Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File:                     h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier:          6KtJItRDkfgsuHmii+wCKHJ6H6aT9EssE4qr8W2B1Xs=
Subject key identifier:   F4:89:C6:47:34:D1:67:12:42:01:A2:3E:B4:0F:DE:92:43:FB:0D:76
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer:       /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial:       019E90262BD5DC10AD1076E6396BAD4F058B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number:          16FD
Signing time:             Thu 04 Jun 2026 01:01:21 +0000
Manifest this update:     Thu 04 Jun 2026 01:01:21 +0000
Manifest next update:     Fri 05 Jun 2026 01:01:21 +0000
Files and hashes:         1: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: 8uvwnIPornGJIj63XER3dENxPfQi6W9UjaV4bz5ofHI=)
                          2: pf2F8jqDhpJAuisFDDVK53DtP1c.roa (hash: gUPm9iAsnfZdwPMydWDH2B8Ki6HOxvfT2gKOapzDjp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:26:2b:d5:dc:10:ad:10:76:e6:39:6b:ad:4f:05:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
        Validity
            Not Before: Jun  4 01:01:21 2026 GMT
            Not After : Jun  5 01:01:21 2026 GMT
        Subject: CN=f489c64734d167124201a23eb40fde9243fb0d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:dc:fd:d3:0c:9d:61:47:2e:31:5d:c7:c1:
                    7e:95:11:af:fe:2a:9a:66:f9:f7:87:87:5d:1e:90:
                    d7:95:e4:fe:3d:89:7e:a1:dc:e0:40:c4:ce:31:23:
                    05:75:61:20:d8:a7:67:81:85:f1:f1:14:56:b1:31:
                    48:89:c5:d6:f4:22:82:62:04:03:03:ed:a6:ba:cd:
                    56:d0:f0:e0:46:a7:12:19:fe:71:ca:92:a4:42:8e:
                    b2:aa:88:46:c0:ec:84:ab:7c:5d:f1:44:d2:2d:9d:
                    35:af:04:b4:db:b2:0c:69:bd:fb:7f:79:1e:90:74:
                    1e:21:d9:90:09:89:21:18:68:85:5a:c2:2c:2d:43:
                    06:71:9e:2a:59:27:6f:f6:ee:37:ea:5d:a8:18:9f:
                    be:b4:41:cc:4d:b9:04:a8:8f:be:d0:73:1a:57:81:
                    2e:e7:ee:7e:f0:87:e8:46:86:82:a9:88:c9:27:e6:
                    64:62:19:8b:d1:7a:92:ea:a1:90:38:a4:58:e1:63:
                    d0:eb:93:6e:9e:54:fc:9e:fc:c1:81:a2:d9:78:05:
                    73:3e:99:d4:9a:10:12:ad:00:95:c6:27:ac:43:6d:
                    5a:e0:f5:e6:7f:da:c6:70:ef:b8:61:66:c1:5d:13:
                    a6:b0:4e:35:73:a1:64:40:9d:88:2f:21:55:a4:94:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:89:C6:47:34:D1:67:12:42:01:A2:3E:B4:0F:DE:92:43:FB:0D:76
            X509v3 Authority Key Identifier:
                keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:06:cc:08:1b:11:5a:84:85:ea:08:46:ca:5d:ea:6c:27:72:
         1b:e7:00:1f:a2:31:a9:e3:e8:18:29:47:2b:5c:03:4d:fd:58:
         55:09:81:c4:c6:b4:38:a0:30:ad:51:42:91:6a:3f:82:ee:e3:
         ff:c5:3b:85:3e:34:47:25:a8:34:bd:5d:ba:cb:6f:b7:14:de:
         87:cd:92:ac:65:5b:f4:b3:97:04:e0:d1:f9:43:be:2d:e9:74:
         10:b3:42:2c:58:be:57:00:d5:85:3a:c9:5d:0c:9f:b7:a6:da:
         94:be:91:fe:13:2b:52:d2:39:4c:86:1e:12:cd:68:bb:4c:7a:
         3e:86:0f:b8:fa:7b:53:31:84:94:78:21:e0:26:d1:78:56:96:
         fd:c8:93:8e:1f:1a:5d:9a:60:df:13:35:a3:e5:bf:60:6a:94:
         57:e2:74:dd:0e:ad:09:d1:a9:a4:bb:3d:ba:01:a1:b6:79:6a:
         ac:d3:e7:16:e8:c3:e5:87:b3:9a:4b:cc:3e:f1:5a:55:cd:31:
         dc:d2:57:93:9b:7c:10:86:b3:91:45:d4:31:77:6f:78:52:cb:
         01:61:69:e2:03:c8:79:f8:94:d3:80:48:35:5d:c1:29:94:e9:
         25:15:27:6b:04:6a:7e:52:19:ca:21:c8:01:07:e6:f2:0f:e8:
         85:72:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:18:45 2026 by rpki-client