Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier:          HbaPLoMJOuD8OWtnMg6M5imZYneNmzj4KmW/VjqrfBI=
Subject key identifier:   DF:5D:FA:A9:48:82:8E:5A:81:E0:E4:1B:7E:60:1B:1D:04:6C:72:0F
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer:       /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial:       019EB958C2FB562C756315547935AEFBD2F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number:          0B9A
Signing time:             Fri 12 Jun 2026 01:01:02 +0000
Manifest this update:     Fri 12 Jun 2026 01:01:02 +0000
Manifest next update:     Sat 13 Jun 2026 01:01:02 +0000
Files and hashes:         1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=)
                          2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: nYOj0ttE4Vimsw4C7FFHMS6H6cFHSe8QBEr8nwoDovE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:58:c2:fb:56:2c:75:63:15:54:79:35:ae:fb:d2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Validity
            Not Before: Jun 12 01:01:02 2026 GMT
            Not After : Jun 13 01:01:02 2026 GMT
        Subject: CN=df5dfaa948828e5a81e0e41b7e601b1d046c720f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:f8:7b:88:fc:58:30:02:db:8e:70:44:9e:
                    0a:cf:ac:f8:c2:ed:26:e5:51:3d:b9:ec:77:33:62:
                    f0:1d:78:66:ab:9a:37:06:77:10:50:83:b3:c4:e3:
                    f2:bd:54:b6:84:b4:eb:37:78:e3:93:34:0e:0c:12:
                    b3:76:1c:eb:c0:49:7c:9b:0b:e5:44:95:0d:de:cb:
                    ea:28:c9:06:5c:11:6d:d5:f1:f2:2b:92:95:73:e1:
                    84:0c:a7:34:45:89:d8:16:48:25:75:13:e3:ed:a0:
                    dc:54:a1:ae:cb:81:8f:55:ab:23:de:15:e7:6c:81:
                    0c:12:ad:08:2d:bd:82:bf:03:87:d8:70:fd:ea:72:
                    b4:02:01:75:ac:1d:b6:63:75:26:33:14:c6:f2:4c:
                    7a:7c:81:e0:ca:45:53:48:ec:87:07:4c:90:64:75:
                    33:57:28:54:59:50:28:bd:68:af:b7:dc:2b:27:13:
                    35:a1:fc:73:f0:b1:77:16:79:d9:d6:31:35:d4:a8:
                    35:75:1f:c4:cd:23:83:84:c0:02:9b:3d:5e:14:28:
                    cb:04:e6:a6:46:0a:65:91:8a:ba:65:57:46:de:57:
                    bd:82:79:5b:2b:10:eb:7f:f4:8c:25:3e:47:6b:61:
                    34:e8:15:4d:14:32:b0:df:37:63:4e:b9:74:a2:d5:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5D:FA:A9:48:82:8E:5A:81:E0:E4:1B:7E:60:1B:1D:04:6C:72:0F
            X509v3 Authority Key Identifier:
                keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:72:c7:c4:73:5e:ed:70:41:72:d8:c6:ce:6b:b0:da:38:f8:
         e7:52:8b:ee:60:1b:70:26:7e:19:ee:cb:f9:f0:bb:74:04:2f:
         24:e1:80:b7:c3:e4:17:ad:34:26:8c:46:cb:99:9b:b7:f6:10:
         94:fd:ea:c0:59:64:26:0d:89:a5:0d:da:6d:81:fc:d0:5e:b6:
         20:fb:72:3f:dd:d5:71:fe:90:85:db:71:57:82:ab:f5:ae:ac:
         53:bf:51:68:44:29:28:aa:10:08:69:97:76:e2:3e:24:f5:da:
         fa:ee:7a:cd:ec:44:86:90:a3:f8:63:42:d2:97:a0:bb:63:d2:
         50:df:0b:fa:41:b8:89:7b:c5:78:a3:e5:bd:42:e4:ce:4c:d5:
         b0:55:09:51:89:ce:9a:cd:53:ee:52:47:4f:96:57:93:6a:0c:
         ac:7e:c9:41:f1:ef:bc:e1:1e:85:aa:20:cb:8f:f5:4c:68:a6:
         7c:06:0f:e9:3e:0d:91:79:30:a6:26:a4:83:11:f7:88:ef:46:
         e3:e2:4a:00:d8:ef:c5:d5:fd:08:ff:07:1f:52:f8:55:84:69:
         c5:c0:d3:97:53:26:67:f6:d1:30:eb:5f:3d:e6:23:a6:60:be:
         65:06:31:e1:a6:1c:8b:48:07:c5:b7:11:59:c3:9b:26:b1:a6:
         47:40:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:16:48 2026 by rpki-client