Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
File:                     Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft (raw, json)
Hash identifier:          xKlSBMdClr8RQXqdzJCSQL0kdiGE4MU88hUJpGzt/7M=
Subject key identifier:   4E:92:F8:86:5C:58:08:00:1F:49:1D:35:DA:4B:63:8D:43:6D:4A:3D
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Certificate issuer:       /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial:       019EB921548649F61D488F11557393933E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
Manifest number:          016E
Signing time:             Fri 12 Jun 2026 00:00:29 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:29 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:29 +0000
Files and hashes:         1: Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl (hash: VVRw2oqNFmKc1qCz1QCazRpvFdKFcpMZdVftH6kFOh0=)
                          2: eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (hash: OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:54:86:49:f6:1d:48:8f:11:55:73:93:93:3e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
        Validity
            Not Before: Jun 12 00:00:29 2026 GMT
            Not After : Jun 13 00:00:29 2026 GMT
        Subject: CN=4e92f8865c5808001f491d35da4b638d436d4a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:6d:43:55:7b:e3:21:46:b3:76:14:61:38:
                    ba:96:26:0e:fd:72:11:6d:0b:6a:57:e5:3f:dd:36:
                    7e:f1:b1:e3:b0:65:31:5d:23:69:bb:9b:b8:52:54:
                    10:78:04:e8:de:15:9f:d0:f3:a3:04:58:b3:32:cc:
                    19:19:dc:52:c8:06:92:41:fd:99:f9:64:fd:f8:21:
                    f4:ad:c6:85:91:1e:b0:41:e8:66:02:66:53:a6:4b:
                    97:16:2c:32:7c:75:6f:d3:63:b3:f6:1f:91:f7:4b:
                    ad:86:a0:3e:8c:da:32:24:91:f4:d8:01:3a:74:43:
                    e1:d3:ac:2a:50:d0:cd:cb:7d:70:33:14:84:5e:a7:
                    be:f0:b1:fe:be:89:37:76:70:32:bf:de:70:81:30:
                    ae:dd:9d:8f:ab:a9:12:44:7e:d3:1b:8d:2e:52:6e:
                    d2:dc:39:dd:d7:e0:24:17:1c:e5:7e:38:d9:c9:9f:
                    bc:82:eb:cd:a5:35:57:85:31:a9:4f:df:55:51:ad:
                    82:ae:1a:c2:84:46:9d:e5:78:3d:81:e8:8e:64:8f:
                    c4:a9:1f:aa:6d:74:3c:c7:f7:86:39:1d:55:eb:cd:
                    de:a3:b6:07:6c:90:8f:62:80:23:f0:ba:f6:94:18:
                    66:b0:bb:c5:e8:d3:b1:07:fb:3f:b1:a3:43:65:d5:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:F8:86:5C:58:08:00:1F:49:1D:35:DA:4B:63:8D:43:6D:4A:3D
            X509v3 Authority Key Identifier:
                keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7c:3f:ca:04:d1:4c:d6:fe:07:70:83:24:99:b2:73:b5:67:
         e3:6a:62:de:b7:c8:6b:0f:64:d4:fc:c0:1b:ea:02:1f:e0:87:
         72:dc:24:1d:0a:ca:2e:2a:5e:f0:87:3e:a6:d1:e4:79:ee:34:
         0f:96:a4:48:45:72:b1:03:78:76:c2:50:a0:01:ab:6d:f9:f4:
         d2:48:92:c7:fc:71:b0:0d:6a:09:74:95:71:fc:15:93:8e:1c:
         8f:61:aa:8b:32:48:83:26:e6:08:0c:2d:88:d2:80:6b:42:0f:
         a8:eb:64:c3:59:7f:d8:21:fd:f5:26:55:e1:07:13:73:45:8c:
         66:c0:82:6b:ed:9a:e9:4b:70:26:4f:58:43:ee:ca:0c:f6:f5:
         da:68:85:d9:82:50:be:40:db:56:da:6d:6c:23:a8:7b:89:06:
         78:19:32:94:5f:16:17:25:39:ff:fe:81:6e:9e:cf:2a:81:dc:
         c5:d0:db:89:03:f4:e5:36:e0:aa:4b:c1:5d:ed:18:44:51:f0:
         3f:d6:08:0e:07:ac:05:15:5c:bc:9c:4a:11:c1:a5:a0:3e:9c:
         9d:97:06:40:15:20:e8:06:b8:66:73:93:0e:4f:e0:14:8c:e9:
         46:46:20:62:33:50:a7:20:78:5b:c2:b2:3f:cc:67:a4:25:0a:
         ee:20:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:16:57 2026 by rpki-client