Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File:                     1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier:          kB19jsud/yHSOqcv1XjjGOCcrVseOzskbE3gPdaoLHw=
Subject key identifier:   4C:86:C8:EA:E1:01:69:0C:1C:D2:90:D5:F7:2D:0D:E4:94:5A:BD:4D
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer:       /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial:       019EBD6CD76CC533EE2DE079D0379AC80FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number:          09B3
Signing time:             Fri 12 Jun 2026 20:01:27 +0000
Manifest this update:     Fri 12 Jun 2026 20:01:27 +0000
Manifest next update:     Sat 13 Jun 2026 20:01:27 +0000
Files and hashes:         1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: hA1ZCw1QMI6qIz0z9RM4GdFZIFx296jOLZJ9iCA9+Yg=)
                          2: 4uQBWkALISvD6y91tLrUckXc3Og.roa (hash: onT9wzStJ0yxe/DG9p0SCT14FtXKok1QUI7Daf8dWqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:d7:6c:c5:33:ee:2d:e0:79:d0:37:9a:c8:0f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
        Validity
            Not Before: Jun 12 20:01:27 2026 GMT
            Not After : Jun 13 20:01:27 2026 GMT
        Subject: CN=4c86c8eae101690c1cd290d5f72d0de4945abd4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:4b:dc:8d:72:ee:41:29:99:1b:c4:16:71:
                    ba:3c:4d:8a:77:e5:24:ea:d9:41:a3:3c:bb:95:ca:
                    6f:ad:3c:7c:fe:4d:a0:10:46:92:92:9a:50:86:f0:
                    73:6b:fe:4f:42:2c:af:eb:7a:82:89:30:2d:54:bc:
                    f7:9a:d3:02:4e:f6:f6:2e:93:14:70:e4:7b:7e:bc:
                    1d:97:28:33:11:0b:d4:bb:46:ce:60:cd:e7:73:ca:
                    3d:46:1e:f6:32:f1:48:f2:72:95:be:d3:26:4f:a7:
                    62:ea:02:fe:4d:c9:b6:c2:a2:05:1c:76:70:7e:21:
                    54:c8:0e:2f:2c:94:e0:ab:eb:cf:e4:6a:e3:08:6d:
                    0d:85:34:04:8f:29:6a:b1:77:6c:24:a5:4f:2b:05:
                    89:ee:c8:17:7c:bb:df:d8:c1:6e:47:fa:60:e2:6b:
                    2d:fe:95:52:53:96:b8:7e:4f:93:20:0a:d2:f3:cc:
                    3b:56:c3:f2:4a:6f:eb:51:07:96:74:94:66:e3:de:
                    21:3d:59:4c:a1:a1:66:76:56:35:e5:f8:90:f4:d0:
                    4e:c6:9f:e6:85:e5:11:94:d4:8e:a0:1f:00:9e:82:
                    27:18:c8:67:4a:01:88:b4:17:10:15:36:b9:a3:92:
                    67:1a:61:d6:9b:19:26:b8:24:bc:4e:39:4e:e4:4c:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:C8:EA:E1:01:69:0C:1C:D2:90:D5:F7:2D:0D:E4:94:5A:BD:4D
            X509v3 Authority Key Identifier:
                keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ab:93:df:4b:bb:e3:61:b3:b4:9f:2c:f8:12:bf:d0:e0:d9:
         89:00:4e:e2:81:b7:15:14:de:0b:56:a1:7a:ea:3d:cd:92:f5:
         10:29:2e:27:a7:a5:19:20:19:a1:45:de:96:14:7f:e3:4e:02:
         a8:e8:09:65:59:bd:97:af:81:3c:87:7f:b0:7f:a2:66:18:df:
         fa:57:f5:e2:b5:d9:d2:60:be:29:5b:07:6e:66:58:bc:4e:06:
         4f:8b:01:84:ba:28:38:f7:fa:96:3c:f0:58:ef:04:66:8e:69:
         ee:ef:cd:2e:11:b5:6d:7f:b8:66:54:63:ba:53:a8:23:50:f1:
         54:78:24:c5:88:de:51:32:7c:9c:31:50:ff:2a:33:59:e9:26:
         dd:e9:2e:c4:23:65:93:b9:1c:7e:f5:21:2a:cd:e5:ac:16:9a:
         c5:a6:32:55:0a:78:5c:bf:46:82:a5:61:ed:0d:56:cd:92:aa:
         c6:c6:00:2e:97:d6:9e:19:a7:47:51:cd:d7:3f:fa:8a:44:e7:
         50:5e:80:33:b7:e5:9d:f9:2b:30:15:12:fc:b3:46:e6:ef:79:
         e6:5d:f5:8b:9b:43:eb:6e:68:7a:de:23:5a:99:a3:4c:2b:a3:
         bb:39:31:b9:fb:e7:03:ca:79:0d:3a:49:d3:8a:d3:53:8e:c9:
         71:3b:b0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 02:24:04 2026 by rpki-client