Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
File:                     tsAN1rE41q2498hDjdCy2Fg9xWY.mft (raw, json)
Hash identifier:          NQnCHEPuMTseh87o4l7yvvfWzLht54Va19TSFajpiiE=
Subject key identifier:   6F:49:46:49:63:C5:FE:D5:7D:7A:D4:C8:06:13:A3:FA:31:5F:54:A9
Authority key identifier: B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66
Certificate issuer:       /CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
Certificate serial:       019EB7D7EFE9CDE250D7F0F85D1B882551A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
Manifest number:          01FB
Signing time:             Thu 11 Jun 2026 18:00:42 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:42 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:42 +0000
Files and hashes:         1: 7-dKMxr-QmXUlbkg1afMtX6sKE4.asa (hash: UzAeb5Ceo8+VLW1IRrYNLAEzzNGnDc8WQw44mvqtVuw=)
                          2: tsAN1rE41q2498hDjdCy2Fg9xWY.crl (hash: n4li8v5ldWwWQ5vqb8I4+z2UULMc9l8cp6NNvhiTBeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:ef:e9:cd:e2:50:d7:f0:f8:5d:1b:88:25:51:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c00dd6b138d6adb8f7c8438dd0b2d8583dc566
        Validity
            Not Before: Jun 11 18:00:42 2026 GMT
            Not After : Jun 12 18:00:42 2026 GMT
        Subject: CN=6f49464963c5fed57d7ad4c80613a3fa315f54a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b2:c3:05:c7:cd:75:e0:fd:3d:24:9a:3d:1a:
                    03:7d:88:6d:93:5c:0a:0e:37:d8:4f:48:ef:75:4c:
                    1c:66:9f:5b:77:e1:fc:1a:88:8d:1d:57:e3:1a:06:
                    d0:04:d1:f9:1e:85:5a:8e:98:ea:c9:32:88:84:a3:
                    04:ef:bc:d7:b5:ff:79:66:70:59:3f:85:6b:fe:3a:
                    1d:be:01:cb:10:5b:0e:50:0d:df:c3:31:dc:e2:89:
                    f9:46:b1:6d:2c:6c:f9:9c:f3:8c:53:d2:aa:70:cf:
                    ef:04:f1:3d:e0:a6:71:e8:cf:da:6c:9a:4f:95:bb:
                    6e:c4:26:33:0d:07:e3:d5:1c:ec:5a:aa:84:26:a3:
                    8a:1f:32:23:f8:53:a6:6f:92:41:01:fd:ac:a6:65:
                    93:4d:e6:7a:a6:61:ad:5a:2b:5a:1e:e8:e5:35:f3:
                    54:ae:04:f4:61:34:44:27:78:1d:74:15:cc:39:c2:
                    16:23:ae:0d:b1:db:71:aa:bc:df:66:1b:f5:4a:0d:
                    32:07:25:7b:a9:aa:90:79:82:9a:69:bf:8b:d8:e4:
                    65:16:fd:be:88:c6:6b:b7:5c:67:8b:f2:57:a8:98:
                    73:27:3b:ec:ca:e5:b3:c8:4c:9c:5e:b8:6c:bb:33:
                    92:38:5b:c8:18:78:35:af:7c:53:e1:de:dc:25:e0:
                    20:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:49:46:49:63:C5:FE:D5:7D:7A:D4:C8:06:13:A3:FA:31:5F:54:A9
            X509v3 Authority Key Identifier:
                keyid:B6:C0:0D:D6:B1:38:D6:AD:B8:F7:C8:43:8D:D0:B2:D8:58:3D:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsAN1rE41q2498hDjdCy2Fg9xWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/431daf-002b-4458-bbf5-564d18c6862b/1/tsAN1rE41q2498hDjdCy2Fg9xWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b3:0b:90:95:f2:9d:6f:f2:38:f7:ac:f5:b8:d4:7c:f3:34:
         8c:31:23:1b:b6:27:0e:83:9d:75:e7:0a:29:b1:15:a9:39:8f:
         9e:ab:50:b0:0d:d7:e9:ba:a3:e7:d5:e8:c6:a9:74:fc:89:01:
         ae:37:fc:d1:f6:5c:10:cf:4b:23:df:24:36:72:01:f1:14:25:
         cf:ca:28:2e:18:17:2b:11:e9:11:31:fe:63:0b:f4:90:38:e4:
         5a:90:f1:5c:3d:64:c4:29:76:15:b2:e4:6f:ab:a7:86:6f:e8:
         df:c0:90:bc:8e:35:a6:e4:b5:78:6d:ec:cc:5c:45:4f:a3:14:
         23:3f:f0:73:df:93:45:21:9f:80:33:0f:9a:ea:fd:8c:bf:40:
         9f:6f:45:04:af:81:18:28:c8:b6:9b:1a:7d:84:9a:e8:87:03:
         3b:13:74:8f:10:5f:7e:57:07:8c:ef:ed:9c:8a:45:cd:d9:44:
         6a:55:9c:e3:e4:09:58:d9:1e:e4:92:5a:ee:f2:64:80:cc:e8:
         a9:43:d4:61:ec:ea:44:d8:7a:8c:8f:09:5f:10:aa:37:0c:53:
         8b:08:b1:58:a6:65:ff:1b:13:2d:29:aa:54:88:23:c5:9e:2f:
         c1:8f:f6:1c:3b:68:0e:b7:83:39:b2:ca:09:fa:2b:22:95:01:
         19:a0:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:16:07 2026 by rpki-client