Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
File:                     8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft (raw, json)
Hash identifier:          GTvns4pdaKNwje7c1BvSbXMnAKIMpUeCzZqWMUZ423g=
Subject key identifier:   4C:6B:5B:46:1E:7C:30:B5:91:D9:A5:2B:67:0A:DE:A9:AF:94:FD:DD
Authority key identifier: F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6
Certificate issuer:       /CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6
Certificate serial:       019EFCB97FFB855E4C2DD746CD2651599AFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
Manifest number:          01F4
Signing time:             Thu 25 Jun 2026 03:01:15 +0000
Manifest this update:     Thu 25 Jun 2026 03:01:15 +0000
Manifest next update:     Fri 26 Jun 2026 03:01:15 +0000
Files and hashes:         1: 8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl (hash: BWum8X6P5XRX8XDmnV18rzIDrwQGtiOV5yOJ9ZXQiIE=)
                          2: XnLaG9PYNz8rUVpjon2kQr4cuFs.asa (hash: JI7fzzmhznUk8hukgTd4y7R4XLhGL1pr/tYt5yPOjXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:b9:7f:fb:85:5e:4c:2d:d7:46:cd:26:51:59:9a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6
        Validity
            Not Before: Jun 25 03:01:15 2026 GMT
            Not After : Jun 26 03:01:15 2026 GMT
        Subject: CN=4c6b5b461e7c30b591d9a52b670adea9af94fddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:71:dc:46:81:bb:ae:31:04:f3:e7:25:6f:
                    81:4c:ef:0c:db:dc:4f:2d:17:d9:3d:e4:39:84:66:
                    37:9b:09:a1:a6:35:22:a5:04:fa:1e:cc:9e:22:ec:
                    f9:73:6c:b0:30:b8:35:dd:a4:61:4c:f4:24:5e:ca:
                    c1:62:df:4d:dc:b6:24:06:14:03:5a:24:ed:9b:7a:
                    1a:31:49:49:e2:6b:7a:bc:e3:07:cb:b1:51:f2:8b:
                    1c:31:3c:71:54:6d:e6:ca:ef:ee:cb:35:33:19:dd:
                    20:97:8e:05:d9:fc:1b:a4:5c:cf:aa:69:e1:6b:09:
                    1b:61:1a:0a:b1:b2:55:7f:59:2c:44:1a:93:19:d5:
                    1d:51:cc:84:55:38:7b:43:14:51:c1:b3:f1:76:51:
                    cc:1f:60:be:cc:09:09:98:33:0d:40:df:82:d7:7a:
                    98:33:21:c6:6f:3a:d3:91:af:7e:c3:d0:bc:54:bb:
                    27:41:2c:cf:38:f5:61:30:da:09:1f:72:88:2f:10:
                    4a:af:27:c8:5b:7e:6d:ed:7c:00:7c:78:3c:5a:c8:
                    ea:1f:08:fb:b6:7e:ff:c1:34:31:c7:05:57:fc:84:
                    c5:ac:57:7d:21:95:d5:db:84:3b:a4:a7:39:f5:3c:
                    3b:f0:7d:14:04:75:a4:44:e6:36:5b:23:bd:65:ec:
                    4f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6B:5B:46:1E:7C:30:B5:91:D9:A5:2B:67:0A:DE:A9:AF:94:FD:DD
            X509v3 Authority Key Identifier:
                keyid:F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:df:6f:8f:aa:05:c4:cb:b7:45:20:be:12:d2:eb:91:a0:1d:
         26:a2:12:4d:b2:82:98:db:d1:63:9c:f6:8f:98:f5:f0:5b:59:
         ef:ec:6d:aa:c3:ba:ef:66:83:1f:11:3f:38:4f:9c:15:d2:73:
         00:b6:30:9d:19:10:be:b8:d1:ca:22:d0:8a:c9:77:a3:65:7a:
         0d:f5:ac:8e:33:0a:10:9c:61:4a:e1:45:b7:e7:5a:d0:22:89:
         20:c6:66:e0:d0:5d:1b:84:c3:03:2b:08:51:89:24:7f:79:13:
         44:ba:c3:ab:ab:5c:8f:44:46:46:a8:c8:63:ee:af:95:af:b7:
         2f:13:97:89:2e:43:b8:b4:53:6f:8c:ca:89:df:3b:93:b3:fa:
         1e:38:d8:8c:12:5a:23:b6:7e:8c:2c:c5:c0:91:b7:43:1e:d3:
         4d:05:4a:cd:33:e7:0d:ba:7c:dc:fd:c6:7f:d2:52:fb:f2:67:
         a4:7b:94:f8:5b:6e:ce:35:f2:3e:cd:52:e5:45:70:82:40:f0:
         61:10:00:f7:d0:33:17:89:da:08:1e:40:ac:2b:76:70:f9:1e:
         c6:34:00:0f:35:12:5a:af:d4:b8:33:dc:27:df:44:f9:71:ae:
         81:c5:6a:29:32:50:e0:2b:6f:61:ff:9e:4a:b7:ad:b9:54:80:
         03:65:c9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:01 2026 by rpki-client