Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File:                     A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier:          OLb6UUWXaQhdO7p+8U/A4cI4JqUa9YFbku8DpYNGOmU=
Subject key identifier:   09:78:89:03:97:3A:FD:81:77:1B:75:8C:FF:D2:5E:33:05:A2:C1:86
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer:       /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial:       019EB6FBFBDA23576B1729E1E66AF75A6FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number:          1562
Signing time:             Thu 11 Jun 2026 14:00:27 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:27 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:27 +0000
Files and hashes:         1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: wU3ZHvKHUwKPlfnjrAyabEMFV67AKI+Y83tEEaJ/+Gs=)
                          2: shN0invCztwI3KX6a_QGu2kjtpU.roa (hash: C5xwtk8B6GrmB6Pb2tWwcTB63K3NyU431bpj6dpQii4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fb:fb:da:23:57:6b:17:29:e1:e6:6a:f7:5a:6f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
        Validity
            Not Before: Jun 11 14:00:27 2026 GMT
            Not After : Jun 12 14:00:27 2026 GMT
        Subject: CN=09788903973afd81771b758cffd25e3305a2c186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:43:7c:00:ca:4d:55:6f:eb:b2:20:9b:76:
                    80:24:1a:0f:66:29:59:14:ab:63:eb:06:4a:40:6d:
                    e4:e0:da:c3:8f:7b:50:7d:48:88:a5:ea:12:ee:bf:
                    43:2c:52:a3:b3:49:47:d9:22:fd:44:fb:68:28:0c:
                    98:6d:00:eb:42:7b:79:ab:c8:a4:b5:de:95:64:17:
                    27:49:04:b6:dd:be:7c:62:3d:19:fd:83:ae:4e:0a:
                    29:e8:a9:f4:df:02:51:95:6d:17:5d:ef:39:9b:8a:
                    ec:51:49:dc:37:ae:e7:c3:1c:07:7f:b6:98:d7:07:
                    04:2e:33:fc:27:c9:e4:8f:73:11:8e:5e:34:aa:9f:
                    34:86:d8:5c:a5:da:dc:62:af:50:cb:81:6e:96:20:
                    52:57:50:86:8f:d0:68:bc:0e:97:76:e2:37:e0:93:
                    da:8a:0a:97:19:fe:cd:91:c0:51:7b:2d:18:72:ad:
                    01:e4:51:b9:4e:4d:a3:e8:cb:9d:c8:ce:53:08:de:
                    b2:1c:2e:29:b3:a6:e8:88:5d:65:75:86:c0:1d:63:
                    f5:98:85:da:3f:94:eb:cf:b0:df:0a:a6:00:82:8d:
                    5e:2b:37:81:92:55:c8:cc:6d:6c:e9:68:3d:51:1a:
                    3e:7e:5b:e1:f9:5c:e1:cf:f2:9c:06:9a:0f:9c:75:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:78:89:03:97:3A:FD:81:77:1B:75:8C:FF:D2:5E:33:05:A2:C1:86
            X509v3 Authority Key Identifier:
                keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:87:8a:1c:af:cf:d3:39:d8:a8:a7:e5:8a:5e:41:f8:32:df:
         36:d6:90:1d:65:b5:3f:3c:a3:da:58:a2:34:71:0f:32:db:d1:
         a4:d9:e2:a6:b4:a9:34:8a:8e:e6:b0:01:97:63:0a:12:a4:c1:
         ba:6a:bb:2a:e7:1b:19:66:f6:0c:2a:81:28:45:25:0a:27:78:
         0c:8d:85:6e:67:89:a5:5f:11:9b:98:07:ad:5e:d1:1f:37:6f:
         52:79:ac:e8:ad:e9:e8:05:4e:93:e2:23:9d:6f:56:3e:7d:b5:
         19:b7:af:fc:ae:8e:3b:52:aa:0f:3f:7a:7a:28:6e:df:9e:28:
         17:eb:23:5f:72:78:4d:9e:b5:bc:11:b6:c1:b5:65:5f:13:61:
         b9:07:b1:45:42:b2:3f:01:cf:02:8f:91:37:52:64:5b:f0:bd:
         78:2b:73:51:0e:63:1c:1a:fc:66:32:e9:a3:99:72:51:e0:77:
         a2:ab:fa:ad:58:6a:27:81:38:52:08:e4:fd:ea:dc:92:40:9a:
         ef:09:f3:2a:1f:e7:bd:e1:a5:f8:48:2d:d0:f2:ce:a4:2f:a4:
         71:fc:bd:b4:d6:ac:75:cf:c0:70:7b:5b:77:99:14:89:ef:14:
         20:cd:a3:62:e3:0a:2f:3d:45:b7:36:20:a2:f5:04:cf:1f:35:
         9e:d1:5b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:50 2026 by rpki-client