Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          PNISffxsaSo5f5v0NQWP+mNjLDg1O+XFNOaKMBLD3rY=
Subject key identifier:   06:38:E2:74:3C:16:0F:9A:50:5A:16:44:11:39:DE:4D:D8:E8:24:2E
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       019F0E88EB4C50ABEC95B250924BEE80048A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          07B5
Signing time:             Sun 28 Jun 2026 14:01:21 +0000
Manifest this update:     Sun 28 Jun 2026 14:01:21 +0000
Manifest next update:     Mon 29 Jun 2026 14:01:21 +0000
Files and hashes:         1: Bv7qdIynKdZMI-P6-xF9VWllpNs.roa (hash: bLK9TvfWN2sH1qp924dJMpWvZP4Q59J3E6kgUjRdOMk=)
                          2: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: w4GjP4F7ce1RCdP78X8GEZUA+ect9wjE2c3Vu/Q/EsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0e:88:eb:4c:50:ab:ec:95:b2:50:92:4b:ee:80:04:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Jun 28 14:01:21 2026 GMT
            Not After : Jun 29 14:01:21 2026 GMT
        Subject: CN=0638e2743c160f9a505a16441139de4dd8e8242e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:3e:41:99:a4:ae:c1:19:21:a4:96:92:9f:
                    7c:6c:3a:d1:e4:07:18:6a:e6:5f:41:8b:a4:49:36:
                    c4:4d:a8:14:04:10:d6:20:b3:f7:bf:40:36:65:34:
                    c8:f6:0b:66:49:4c:fa:12:52:25:89:11:f6:c9:9f:
                    f1:ff:73:24:33:f9:82:b9:27:dd:8a:dd:be:55:b4:
                    52:c6:1c:61:d0:41:ff:c4:a3:f6:51:1b:22:30:98:
                    94:ae:f7:bc:76:6e:b5:1f:42:dd:c0:b6:5b:fb:7d:
                    e2:0e:00:76:7c:fc:80:48:26:4b:80:da:1d:77:01:
                    d6:1c:9b:4b:d3:3a:30:a7:07:ed:3f:fd:8f:41:0f:
                    ae:c1:67:df:56:7c:f3:ed:e2:7e:df:db:47:40:c1:
                    59:10:94:11:65:41:67:00:1f:40:03:26:d9:be:39:
                    95:35:0d:cc:91:df:67:53:02:f7:26:72:49:2d:36:
                    13:50:82:dd:a1:b1:5f:f0:a7:8f:d7:7c:28:27:21:
                    39:1e:47:91:5b:b6:90:95:4c:a7:2c:7d:b8:78:b7:
                    ee:ed:43:c6:ee:89:a8:33:6e:0b:f5:7d:ee:74:c1:
                    b0:af:9d:d2:6e:53:7f:35:7b:e5:4b:cf:68:6e:d5:
                    f3:40:fd:16:46:da:57:ac:8e:03:7d:2d:eb:89:c9:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:38:E2:74:3C:16:0F:9A:50:5A:16:44:11:39:DE:4D:D8:E8:24:2E
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:30:eb:89:84:44:f4:38:3e:74:95:6c:f5:32:37:26:5a:0a:
         3e:ac:43:58:7b:63:40:a8:bb:c6:52:69:87:d8:72:8f:b1:55:
         90:06:b6:91:67:13:88:2d:e0:88:35:3e:53:e5:9c:95:0c:7c:
         be:08:9a:91:a4:71:c6:05:b4:71:9e:87:05:3f:51:d8:de:07:
         88:49:99:c5:62:60:71:70:a9:c6:20:6b:12:e9:95:e2:aa:71:
         f9:02:40:4b:4a:13:3e:94:45:3d:fd:55:73:2e:75:3a:52:48:
         d8:e6:cd:21:0a:fb:85:e7:17:c6:2d:ea:18:82:14:fa:e4:72:
         7d:fd:a3:61:be:a1:26:a3:4d:14:dc:be:8e:d0:05:d1:83:1e:
         b1:03:fe:12:72:28:26:21:3b:46:bb:9f:b7:29:be:13:bb:eb:
         3f:5b:1a:3a:3a:bf:be:44:fe:04:55:ee:3d:da:46:d3:b6:b7:
         48:e9:49:03:13:d4:29:8b:a4:66:fa:f4:86:04:4d:1e:d7:69:
         cd:ac:1e:0f:67:cd:3d:8d:ea:b5:5c:fd:99:4c:2c:dd:11:c9:
         4e:46:d1:e2:d5:05:88:c7:1c:75:86:96:2d:7e:95:1d:ef:1e:
         7d:18:9b:2e:b8:3d:f2:ed:d5:cd:d0:67:59:81:4c:b3:54:09:
         a9:8a:4f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 16:20:43 2026 by rpki-client