Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
File:                     axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json)
Hash identifier:          OgFb8LiwSQH9n9RDnTHqDMmdesmjUsykSVLgAEnhtkE=
Subject key identifier:   4F:55:35:A2:9D:2A:77:73:3F:07:73:31:7E:3C:65:B3:10:E2:7B:07
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Certificate issuer:       /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial:       019EC25C09075294E92FB99A715BEDAB2306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
Manifest number:          1195
Signing time:             Sat 13 Jun 2026 19:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:11 +0000
Files and hashes:         1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=)
                          2: 8GxpqzFkgC5Hy_akXhw29hXcvRQ.roa (hash: Aev5WlLyBeoo/iwLCZCFl1FrbyeMZhKq6RcvTv7DoY0=)
                          3: 8LleVlpBeH6rvTVrtdlSQo7_Krc.roa (hash: pr0ffVAFHumaLWPDJNcLOMJrBmKAb+juWG8ZwguB2Is=)
                          4: 9irx_5__iebC-joF_t5k-HwOato.roa (hash: D9D6cEfFrHVaLUE2HmZWJvCFExnSp3xZwWxilCrXvQo=)
                          5: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=)
                          6: IMoGaiROnW6LTILmyh94FF46a9s.roa (hash: YGEQqYNkK01s4h4tP2/taaUxOF3aULWqQu6lncXBybs=)
                          7: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=)
                          8: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=)
                          9: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: T1qMn+Qfx80Pnt0d6whvaTfUjfOHQnAHjMR6ptGAGV4=)
                          10: byHphyk01mdNjp2bMED6WM0LMRo.roa (hash: 5AdII6huOVn6Q8B/7VERsabLU+aXCUupzT68yyrMRfg=)
                          11: d-QxnSqS_V0shL66uqwLAgZFIBo.roa (hash: luvYromzsoLUcbp7ns0bb/QOxsjEI+GNMV9SnMHva8E=)
                          12: n3aPILIh7giuoDUK56sOpHcItYE.roa (hash: lZgrxhhUmWtrA9FtAOz5wAIODFYdd/saRuVJ0sfDMlI=)
                          13: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:09:07:52:94:e9:2f:b9:9a:71:5b:ed:ab:23:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
        Validity
            Not Before: Jun 13 19:01:11 2026 GMT
            Not After : Jun 14 19:01:11 2026 GMT
        Subject: CN=4f5535a29d2a77733f0773317e3c65b310e27b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:4c:e7:d0:ce:41:5f:c9:19:03:65:32:fd:
                    46:af:d4:5a:b7:b5:01:82:83:67:fe:fc:42:7d:45:
                    ce:85:ac:d5:33:91:ba:6f:44:04:65:ca:47:d8:33:
                    ad:30:5a:7b:91:f6:57:e4:d6:c0:e5:7c:60:12:6c:
                    7f:f0:1b:1b:ea:b9:dc:23:a1:5d:1c:50:ef:69:7f:
                    80:c7:96:3f:4c:38:b6:dd:44:38:f6:e7:29:45:db:
                    dd:d4:36:ac:68:57:a1:ed:f3:37:8c:96:44:14:87:
                    16:35:83:3d:b7:f0:41:de:c4:b0:57:98:fd:f5:09:
                    15:f6:69:12:7b:1a:f4:08:79:6e:41:67:88:6a:13:
                    31:ab:d6:b6:88:5d:b8:fc:c0:3c:c3:1e:9f:26:75:
                    8b:3e:af:f8:ee:4b:a8:ee:d2:a0:f2:c6:c6:52:f1:
                    8a:62:29:e6:f4:dc:b4:c6:d1:90:1a:2b:60:46:fe:
                    c8:60:4a:5f:ad:88:fd:7d:92:87:ff:3b:7f:31:0c:
                    c3:35:8a:3d:a7:d0:73:1e:16:4c:a7:93:df:f9:92:
                    fc:06:b1:64:ce:3c:e7:bd:d3:45:55:50:a4:df:d5:
                    f1:27:7d:04:5e:06:ed:6e:cb:69:9f:44:aa:22:3d:
                    4f:8d:84:cb:5e:14:92:0f:5a:a8:82:2f:8b:c7:1c:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:35:A2:9D:2A:77:73:3F:07:73:31:7E:3C:65:B3:10:E2:7B:07
            X509v3 Authority Key Identifier:
                keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d5:b4:68:2d:9e:1c:1c:79:09:ff:39:7d:da:4d:9f:7c:92:
         aa:ca:8b:48:16:3a:57:8b:2f:4c:f5:c0:f8:d9:80:f2:4a:2b:
         0c:2d:ef:e4:9f:df:4f:5d:06:80:3f:3d:c8:ac:4d:42:a3:94:
         e6:bd:2f:73:13:64:5e:ff:6d:42:2d:dc:89:fe:c3:24:70:b8:
         7f:f9:10:56:65:71:6c:4a:7e:3f:b7:0a:1d:61:e9:21:13:49:
         31:e0:d9:9d:fa:11:d0:90:fc:03:15:1d:21:3e:0a:44:b6:da:
         37:78:79:be:7f:91:71:65:08:e5:6c:53:c0:8d:9f:9c:e8:e5:
         cb:83:f8:d3:bb:63:65:21:48:b0:af:e7:cd:75:64:61:d1:46:
         3a:c3:81:32:fc:06:47:24:7b:1a:06:5c:2d:1a:ee:44:fd:5d:
         51:36:0b:69:68:e8:fb:33:29:99:57:65:e2:90:16:20:84:ec:
         ae:a7:5b:04:96:e9:49:c9:d9:37:36:d2:9a:21:55:65:50:1d:
         5f:b8:6a:51:de:56:03:f6:c1:eb:80:94:92:25:63:d2:0b:d6:
         ae:b2:2a:da:0b:b9:48:22:cb:cf:c3:a9:80:78:fe:81:d2:94:
         06:49:70:c9:b4:b3:80:53:ff:cc:c6:b4:b8:7a:c4:1d:29:eb:
         3e:08:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:48:48 2026 by rpki-client