Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File:                     L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier:          1PI93jhEwaAVeUVEDfJmEzWY7u6MtWh6ZRUyOhXwi2U=
Subject key identifier:   CC:A4:41:60:51:B9:E4:19:78:78:56:C2:95:5B:21:32:45:60:49:19
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       019EC0DBB5697378264067C828B26BCA9CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number:          1999
Signing time:             Sat 13 Jun 2026 12:01:24 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:24 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:24 +0000
Files and hashes:         1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
                          2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: tLu6aKFFHX06lGqz7tyO02XSRCjGppxNBi9H2KiWysE=)
                          3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
                          4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
                          5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:b5:69:73:78:26:40:67:c8:28:b2:6b:ca:9c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: Jun 13 12:01:24 2026 GMT
            Not After : Jun 14 12:01:24 2026 GMT
        Subject: CN=cca4416051b9e419787856c2955b213245604919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:21:88:a6:cf:12:4e:3e:d8:30:eb:22:3c:b8:
                    90:aa:40:c9:c9:cd:8e:f2:2e:6f:12:81:3a:a4:3d:
                    26:23:7c:65:b7:6d:d0:f5:1b:e4:c8:bb:97:60:cd:
                    3b:b5:1e:6a:1a:1d:f7:ea:a2:f0:d8:9a:aa:01:d1:
                    a6:f5:98:59:0a:b8:93:7a:4d:d1:46:2c:c3:29:c0:
                    c8:55:99:04:ff:cf:bc:93:3e:16:62:65:3b:24:45:
                    58:6e:f6:a5:b3:e5:0f:c5:c7:83:9a:72:68:c1:6d:
                    af:94:7f:3c:a1:79:f5:c3:46:eb:ed:4e:a5:4e:8c:
                    47:09:70:cf:52:ca:1f:7d:cb:dd:81:c4:10:3b:f1:
                    7f:a5:80:80:98:e5:4c:04:f6:d7:bb:f7:30:65:81:
                    98:4c:42:c1:8d:6b:ea:6d:d0:6e:7c:26:1c:c4:56:
                    80:fe:1d:be:76:0c:53:74:5e:5c:df:b3:96:72:09:
                    e1:28:15:5f:75:dd:57:73:4e:26:22:e1:0b:0d:17:
                    21:dd:82:a6:bf:7b:f9:fc:4c:2f:2e:ab:e1:48:a4:
                    0b:74:2c:d5:7e:ef:10:77:de:72:20:2e:06:7a:65:
                    01:da:fc:a3:54:bb:ad:84:d7:2f:81:9c:6c:2c:ea:
                    1d:b8:9e:50:78:5b:93:37:17:03:d0:ea:fd:b2:8e:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A4:41:60:51:B9:E4:19:78:78:56:C2:95:5B:21:32:45:60:49:19
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fa:de:dc:51:c0:dc:5a:97:d0:18:f7:ff:ee:ca:05:fd:24:
         80:67:3e:9c:ca:52:57:52:c2:89:30:21:f6:35:a5:a8:7c:a6:
         03:27:42:80:2a:37:80:00:64:18:1d:cc:bc:79:9b:99:de:85:
         55:b3:aa:f1:d0:3f:d2:0c:56:7b:d5:fc:04:ab:cc:05:be:2a:
         c9:c5:5e:ec:cc:40:68:5f:8c:20:65:74:2a:5c:76:cc:57:19:
         79:7c:33:52:87:f7:a5:87:67:02:00:bf:f9:de:0c:05:d5:9e:
         71:dd:bc:65:d0:7a:ca:df:1e:01:6d:9f:1b:fe:10:65:21:42:
         d7:e5:ab:c7:a1:f6:8f:24:a3:90:a7:e8:04:99:bb:8c:2d:06:
         f7:8c:eb:bf:50:f9:9f:92:1e:24:3f:d7:01:5b:cc:fc:48:f9:
         83:dd:f3:4a:18:0f:55:9d:72:c0:5d:59:a9:55:80:ab:38:ca:
         16:75:c0:b5:01:8f:00:dd:5c:b4:0a:d7:dd:64:57:c7:e8:62:
         fd:bf:f1:b4:07:af:bb:e9:0b:ef:48:15:2b:42:3a:03:b3:76:
         c9:36:e1:e3:09:4f:b5:72:1e:fe:77:e0:43:de:d2:13:75:e4:
         b1:df:99:fe:1a:53:70:99:7a:9f:db:7d:70:6c:cd:6b:bd:81:
         c1:2f:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:06:57 2026 by rpki-client