Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File:                     A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier:          rKVLPb5CPJ+vgBFvE8jpaRsA/uWJG21efRpXi2KclIw=
Subject key identifier:   0D:EB:10:A2:82:63:A8:AE:49:7A:AB:6B:21:97:47:69:55:6D:37:0C
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       019EB95803353C6E2BA2ADB2177B373E5667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number:          0B9F
Signing time:             Fri 12 Jun 2026 01:00:13 +0000
Manifest this update:     Fri 12 Jun 2026 01:00:13 +0000
Manifest next update:     Sat 13 Jun 2026 01:00:13 +0000
Files and hashes:         1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: EuHGCbGGTdkcmMJ5PbUGpS1xU9aWO2hxuTVIbpERKDY=)
                          2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
                          3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
                          4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
                          5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:03:35:3c:6e:2b:a2:ad:b2:17:7b:37:3e:56:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Jun 12 01:00:13 2026 GMT
            Not After : Jun 13 01:00:13 2026 GMT
        Subject: CN=0deb10a28263a8ae497aab6b21974769556d370c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:7b:32:e3:e6:18:a6:e8:91:7c:a3:df:39:
                    c2:83:4f:a5:c0:f2:05:60:e9:00:85:24:5d:ac:68:
                    f1:89:da:12:6d:a3:c7:51:6e:af:a0:9f:f1:6c:ac:
                    b8:12:ea:0f:05:af:cb:80:c0:b8:29:b6:e3:40:0b:
                    4f:65:03:42:eb:f3:83:83:8b:aa:67:63:44:1f:45:
                    02:03:1b:0d:89:a3:fb:a2:50:53:16:d8:82:3b:99:
                    d4:ac:13:29:11:55:20:58:9b:f4:00:4c:ff:90:18:
                    54:0c:77:fc:da:5d:0a:27:8e:78:8e:90:7d:1d:06:
                    ca:48:82:a7:4a:7b:20:02:02:e2:52:44:70:01:44:
                    d4:a4:9c:f8:7c:62:49:79:fa:98:57:dd:49:03:2d:
                    57:b5:92:c0:eb:41:24:f8:b9:77:db:24:76:14:58:
                    a2:0d:9b:34:83:29:6d:a9:2f:f5:3f:fa:90:10:bd:
                    a7:21:79:00:53:14:06:65:d3:26:94:a8:35:86:fa:
                    6a:af:e9:42:23:96:b6:a5:3d:a0:41:0e:a6:31:40:
                    bf:49:06:24:61:33:b3:54:fe:29:c0:bc:ea:60:fb:
                    10:cf:fe:81:06:43:b3:e4:cd:46:bf:22:9d:da:ae:
                    c5:15:36:49:2c:74:75:33:61:55:5a:f6:4f:d1:f9:
                    f2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EB:10:A2:82:63:A8:AE:49:7A:AB:6B:21:97:47:69:55:6D:37:0C
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:a7:c3:91:81:3e:fc:94:9d:27:9c:5b:56:f5:ae:71:1a:
         0e:60:ec:73:13:ae:c8:ab:b7:69:62:f8:c4:82:80:4d:49:c1:
         26:a7:e4:3c:64:ad:79:1f:c5:d9:dd:a2:87:d2:31:40:e4:80:
         c9:f4:2b:9e:14:6e:95:72:08:31:35:ca:1a:56:89:87:af:50:
         01:96:35:5e:37:7f:e8:2d:da:f6:88:03:ab:50:ec:7c:85:df:
         a3:34:11:3e:23:19:6d:02:e5:ff:b8:58:42:a1:4d:8f:57:74:
         f5:c5:11:2d:09:f6:48:af:21:6f:12:23:0f:e7:8a:d8:a0:08:
         33:e5:9d:dd:27:79:ab:b1:7a:cc:98:06:ad:ed:c7:99:4d:09:
         e5:92:77:7b:88:a9:4e:9d:49:fd:48:34:f2:4e:31:aa:c5:1a:
         e4:86:10:e8:e9:43:9e:1e:6e:0a:dd:02:b6:12:e8:dd:99:85:
         e9:a4:a6:f6:56:5c:64:72:b9:af:00:9f:01:19:30:8f:d4:10:
         22:23:8e:45:49:e1:8e:49:42:86:b5:09:42:4c:4e:cf:7b:61:
         49:d5:6f:dc:da:b4:75:e7:53:4c:08:40:23:67:11:9f:80:de:
         d6:a1:49:50:f1:d7:1f:4a:d7:cb:16:68:d3:55:4b:ff:e7:dd:
         6a:f2:39:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:16:26 2026 by rpki-client