Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File:                     tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier:          lRkE/vLUPkJe2Qj+pZ1c9PilwK6Wi2F1GByI4S6HfaY=
Subject key identifier:   FE:51:E1:B0:B4:6C:15:4A:C2:88:9F:BE:6A:FE:20:26:7E:6E:2B:72
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer:       /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial:       019EFD27DD11878E3F381B9B48A298B041E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number:          08AF
Signing time:             Thu 25 Jun 2026 05:01:48 +0000
Manifest this update:     Thu 25 Jun 2026 05:01:48 +0000
Manifest next update:     Fri 26 Jun 2026 05:01:48 +0000
Files and hashes:         1: gEvPQohUnuc28gSU_LnB2n8byio.asa (hash: Fubnzf0xJmvbucD3B1n2PG0e9xPoaWRyPDCkp6ZRe2c=)
                          2: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: IfikbeQYIINiETIs92w2iwbjwBwCWE/lbmLsDMzQLr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:27:dd:11:87:8e:3f:38:1b:9b:48:a2:98:b0:41:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
        Validity
            Not Before: Jun 25 05:01:48 2026 GMT
            Not After : Jun 26 05:01:48 2026 GMT
        Subject: CN=fe51e1b0b46c154ac2889fbe6afe20267e6e2b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:36:55:32:03:69:17:3d:ba:4c:a8:76:c7:
                    06:7b:20:58:7d:69:ba:e5:21:17:e3:f8:fe:b4:e1:
                    0e:40:0e:95:14:49:2e:f2:f3:d2:a2:ff:68:b8:c8:
                    76:f7:4f:00:80:93:d5:11:71:59:05:3b:05:fe:27:
                    3e:82:89:2e:58:ec:d3:05:1f:02:42:19:a5:cc:e3:
                    35:45:62:19:90:fa:f9:b6:ae:88:56:5f:d0:93:47:
                    8e:88:fd:03:c7:90:64:0d:1c:aa:6b:5b:2e:64:8f:
                    0f:a3:9e:bb:c7:77:3e:53:e5:c7:cf:57:95:d2:9b:
                    d1:e2:f7:21:70:c5:03:82:45:d4:4f:74:30:5e:c1:
                    97:44:db:b3:66:4e:e2:c4:f8:f6:56:27:5b:35:b2:
                    03:da:96:d5:b6:33:b6:b8:27:bf:d4:10:7b:88:04:
                    34:3f:66:17:0b:fe:2f:40:c7:1e:30:54:ab:39:a1:
                    fb:4d:3f:ba:78:90:77:6d:2d:37:0a:eb:22:ee:d4:
                    94:08:11:93:dd:4d:c7:ea:b1:94:2e:92:df:a4:3f:
                    8b:d5:26:b0:a4:70:63:58:5e:28:56:32:2c:c5:cf:
                    5b:fb:45:33:49:a9:7f:65:80:23:56:b7:ff:62:96:
                    ce:e9:a0:a6:53:72:2a:02:78:c5:a9:11:16:cf:02:
                    29:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:51:E1:B0:B4:6C:15:4A:C2:88:9F:BE:6A:FE:20:26:7E:6E:2B:72
            X509v3 Authority Key Identifier:
                keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:cf:bc:81:0e:3a:50:76:21:6b:94:3a:d6:14:40:56:cb:f7:
         52:af:6e:c5:95:17:e4:4e:a5:4f:22:07:e4:40:7d:d4:84:9b:
         99:dc:ca:a3:96:99:dc:e4:c8:ee:05:91:b4:16:70:b3:22:00:
         52:8e:8a:89:9d:41:81:8a:86:ec:43:ec:48:ac:9a:cf:37:3f:
         f3:dc:59:36:55:d3:73:04:3f:1d:7b:16:14:45:17:50:30:3a:
         dc:23:3f:a3:49:2d:b6:bc:eb:71:68:11:9c:80:db:01:8a:6b:
         eb:75:1c:5a:fb:8b:c0:f7:7e:36:dc:ec:93:c6:59:ff:6c:1d:
         53:40:f8:30:c5:ac:72:bf:d9:8a:6f:c9:c0:73:17:ec:5b:7e:
         53:d3:b0:e7:85:4c:c3:4b:ae:1f:d9:a3:f6:c4:17:34:2a:82:
         10:8e:a5:32:f9:fd:03:64:61:f7:17:f6:d4:a2:56:ff:61:d2:
         55:41:b3:00:f8:c6:5b:dc:b2:94:ab:c2:c7:d5:b0:62:92:68:
         82:30:63:9f:b8:28:17:99:f8:12:40:4d:11:6a:9a:49:96:c2:
         d4:d5:14:1d:e2:48:d9:b9:81:30:61:8c:04:fe:27:95:59:24:
         a6:2e:6b:02:94:e9:5c:13:5d:05:7f:57:b4:79:5e:20:1c:a3:
         dd:47:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:28:15 2026 by rpki-client