Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File:                     9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier:          8i0wxTdn+jb1r4f+1IwTVs1uuFvVlalBI6gj+savaJY=
Subject key identifier:   A6:B8:34:5A:88:09:C5:03:8B:B8:2B:23:EA:38:13:93:BB:A6:91:8D
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer:       /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial:       019EBFC8AED0C969531500F37B2F83DD0AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number:          0D3B
Signing time:             Sat 13 Jun 2026 07:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:00 +0000
Files and hashes:         1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: 0nFIkrhUs7UpGMOBdEXkrU/puN+kzVGaEy6lH6R8BVY=)
                          2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:ae:d0:c9:69:53:15:00:f3:7b:2f:83:dd:0a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
        Validity
            Not Before: Jun 13 07:01:00 2026 GMT
            Not After : Jun 14 07:01:00 2026 GMT
        Subject: CN=a6b8345a8809c5038bb82b23ea381393bba6918d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d9:51:56:2e:56:9f:c7:9f:d0:f2:0f:2c:23:
                    05:86:3e:d7:ad:96:da:33:9f:7d:ee:18:94:39:19:
                    3a:e1:78:c7:51:f2:cb:32:e1:50:ec:6e:c2:62:fa:
                    be:81:0b:6a:5d:cb:f5:c2:07:88:d0:dc:30:24:c1:
                    76:46:0d:73:0a:f1:72:dc:3d:f5:5d:df:c4:c4:08:
                    50:e0:ed:60:2a:99:6e:2e:f9:81:5c:46:d5:83:61:
                    de:ff:08:2f:29:7b:94:9e:91:fb:ed:51:70:de:43:
                    6d:c3:f3:c7:d1:eb:42:96:52:a5:fb:89:fb:f9:24:
                    43:10:40:97:4a:1d:88:2f:52:81:dd:b5:d0:87:88:
                    fa:39:12:c7:87:4f:9b:2a:80:5e:02:a6:c4:3f:68:
                    16:1d:24:c2:13:4e:ef:93:c8:0b:c6:17:3a:b0:d2:
                    5a:a4:a2:ee:78:f9:3b:92:ef:7f:ca:1c:32:5c:d3:
                    52:77:71:36:6b:db:0f:a5:68:64:8a:dc:a0:88:02:
                    6d:40:65:b5:13:45:95:55:e7:61:f4:60:e2:64:61:
                    f1:46:87:e8:86:e6:aa:84:45:bf:87:50:30:a4:dc:
                    c8:f4:41:3d:1f:58:8f:65:9e:7d:81:7f:fc:80:fd:
                    a8:56:40:88:7a:6a:2d:be:72:da:d1:77:d5:b7:03:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B8:34:5A:88:09:C5:03:8B:B8:2B:23:EA:38:13:93:BB:A6:91:8D
            X509v3 Authority Key Identifier:
                keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:cc:49:1b:1d:3f:15:84:59:2a:6b:5f:ca:48:3a:01:b3:04:
         f7:a5:4b:a2:61:1d:26:54:61:9b:dd:a6:22:bc:b8:f6:48:00:
         17:d3:ce:37:cc:cc:b9:f9:50:a4:91:de:39:f9:d3:b4:18:25:
         f1:08:1b:12:e2:49:5e:12:f0:b0:b7:aa:fa:12:b4:0c:83:7d:
         aa:4b:7b:7b:65:fb:36:a0:dc:8a:36:5b:a9:55:c5:e6:50:70:
         81:68:f0:91:3b:77:4e:9c:12:d0:f4:78:eb:36:fe:49:7e:fb:
         c4:ea:aa:ee:e8:6b:8d:68:35:2b:dc:8e:70:d3:19:fa:e5:a6:
         5b:76:0f:c1:75:87:f9:6a:9c:a5:77:d3:61:09:51:c7:cb:f5:
         dd:8f:14:c0:8f:e2:fd:46:ac:0b:29:e0:3c:99:70:bb:8d:c3:
         88:c6:5e:fa:f2:c5:17:63:e2:c6:56:a9:6f:41:c3:7e:db:3c:
         70:7a:8c:a2:d2:d9:9f:74:9d:7e:44:64:fd:b2:3e:ed:6a:01:
         7a:db:0c:39:e9:23:a3:87:d0:3f:49:df:85:82:29:31:ff:93:
         5d:a4:a2:05:91:d2:ef:0f:26:45:b2:4b:fb:c0:b0:b9:38:8f:
         56:1f:2d:da:c2:b5:9c:28:35:af:fd:22:b2:61:fa:36:3d:a3:
         c5:df:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:40 2026 by rpki-client