Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File:                     mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier:          /QxlMQ4PuT5WjB0knKpTqbF2GadF7jH4kwpdimOnpHM=
Subject key identifier:   FC:E4:F0:F2:19:B9:87:4B:D8:D5:94:A8:94:58:EC:26:DA:7C:0C:48
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer:       /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial:       019EC1B68911D818EB374CD860A332BE6904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number:          0ACE
Signing time:             Sat 13 Jun 2026 16:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:25 +0000
Files and hashes:         1: SnoNlY5zJQKWPQpDtP3lmgVqDWI.roa (hash: UfC4MTPTPQZoHUvi5oB3mT4y+nLt9U+6XEC480aLUxY=)
                          2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: OQISNdHRY++AL8kaN4QwDSL3YnE7h1onw2ELOHpXeBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:89:11:d8:18:eb:37:4c:d8:60:a3:32:be:69:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
        Validity
            Not Before: Jun 13 16:00:25 2026 GMT
            Not After : Jun 14 16:00:25 2026 GMT
        Subject: CN=fce4f0f219b9874bd8d594a89458ec26da7c0c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:09:8f:09:40:34:0b:4c:a5:b2:db:b5:d9:
                    54:1f:49:35:9b:70:1a:02:8c:2d:e7:08:4c:83:00:
                    1b:ee:e9:5a:c2:b3:ad:fc:4f:89:50:c6:b4:dc:e2:
                    e6:5a:f1:d2:ce:51:50:d1:33:f6:2f:0e:22:60:51:
                    89:44:71:01:27:a4:16:64:c8:53:12:41:14:32:52:
                    6e:4f:c2:8d:8d:82:0b:c2:c2:d2:cd:58:94:e6:c0:
                    d2:27:a3:e5:d6:9b:be:e1:7c:9e:74:64:3f:ce:43:
                    a9:86:2c:43:57:68:00:4a:5d:b9:fa:f6:a6:c4:99:
                    7d:e7:f0:13:db:d4:f8:ba:dd:21:27:6c:8c:2a:69:
                    3c:9d:b0:41:4f:a5:93:10:a7:42:e3:bb:79:98:2c:
                    c6:50:20:61:ee:ff:4e:eb:ce:26:da:30:09:55:c1:
                    be:9a:17:01:3e:0d:28:b0:69:ab:38:f5:36:7b:c0:
                    bf:b4:66:de:a3:61:6e:9f:5d:0c:60:9d:f6:c8:8e:
                    bd:c1:11:3d:0d:06:c1:74:33:98:1c:78:ac:d9:c2:
                    ee:2f:d3:e3:10:91:e6:04:6f:48:2e:27:1e:cb:eb:
                    9e:2a:4e:35:c8:1c:e6:26:c1:f5:a4:e1:49:cd:d6:
                    0f:4a:c9:ab:0d:c7:e1:c4:84:e5:88:3a:af:69:e9:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E4:F0:F2:19:B9:87:4B:D8:D5:94:A8:94:58:EC:26:DA:7C:0C:48
            X509v3 Authority Key Identifier:
                keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d1:ec:a5:aa:4f:9b:26:9a:2e:c8:f5:20:e4:79:2b:79:e0:
         d7:c1:87:f3:1d:b9:a0:30:4f:10:f3:60:e7:62:d4:df:c2:3e:
         7c:5c:3a:3a:06:79:58:ef:ec:d9:f6:3e:90:2c:4f:b5:a7:01:
         e2:b2:20:90:f4:a2:6f:5b:98:03:e2:fe:77:61:8d:0a:e9:ad:
         ba:7f:c8:05:e8:3f:79:ec:0b:4f:3e:17:5e:52:a3:59:0f:43:
         29:58:29:49:d8:ea:0a:a9:58:6d:7a:86:31:30:b5:d6:fc:13:
         ca:95:d1:09:45:75:a3:fd:22:17:e3:c1:af:91:c8:9e:7f:64:
         05:ef:e1:80:3a:d9:46:80:ef:b8:20:58:48:fc:e5:9f:60:b7:
         57:b8:12:2e:d8:f3:6c:75:f1:76:66:f3:72:84:1b:ab:09:3b:
         3c:0d:3f:34:88:da:f0:c2:2c:e6:90:8b:28:91:a1:f3:9a:7a:
         8b:48:af:3b:70:b2:e7:82:50:92:f9:91:46:3a:c8:74:bc:64:
         3f:42:c9:cd:98:e4:76:e3:8e:b5:c5:c5:d7:bd:49:ef:fc:a7:
         79:f9:92:94:f3:c4:79:ef:32:e9:a7:56:4c:37:53:0d:ed:7a:
         89:12:8f:cd:be:43:a4:3d:34:23:3c:30:d2:7c:7c:2a:a7:d1:
         64:8d:c1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:13 2026 by rpki-client