Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File:                     169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier:          G0/+T7uk+WfYnSKcVYem9EdqdVrWeeiXq6DBp34kKs0=
Subject key identifier:   44:6B:E8:AF:39:6A:C1:C2:E1:4E:29:47:54:65:5A:18:08:54:10:88
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer:       /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial:       019F17F9958C9C7CD8FAFD6665049B36A977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number:          0F30
Signing time:             Tue 30 Jun 2026 10:01:00 +0000
Manifest this update:     Tue 30 Jun 2026 10:01:00 +0000
Manifest next update:     Wed 01 Jul 2026 10:01:00 +0000
Files and hashes:         1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: JrZeYnmRVLlUvedl+RrPYgR23ay65CCvpqTc58bFP9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:95:8c:9c:7c:d8:fa:fd:66:65:04:9b:36:a9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
        Validity
            Not Before: Jun 30 10:01:00 2026 GMT
            Not After : Jul  1 10:01:00 2026 GMT
        Subject: CN=446be8af396ac1c2e14e294754655a1808541088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:c7:6a:f4:b6:e2:27:17:d8:22:19:3b:75:0b:
                    1b:9a:e5:78:32:8b:32:54:2b:d8:68:51:ed:99:59:
                    e9:94:24:ff:03:16:4a:0e:ae:84:dc:5e:25:2b:46:
                    30:52:20:00:67:b4:c5:de:83:e5:4a:c9:02:6d:be:
                    73:eb:2a:2d:5b:d6:64:a8:01:c8:0a:08:28:7e:8a:
                    40:13:07:98:44:8b:50:e3:6c:ea:cd:42:96:1e:9b:
                    b4:b8:a2:4e:00:fd:7c:81:94:a4:48:4f:d4:5a:7b:
                    48:66:b0:56:20:81:0e:f1:56:df:34:cd:57:4b:bb:
                    29:da:51:cc:e3:72:2f:02:2a:a0:56:e1:43:1f:63:
                    7f:03:30:89:bc:1e:6b:ac:99:5e:90:19:e2:a5:71:
                    d9:f0:58:4d:51:cb:a8:8c:70:89:19:73:0e:8b:44:
                    8f:96:98:01:a7:77:53:be:20:c8:fb:d5:66:8d:35:
                    0c:07:37:e0:3d:13:5d:14:7b:c1:2b:7e:f7:c0:ba:
                    28:8d:05:03:0b:fd:8d:76:6c:d7:5e:5d:eb:28:54:
                    c8:f6:e6:7a:67:17:da:2f:4e:68:30:f9:c8:29:a0:
                    cc:0b:f8:54:06:c2:d8:5a:de:e1:68:da:34:df:7d:
                    ca:62:6e:63:aa:db:20:80:3c:97:ad:bd:28:c9:9f:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6B:E8:AF:39:6A:C1:C2:E1:4E:29:47:54:65:5A:18:08:54:10:88
            X509v3 Authority Key Identifier:
                keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:18:70:3c:70:67:71:66:e3:cd:34:e0:e7:15:c6:5e:c4:
         87:be:4d:9c:ef:c2:1c:2b:7c:a1:c8:ca:7e:97:67:c2:c4:5e:
         49:bb:9e:87:15:07:7c:50:17:93:bf:7c:74:5b:25:2b:62:3c:
         85:00:09:b4:ef:fb:36:9a:19:9d:6e:53:a7:b6:73:a9:2c:ba:
         15:f2:4c:ba:79:3c:c3:d2:d3:42:30:d7:09:0d:b8:24:10:0c:
         4e:f9:b3:a0:73:28:c7:fc:df:f3:9a:d8:53:b0:8f:99:83:d7:
         d9:02:6d:aa:6e:75:eb:39:03:2e:66:1c:fe:e5:e4:b1:46:40:
         79:d6:c5:db:83:bc:76:93:31:88:f0:b7:7b:a8:00:e2:d1:46:
         49:74:5e:61:15:88:00:12:6f:39:41:a2:b1:b6:83:17:ce:32:
         df:57:dc:ac:ca:08:e2:af:ae:de:c8:59:a4:8e:84:cd:d8:d1:
         64:43:72:95:a1:e1:44:32:5e:20:31:ed:59:c1:61:1b:9a:62:
         34:14:f8:3c:d2:13:a8:0f:b0:47:26:ec:65:c0:91:9f:31:c1:
         70:28:f0:4d:a5:6b:8c:54:91:28:8d:44:e3:a8:4a:8b:02:47:
         f9:3f:8c:1c:b6:41:95:82:cd:b6:90:32:ed:d1:fd:6f:40:22:
         15:12:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:19 2026 by rpki-client