Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File:                     fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier:          rqB7koN8dRxLto5fwDVDORbvZCSEZm3LI2n1213YaPs=
Subject key identifier:   05:BF:2E:A5:84:1E:E5:60:2F:43:8C:0A:5B:02:C3:8C:4A:7A:5B:E8
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer:       /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial:       019F189DE2EFB48E238A404F8FAE550B772C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number:          06A1
Signing time:             Tue 30 Jun 2026 13:00:27 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:27 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:27 +0000
Files and hashes:         1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: TsCTA8M+zA2iH/qV2PMLfnb2G3C+RGjoiDpDsLRXE3Q=)
                          2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9d:e2:ef:b4:8e:23:8a:40:4f:8f:ae:55:0b:77:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
        Validity
            Not Before: Jun 30 13:00:27 2026 GMT
            Not After : Jul  1 13:00:27 2026 GMT
        Subject: CN=05bf2ea5841ee5602f438c0a5b02c38c4a7a5be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:69:80:51:48:6a:ab:25:db:38:73:5d:08:
                    51:f5:d2:41:c6:23:95:a7:e7:5d:e9:71:51:8c:f1:
                    27:d9:c3:de:ee:84:6a:48:d7:50:53:da:c9:59:4b:
                    42:1c:dd:54:ed:08:ea:70:b9:a2:b8:49:87:ab:dc:
                    6b:54:d1:7e:86:e1:88:6b:27:2f:65:3d:49:04:ba:
                    c9:03:f2:70:45:b1:2f:11:7e:03:94:7f:3a:0f:57:
                    39:e8:9c:ac:14:eb:65:21:fc:46:46:ea:46:53:4c:
                    44:b5:b0:f1:b4:a7:64:a7:06:b7:95:dd:b4:62:af:
                    06:5e:49:ae:79:73:0a:de:1a:24:a5:36:ae:37:6e:
                    28:b8:c9:67:b9:00:7f:24:d8:89:9e:de:c4:6d:34:
                    52:e8:db:8d:f0:0f:a1:f1:70:50:ff:8a:6e:e7:29:
                    2a:37:81:86:d0:cb:d4:14:ea:c3:b5:e7:7a:2e:51:
                    fb:38:51:40:0e:df:86:12:fd:7c:d2:8a:59:8a:bd:
                    7b:ed:06:fc:10:38:5d:10:4d:02:c2:90:1e:56:f5:
                    ae:d9:c2:bc:c2:58:08:60:bf:6e:75:bc:97:45:72:
                    4d:db:39:06:48:ea:2f:2f:1f:27:d5:0f:bd:f6:a3:
                    8c:3d:ba:ad:50:64:68:1c:f5:c9:b8:12:f4:3b:c3:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BF:2E:A5:84:1E:E5:60:2F:43:8C:0A:5B:02:C3:8C:4A:7A:5B:E8
            X509v3 Authority Key Identifier:
                keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:5f:0e:ef:f0:6c:9c:ac:ac:61:b6:05:c5:9b:9f:b9:f6:
         7a:96:c2:aa:90:3f:e2:41:97:6f:07:f2:76:c7:bf:03:45:a3:
         d7:3a:b8:99:7a:77:b3:42:7a:ec:3f:be:26:3e:9e:64:63:02:
         37:0d:27:90:8f:f9:a2:e7:27:5e:65:f5:6e:0f:ab:45:e6:bc:
         41:11:c3:c9:0e:2d:d5:0a:de:98:06:c1:e8:ae:a7:ed:f1:1a:
         69:b6:75:2a:07:5d:e2:4f:c6:5b:d4:df:f2:14:aa:eb:04:c6:
         7a:6f:1f:a2:55:cd:22:9d:6d:5d:11:b7:fa:13:3a:ef:06:0d:
         37:61:34:44:e5:bb:e1:16:68:03:fe:35:85:73:49:55:26:62:
         ca:2e:53:21:ca:1b:c4:9b:17:04:e6:e8:ca:09:ed:45:a2:bd:
         39:93:e8:50:69:a3:0d:a3:b3:bd:cf:b6:de:13:c9:ad:62:f2:
         a9:34:da:b9:e3:e1:b9:0f:4e:3f:51:71:6f:26:98:4d:d3:45:
         0e:f7:86:55:bc:61:36:7e:0c:35:5f:75:1d:c6:bc:c2:ec:1a:
         48:58:4b:a3:5a:4c:6b:9c:c6:b7:f6:31:19:3d:89:02:0d:f7:
         75:25:ac:d7:51:5f:2b:0d:3a:e7:47:17:03:a8:f7:e2:d7:6b:
         97:2a:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:21 2026 by rpki-client