Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File:                     1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier:          7KfjCrkTNxjxFodCOZ5DlXUB4R9ien+lYK54tJJ4URw=
Subject key identifier:   69:17:45:DD:82:F2:DE:BA:9B:5F:26:F4:A2:EB:CE:EA:A3:E2:69:B9
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer:       /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial:       019F186769FCE4B83ECF821051B9CD5488FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number:          0A12
Signing time:             Tue 30 Jun 2026 12:00:58 +0000
Manifest this update:     Tue 30 Jun 2026 12:00:58 +0000
Manifest next update:     Wed 01 Jul 2026 12:00:58 +0000
Files and hashes:         1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: VPRCfXNbMR7Uh3tgftqdZ8EpoibtebxcTCrjTmbqDAo=)
                          2: 453Eh0yOu4NWyTs7TE3bjcioo9g.roa (hash: A5IxuJXRfXNLs2Sl4j7rfwj7i30+ZqNR7cmzpPYYHeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:69:fc:e4:b8:3e:cf:82:10:51:b9:cd:54:88:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
        Validity
            Not Before: Jun 30 12:00:58 2026 GMT
            Not After : Jul  1 12:00:58 2026 GMT
        Subject: CN=691745dd82f2deba9b5f26f4a2ebceeaa3e269b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:a1:84:b5:db:fd:e1:60:db:ed:24:a5:08:
                    ee:dc:10:bb:ba:fc:52:42:9d:83:af:77:e1:3f:c6:
                    b1:64:9e:08:5f:65:b2:81:5a:f9:77:80:66:36:a3:
                    f4:ff:60:36:ff:b0:9f:d9:80:3c:44:58:be:8a:26:
                    05:7c:0b:6f:25:64:2b:a2:e2:4d:85:f3:d0:02:85:
                    cc:a8:36:19:69:89:e3:99:45:fc:5a:d6:d3:e0:4c:
                    12:8d:28:ba:b5:bf:d4:4f:90:14:c4:63:08:93:92:
                    9f:11:5d:04:1a:d9:30:26:77:6e:a1:48:7d:bc:b2:
                    ca:da:1e:b5:64:00:aa:7d:2b:4b:ee:f5:3b:67:8c:
                    c3:a1:03:bf:c7:6a:d4:79:18:f3:fd:a5:80:ba:74:
                    4e:2c:05:12:8a:a4:b5:03:ca:44:7f:00:86:34:79:
                    4f:d2:34:39:31:f6:5c:19:be:da:36:b7:69:89:fd:
                    08:cd:1d:43:84:5f:ce:42:0a:7d:bf:bd:37:ba:1b:
                    9a:73:fe:a3:7d:6c:e5:cf:9e:34:4a:78:32:91:2a:
                    ac:3c:7a:fc:59:c2:ff:c5:d9:4b:48:05:2e:b1:19:
                    b8:b2:84:1f:27:15:f1:21:07:4d:8b:fb:78:5d:dc:
                    8f:e5:a1:8b:26:5a:52:36:c2:3b:69:a5:41:33:39:
                    44:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:17:45:DD:82:F2:DE:BA:9B:5F:26:F4:A2:EB:CE:EA:A3:E2:69:B9
            X509v3 Authority Key Identifier:
                keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:97:c0:a3:2f:86:9c:f9:64:46:d3:d1:18:fc:eb:23:d7:
         3a:aa:01:6a:25:8c:5b:92:33:4c:fa:ed:3f:a3:a8:22:0b:66:
         86:9b:63:8e:d6:53:52:9a:22:40:c1:d0:da:7c:ad:b3:b8:cc:
         63:f7:6e:e6:96:1d:49:5e:33:27:3d:2c:31:2c:ec:35:64:5a:
         09:4e:10:5c:fd:e0:c6:96:53:f1:a9:5f:dd:30:34:ab:d2:f1:
         f0:b2:9f:27:a0:af:a8:b9:d4:a7:1d:57:14:0f:f9:a8:e3:c7:
         ac:28:6a:3b:45:3a:0d:ee:0e:9e:03:9d:87:2f:ea:d9:27:2b:
         d9:03:b3:7e:12:eb:67:45:4c:2b:fc:0b:59:86:a6:f7:9a:2b:
         ea:3b:f1:0b:96:2c:9e:0c:17:8b:e1:df:1c:a1:5c:4d:f2:57:
         ec:dc:80:99:ed:a8:51:e9:7b:5d:1a:eb:7a:d3:31:48:22:2a:
         d0:b8:b4:0f:09:ab:ed:f4:d4:82:11:39:5d:54:41:02:84:ad:
         23:91:2c:f9:45:7d:a4:b5:34:0f:cf:79:c4:a7:64:24:13:87:
         c1:6e:0c:71:03:d9:c0:e9:f1:ab:3d:d1:d3:37:4a:e0:96:b3:
         cf:96:67:6c:87:e6:c9:3d:74:7e:a6:0e:bf:ca:cf:0c:73:e2:
         a6:80:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:52 2026 by rpki-client