Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
File:                     au3YfPvkKOnEKzDCLhlh9xfx20k.mft (raw, json)
Hash identifier:          OzevM2pIKnLzvBTMCf7mb45mKx64lbgggD/pdyCLJkg=
Subject key identifier:   C6:9E:54:FC:50:1E:36:67:2A:38:EC:7F:E5:7D:F7:E0:28:95:5D:08
Authority key identifier: 6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49
Certificate issuer:       /CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
Certificate serial:       019EB6C547F059042E09558E836B9E6AE8FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
Manifest number:          016D
Signing time:             Thu 11 Jun 2026 13:00:42 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:42 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:42 +0000
Files and hashes:         1: au3YfPvkKOnEKzDCLhlh9xfx20k.crl (hash: P3XDgbDoIUtQxqWkDuRAoS4Me/16bnzD7lLil0aCQaA=)
                          2: vWjIW1eikUSm_cPtDhI_f3EodY4.roa (hash: PyLkHRQBEvUL9Bk7Ermj8JEaYKhwlYCHxtYPNjdnGVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:47:f0:59:04:2e:09:55:8e:83:6b:9e:6a:e8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedd87cfbe428e9c42b30c22e1961f717f1db49
        Validity
            Not Before: Jun 11 13:00:42 2026 GMT
            Not After : Jun 12 13:00:42 2026 GMT
        Subject: CN=c69e54fc501e36672a38ec7fe57df7e028955d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:3c:30:af:db:72:a6:41:01:fb:fa:14:c7:
                    20:04:91:16:ff:3c:ca:dc:59:45:0e:48:95:ac:ac:
                    ee:ac:1f:00:1c:e6:20:5a:08:d2:05:c3:8b:de:5a:
                    fd:e9:1b:ea:2b:91:ef:3c:da:22:4f:47:a0:07:d7:
                    0e:78:ea:62:93:ea:44:d7:48:3c:e3:c1:18:0d:e1:
                    2d:9c:81:a7:50:fb:72:e6:4d:f2:7c:91:90:70:84:
                    95:0c:f2:62:98:d4:0a:3d:06:b6:36:13:e6:b4:47:
                    63:5e:f4:8c:4c:51:53:93:cc:c4:77:74:c0:67:46:
                    34:a2:cd:17:94:1c:7b:35:11:4e:62:15:43:57:64:
                    e3:46:92:94:e9:20:12:21:25:94:80:a0:0e:8e:d1:
                    fc:ef:61:0a:37:87:bf:33:de:13:9f:e7:5c:53:b2:
                    3a:5c:a5:06:f3:6d:73:86:7f:e3:e9:b6:02:2c:9e:
                    34:e3:13:c1:13:cd:e5:4e:31:a9:0b:d3:52:43:88:
                    67:0c:8a:3c:b0:95:9c:d3:df:27:d8:b7:b5:d3:9f:
                    2d:41:cf:5c:cc:57:a8:55:5b:09:e8:2f:47:46:3f:
                    73:f4:c7:f8:a6:9f:fa:ad:33:77:b1:da:24:11:c6:
                    12:ac:45:5f:cb:01:7d:b4:1c:4b:56:58:42:1b:c3:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9E:54:FC:50:1E:36:67:2A:38:EC:7F:E5:7D:F7:E0:28:95:5D:08
            X509v3 Authority Key Identifier:
                keyid:6A:ED:D8:7C:FB:E4:28:E9:C4:2B:30:C2:2E:19:61:F7:17:F1:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au3YfPvkKOnEKzDCLhlh9xfx20k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7983fc-2019-47b3-a6c3-d99c8c25dbc8/1/au3YfPvkKOnEKzDCLhlh9xfx20k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:46:0f:ff:e4:ad:40:11:69:0b:9b:48:8a:b8:0f:06:f7:
         ee:1c:33:f9:54:71:db:b1:b0:d3:9d:cf:a7:e7:d0:98:d5:5b:
         8b:24:0c:7f:4e:d3:10:6d:f6:dc:22:f1:87:94:e4:bb:4a:4f:
         f6:e0:4b:69:0d:64:0d:3e:75:6f:d7:e0:e7:12:00:8a:ef:dd:
         7e:40:ed:c3:21:26:d6:cd:b4:24:f3:dc:36:39:cd:d3:ec:5f:
         04:52:bd:8d:b2:e5:30:b1:c9:43:d4:dc:09:1f:8d:be:ec:7a:
         22:76:c3:7d:0a:ef:9f:e1:f5:a6:de:b5:43:d4:79:4f:97:23:
         06:51:b2:e3:95:85:40:18:40:20:05:03:3b:c8:7d:07:95:40:
         ec:bf:e2:49:a8:1b:78:55:29:35:74:90:6d:8a:c8:b7:5e:d9:
         bf:cf:75:2b:76:29:d0:c0:90:11:9b:6a:b9:5b:46:13:f2:65:
         b6:0a:a2:02:da:d2:79:bd:fe:e2:fd:9c:0f:05:41:c3:51:df:
         19:c8:a1:5c:92:27:ff:97:2e:e3:f5:7b:df:0b:34:a1:52:c7:
         22:6b:f7:26:8e:87:c2:df:5d:f7:64:a3:f8:c7:42:13:9b:73:
         8a:4e:89:0f:1c:df:c8:63:40:af:3c:aa:58:38:80:7d:b1:9b:
         dd:aa:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:19 2026 by rpki-client