Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
File:                     r4TKySqfMTSUgaaOlRvFWvUI8uY.mft (raw, json)
Hash identifier:          tqb+JVNCVddxin/A7sDU8Qnq+MADcw6Tlhd12p5wRE8=
Subject key identifier:   FF:84:21:36:E4:E4:20:EE:FB:B2:E6:11:E4:42:45:0C:B2:88:AA:5C
Authority key identifier: AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
Certificate issuer:       /CN=af84cac92a9f31349481a68e951bc55af508f2e6
Certificate serial:       019EBE7F1F1868C8E4158BAC468AC50A701D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
Manifest number:          E5
Signing time:             Sat 13 Jun 2026 01:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:02 +0000
Files and hashes:         1: 6jLG6sHP0uH-VWDXC-aY6pQShTw.asa (hash: uKIGD/vjcOdgcnZqgMesnuBDT0HiBxmR+kmrbx1+f7Y=)
                          2: BDgHG1Q9czVhyC3DjxtgNrwoTPc.roa (hash: DcjWP3L9YfgxacqAtFXHQOVruS1ILQzHmmRLjmZrdMk=)
                          3: iJxSVbAFop81tRZJNuYo6wfOif0.roa (hash: SxhE89MXr5geGOtet6ynyWQY6neN9HEjRfevzW29iyM=)
                          4: r4TKySqfMTSUgaaOlRvFWvUI8uY.crl (hash: 56CewZcviGKpzhZUFGuQd2e5dG0VeuJdbeeGNp6SQnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:1f:18:68:c8:e4:15:8b:ac:46:8a:c5:0a:70:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af84cac92a9f31349481a68e951bc55af508f2e6
        Validity
            Not Before: Jun 13 01:01:02 2026 GMT
            Not After : Jun 14 01:01:02 2026 GMT
        Subject: CN=ff842136e4e420eefbb2e611e442450cb288aa5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:58:82:a1:f5:79:39:0b:8c:db:3d:b2:51:
                    8e:cb:91:49:2c:4f:8b:d1:ec:44:5f:23:2f:3d:f4:
                    5c:ee:17:eb:b6:bc:2c:b5:51:4f:b0:c3:60:c0:e2:
                    83:38:97:7f:16:c2:04:77:97:e7:70:22:85:ce:76:
                    ce:e4:ae:33:d3:34:78:eb:06:38:d7:2b:4a:f5:e8:
                    a6:0b:16:4d:04:e6:12:b4:33:87:c9:fe:78:57:83:
                    10:aa:3c:93:1f:9d:5e:82:3a:1a:fa:46:b1:67:01:
                    2a:f3:41:9d:65:76:1f:c8:4b:6a:88:ff:08:bb:f2:
                    2a:89:21:a5:de:2d:87:ab:20:4a:cb:d8:2c:1b:67:
                    e6:67:ed:a2:89:6c:75:20:e6:dc:ab:86:89:68:51:
                    b9:a1:cf:fa:95:20:56:a8:86:60:72:f2:51:85:88:
                    61:e8:64:5a:cd:19:c5:f8:8f:7f:6d:ad:4e:89:3e:
                    e9:3b:d3:89:14:6f:c4:c0:f6:32:9c:35:b0:d5:7a:
                    41:0b:b5:48:d6:ca:c1:97:26:38:20:7a:36:9f:bc:
                    16:8a:ff:d9:91:75:72:07:d7:be:c4:00:d8:ce:8c:
                    2a:48:70:3b:a2:90:e7:44:d5:67:85:97:06:43:ae:
                    4c:94:cc:ed:8c:0a:2b:63:35:fe:48:db:ae:ae:34:
                    75:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:21:36:E4:E4:20:EE:FB:B2:E6:11:E4:42:45:0C:B2:88:AA:5C
            X509v3 Authority Key Identifier:
                keyid:AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:63:eb:90:17:0d:82:1c:73:2e:5b:a4:b5:3c:69:bc:ef:dd:
         a1:87:e2:43:b0:e2:16:4c:d1:5c:45:e7:2a:55:fe:5d:12:2d:
         49:e0:3e:dd:37:4c:da:a8:0a:01:5b:7c:fd:da:f2:a7:fe:a8:
         62:43:d1:1d:70:c9:28:c7:56:2a:e9:9e:f6:c0:c3:79:ee:3b:
         f9:34:3a:64:07:75:0b:87:41:f4:f7:cf:5e:11:29:dc:7d:af:
         5d:84:2e:ea:08:6b:fd:0f:3c:a2:ab:70:23:3c:9a:52:82:96:
         a5:13:26:54:6a:1c:1f:2e:e4:4d:43:10:70:44:6d:af:34:71:
         3c:83:b1:45:ca:52:8d:e1:69:a9:0b:fd:3b:3e:58:21:46:84:
         a7:5e:0e:75:81:c9:e6:80:6d:34:9b:16:8e:9a:d9:a8:69:81:
         68:2a:b8:dc:98:a0:f3:42:bd:db:63:bb:8b:d9:9a:aa:98:05:
         22:92:63:54:a4:de:52:75:90:20:cf:a9:55:bc:85:77:08:a2:
         ef:61:b4:55:a6:0d:a3:0d:fd:e5:1f:ec:c0:f6:c1:58:cf:96:
         c8:37:f3:a4:26:b7:9e:93:f9:54:45:fe:a4:d6:eb:3e:32:51:
         18:d4:d0:16:07:57:99:d2:6a:68:e8:fc:3b:cc:22:dd:5e:1e:
         64:e6:f3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:21:52 2026 by rpki-client