Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
File:                     Cn4rBHu6-WxHybJyFbobEOYav28.mft (raw, json)
Hash identifier:          KFPFKwfavjDGbAAPuVz/Xfi7KDFA9HYDLxd4kElx78w=
Subject key identifier:   0D:5E:3F:9C:A9:1B:31:89:A6:67:84:46:C7:DC:01:B6:08:EA:E4:C0
Authority key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Certificate issuer:       /CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Certificate serial:       019EB845DD266AB4C563F6002F5B53D3E8A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
Manifest number:          FB
Signing time:             Thu 11 Jun 2026 20:00:46 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:46 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:46 +0000
Files and hashes:         1: Cn4rBHu6-WxHybJyFbobEOYav28.crl (hash: B1cgMaaSJunyQYP/Nl8XUAfasp7YTf4mUTyjiKsEWZ0=)
                          2: Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa (hash: qK3xm6Kuv/YRcthZV7gfsusrohvZRdkJr0GOyaQzsIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:dd:26:6a:b4:c5:63:f6:00:2f:5b:53:d3:e8:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
        Validity
            Not Before: Jun 11 20:00:46 2026 GMT
            Not After : Jun 12 20:00:46 2026 GMT
        Subject: CN=0d5e3f9ca91b3189a6678446c7dc01b608eae4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:f0:98:91:e6:e6:c2:8f:67:90:c7:08:29:
                    d6:6d:26:ca:f6:44:37:19:75:fd:8f:bb:91:a8:f3:
                    a0:6d:46:e0:fd:14:8a:39:81:82:a4:e0:cb:83:9c:
                    44:da:13:ed:c1:8a:ba:c0:3b:a6:ca:dd:ee:f3:8c:
                    b6:de:cf:96:c6:40:6e:1c:6b:f2:5e:c1:ec:21:83:
                    02:90:2c:ab:d2:09:68:ab:a3:29:a1:3e:b1:fd:71:
                    af:33:b8:08:3c:4a:3e:6e:b3:d8:17:96:93:e7:66:
                    d4:ed:d5:31:78:97:b7:55:2d:66:5f:43:8b:9a:c7:
                    d5:7d:23:77:be:60:1e:19:a7:6e:73:ea:c4:3f:7f:
                    33:3f:97:12:51:10:fb:34:bf:c2:c3:04:ba:e4:29:
                    da:31:74:dc:fb:a5:2b:7b:bf:c0:fd:5a:70:f5:f8:
                    c2:28:70:82:30:5b:77:08:2b:d6:e4:aa:d1:0d:53:
                    5f:cd:b4:65:a7:9f:0f:20:a3:b6:80:9e:93:60:37:
                    7a:e9:d2:a2:0e:61:25:d5:b8:e8:29:14:22:d0:7a:
                    db:da:00:25:44:7f:4e:a0:64:36:4b:ec:21:6f:41:
                    26:a8:3b:12:a3:45:3e:3d:46:65:ff:1e:24:30:a3:
                    a9:9e:d2:f3:41:0c:2c:d1:20:b0:e5:80:84:93:1a:
                    5d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5E:3F:9C:A9:1B:31:89:A6:67:84:46:C7:DC:01:B6:08:EA:E4:C0
            X509v3 Authority Key Identifier:
                keyid:0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:45:a3:cd:d6:84:d0:99:c2:80:d2:be:2e:fd:7b:f5:ee:2b:
         d1:c7:e1:3a:27:ab:e6:7c:81:c3:4c:e4:85:bb:7c:bb:ea:7b:
         d8:32:7b:2f:dc:14:b0:b7:48:58:80:39:85:6b:d4:ce:09:9b:
         01:24:0e:84:ee:4e:a9:f5:92:eb:9b:98:f1:fa:a8:e7:5d:30:
         23:d3:f2:53:41:c1:60:27:0e:04:67:7e:36:76:ad:b5:18:92:
         85:13:42:ef:98:4e:fb:7f:ec:2e:5b:71:ca:69:ac:be:30:42:
         34:1f:fd:54:8f:98:b9:5a:f6:46:ce:81:8f:63:b3:9f:bd:ba:
         d1:0b:9b:49:70:fd:05:51:22:c6:7f:b2:d1:26:d1:0d:61:cd:
         80:20:ce:7c:7e:dc:b8:ea:22:b5:c7:9c:3f:5e:0b:f4:24:43:
         33:9f:99:b9:18:b5:15:83:1d:48:eb:7c:f4:8c:0a:12:8f:bd:
         53:95:df:5f:ee:d5:ee:48:2d:8c:fc:90:e6:c7:45:3f:15:1f:
         bb:ff:49:f3:03:d2:d0:00:14:61:6e:e8:b1:18:d7:0b:3e:9a:
         12:29:36:3e:4d:56:88:71:33:8d:31:31:43:97:8d:c2:ce:7d:
         fd:c8:c3:58:bb:85:c4:73:f5:02:c9:31:78:a1:ad:0e:21:68:
         89:6e:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:41 2026 by rpki-client