Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
File:                     P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft (raw, json)
Hash identifier:          bkQXHd7/G7qZbJ9AhOtTZURjElBVt1oQlHG3gcndNaI=
Subject key identifier:   76:7F:AD:EE:C9:4B:A9:BC:33:9D:49:FA:D7:10:2F:0C:67:A2:63:1B
Authority key identifier: 3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A
Certificate issuer:       /CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
Certificate serial:       019EB73381ACEB402122EF2119A26EFC676F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
Manifest number:          014A
Signing time:             Thu 11 Jun 2026 15:01:06 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:06 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:06 +0000
Files and hashes:         1: P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl (hash: g9UOrpT+hwfB5TxjBjJBN1pQcEGh1RDodHHFzauZL2g=)
                          2: Z2hi7ItQ4ePG-89oC3NsOmcwohk.roa (hash: hpOgQ0YBy/9da8UmbyZyoarOicwd5QMZEwe4cjjhqvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:81:ac:eb:40:21:22:ef:21:19:a2:6e:fc:67:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8b0dcb79fe0ae48ba83269ec12838470cae90a
        Validity
            Not Before: Jun 11 15:01:06 2026 GMT
            Not After : Jun 12 15:01:06 2026 GMT
        Subject: CN=767fadeec94ba9bc339d49fad7102f0c67a2631b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b0:20:1d:8d:76:fb:27:c7:d5:8c:cd:4c:dd:
                    08:f3:51:1e:35:94:47:dd:60:7d:b4:28:a3:21:73:
                    f9:ba:2f:7b:9e:f6:fb:02:8c:fe:65:74:3d:67:48:
                    b0:7f:e4:fc:00:f1:eb:ec:9b:8d:4a:3f:c6:80:9e:
                    75:3e:b4:95:8f:45:f0:f2:36:22:e0:63:0f:ea:f1:
                    c8:fa:ac:cf:dd:d9:0a:aa:d4:96:fd:d1:3e:bf:a4:
                    3c:4c:f1:95:3b:ce:e7:d1:0f:9e:07:7e:9a:55:d1:
                    7f:1b:b0:33:00:7c:32:d5:c0:17:07:39:e4:6a:ff:
                    75:6e:b9:ec:a3:52:bd:7a:9a:5a:1a:48:a5:fb:a8:
                    36:ab:c1:0d:60:be:12:73:e4:91:16:03:f9:ec:92:
                    54:88:c7:4a:d8:fe:dd:ae:3e:de:f4:f7:33:bc:8c:
                    31:19:14:d7:cd:b3:52:35:cd:72:17:db:4f:ef:b8:
                    b2:1b:4c:1d:11:34:00:a4:57:02:22:5d:73:73:7d:
                    71:4b:cd:11:a2:cb:d1:5e:9e:03:4e:a2:77:ec:ed:
                    14:73:c9:09:88:67:84:36:9a:1c:b3:a9:9d:51:19:
                    92:a2:9e:6f:03:60:09:81:52:8e:64:a9:4f:e7:ea:
                    d0:0c:2e:6a:12:cd:9f:21:89:88:8a:92:7e:ac:31:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7F:AD:EE:C9:4B:A9:BC:33:9D:49:FA:D7:10:2F:0C:67:A2:63:1B
            X509v3 Authority Key Identifier:
                keyid:3F:8B:0D:CB:79:FE:0A:E4:8B:A8:32:69:EC:12:83:84:70:CA:E9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f906d5-63d8-41fa-a2cf-5c37ca7a57a5/1/P4sNy3n-CuSLqDJp7BKDhHDK6Qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a9:d8:17:d3:a7:00:dd:8d:5e:4d:d5:75:b5:4d:05:b9:1f:
         0d:2a:e0:64:9b:1d:51:29:20:94:81:31:7b:f8:ff:f5:ed:7a:
         9e:24:8d:5f:e0:91:56:2b:67:4b:11:22:fb:e1:bf:78:79:66:
         6d:a9:64:fa:75:14:bb:2e:7f:c1:d7:8c:08:e5:66:fa:07:93:
         9a:6b:96:7b:03:12:73:36:b2:4d:2f:ee:fa:06:43:2f:1d:26:
         c0:de:81:08:ae:3e:ff:1a:ad:17:d9:fd:75:da:32:78:e2:9d:
         9e:dd:aa:c6:0e:3a:8d:06:87:6b:d5:c8:e5:61:62:af:2c:3e:
         5b:25:26:ae:f2:3c:b1:0b:5b:30:51:d8:7c:5f:94:b6:ac:b8:
         1c:4c:78:7f:9b:11:3a:41:ef:4e:02:5c:e3:b5:43:74:08:b2:
         ea:20:6d:b5:fa:a1:70:c5:89:fc:42:4c:bb:90:15:ff:d0:a7:
         e1:a1:fe:b6:46:55:99:ad:10:a0:b5:53:43:8f:a4:82:8a:43:
         51:82:0e:b4:46:5e:38:b4:3f:17:52:26:92:15:b8:88:8a:dc:
         dc:73:b3:d5:e8:5f:49:03:8f:99:66:37:93:89:3a:e1:b3:76:
         82:90:23:89:a7:07:1d:13:41:b9:9d:63:e4:94:07:ef:2f:1a:
         50:5e:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:59 2026 by rpki-client