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:ca:2b:39:71:64:34:6e:60:c5:50:c7:f6:6d:c7:a6:19:
         a6:1d:31:a1:1c:fa:45:ea:4f:f6:1e:c9:57:13:23:3e:3a:ae:
         20:60:5e:c3:0a:c9:e1:ab:8d:3f:13:e5:b6:fa:b0:4e:95:2a:
         7b:f4:34:d4:84:9c:db:e4:97:39:8c:89:bb:0a:87:f7:b0:0f:
         c1:09:f2:28:75:bf:c3:20:ce:db:47:b7:05:c0:35:a1:b0:23:
         ec:6f:c2:3a:35:1a:ce:12:5b:96:d1:e5:be:48:b3:59:73:0e:
         e4:4a:4f:a6:29:40:4d:5a:a6:08:a6:03:c5:b5:a7:1d:b5:a4:
         e1:39:20:cd:95:12:f6:11:b2:2b:da:0b:b8:bc:f6:3d:48:b1:
         55:61:e7:03:53:a7:85:bc:28:ef:86:4b:af:b8:2f:a0:71:d1:
         9e:99:fe:ff:fb:58:fd:61:b3:db:c4:a2:c5:cf:bc:39:7c:e1:
         d1:22:40:bb:5c:1a:0f:a1:c7:de:bf:a0:5a:10:dd:3b:e3:bf:
         84:a1:6e:d4:e1:0b:b5:ae:91:7a:92:ca:04:cc:15:2c:78:28:
         1f:66:cf:a6:fb:22:3f:2e:6c:ae:8e:33:fc:93:e9:89:24:ce:
         72:28:94:80:d9:5d:38:c1:f3:53:46:7b:dc:05:99:0a:8e:6e:
         28:99:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:48 2026 by rpki-client