Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
File:                     R0APQz0S1oqeufakK688jFKVyFI.mft (raw, json)
Hash identifier:          UtBsXWPLOFNoQ4UlCsVtWl/XNsuQw4p2T0QR78konl4=
Subject key identifier:   95:F4:8F:EA:FE:BF:FC:B3:4D:7C:F9:6F:7E:37:6B:D3:98:9E:5A:79
Authority key identifier: 47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52
Certificate issuer:       /CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
Certificate serial:       019EB9588233E82964100B890E7D62C84E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
Manifest number:          164D
Signing time:             Fri 12 Jun 2026 01:00:45 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:45 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:45 +0000
Files and hashes:         1: R0APQz0S1oqeufakK688jFKVyFI.crl (hash: 8UKuADshOliAosS6AVlwyBeJjLGLPDYdIIucQf7H6oI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:82:33:e8:29:64:10:0b:89:0e:7d:62:c8:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47400f433d12d68a9eb9f6a42baf3c8c5295c852
        Validity
            Not Before: Jun 12 01:00:45 2026 GMT
            Not After : Jun 13 01:00:45 2026 GMT
        Subject: CN=95f48feafebffcb34d7cf96f7e376bd3989e5a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:34:a1:d0:8b:8f:45:74:c4:43:a5:5b:c7:
                    19:dc:90:c6:4c:74:c7:35:6e:09:c4:d0:c3:ea:c3:
                    6d:47:f9:8e:ea:23:f2:67:a1:a6:c1:df:84:f4:1c:
                    fb:e8:2a:a0:77:2e:22:25:a0:40:b4:77:05:cc:62:
                    7d:c6:3b:b2:08:27:d5:49:18:0f:9f:e3:23:da:dc:
                    83:b0:dc:ec:3f:2f:ac:62:8d:76:2f:6d:40:06:63:
                    97:5b:e0:66:ff:a4:aa:cc:cd:eb:bd:6d:24:3b:f5:
                    ef:3a:6a:a5:a7:47:fa:fe:8d:4a:a5:b7:37:55:ff:
                    b0:e5:b5:79:f6:44:81:47:cd:94:3f:c2:4c:0d:a5:
                    23:57:55:c4:25:ad:79:18:8c:41:f1:9c:41:1b:fb:
                    2e:3f:86:ca:b0:4f:00:21:95:f4:8a:ed:67:6a:d0:
                    e5:3d:5e:0d:47:73:c5:06:33:7e:27:bc:e5:89:a9:
                    a1:3b:e4:a5:15:16:42:01:79:3d:eb:86:aa:77:6c:
                    0b:30:fd:73:56:43:04:df:be:f0:b4:25:04:bd:b2:
                    a8:eb:07:a9:b7:a5:37:8d:aa:bb:27:79:6f:a2:31:
                    1a:2c:b0:14:ef:2c:09:28:e8:ea:35:97:f8:dc:fd:
                    18:cb:05:c0:d4:fb:17:2c:43:64:bb:bc:b1:8d:0e:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F4:8F:EA:FE:BF:FC:B3:4D:7C:F9:6F:7E:37:6B:D3:98:9E:5A:79
            X509v3 Authority Key Identifier:
                keyid:47:40:0F:43:3D:12:D6:8A:9E:B9:F6:A4:2B:AF:3C:8C:52:95:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0APQz0S1oqeufakK688jFKVyFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/992bac-27c8-44fc-a43f-7e384aa10621/1/R0APQz0S1oqeufakK688jFKVyFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:b3:63:b7:ee:65:8f:ef:31:7a:e0:ab:5a:e2:b2:bc:eb:
         23:03:a3:ad:7c:2d:7d:b0:fd:74:ee:9c:99:1c:5b:58:70:a6:
         99:3b:ba:c3:70:a1:b5:11:8c:49:cf:b0:7f:81:34:5e:9e:08:
         8b:3a:a5:ed:11:9a:99:02:e0:02:20:2e:fb:6b:09:fa:85:70:
         62:80:2b:3a:9a:49:4a:14:a4:4e:6f:b2:a5:fe:56:ae:13:1f:
         a7:1a:e3:83:3a:11:46:b6:f7:7b:d0:91:06:68:1a:46:30:c6:
         a5:36:3e:b8:5e:cc:d5:77:03:a5:95:fc:35:84:a8:be:fd:53:
         32:7f:e4:c9:34:4a:a7:e8:3e:16:bd:a5:a0:12:ef:6a:e1:b0:
         df:dc:ef:47:07:be:db:ca:4f:24:85:8b:98:23:95:25:fb:9a:
         43:39:f5:2e:34:eb:a6:f1:b6:3b:e0:fb:86:de:35:f4:5f:74:
         4e:cc:01:9c:c0:eb:33:54:1e:f7:bf:aa:bf:19:d9:55:4f:1d:
         5e:31:50:6b:12:6e:1f:a6:3f:cb:f8:c8:92:fc:f0:41:ee:0d:
         3c:8b:31:4e:11:0a:4f:a7:a5:1b:e2:03:46:06:75:ea:0a:51:
         e9:b3:46:4d:9a:41:c2:38:a8:75:32:d4:cb:6a:d8:42:a7:35:
         f8:8e:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:28:34 2026 by rpki-client