Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
File:                     p8dSnZiE2jCIq487WPs-Y1F501o.mft (raw, json)
Hash identifier:          uIQNgAzNzsQhQUuYSoLGosduKO96RhegRgRLvmnAG2o=
Subject key identifier:   2F:E9:9E:F0:9B:57:F2:DF:41:1E:64:FF:61:89:E2:85:9F:05:A9:50
Authority key identifier: A7:C7:52:9D:98:84:DA:30:88:AB:8F:3B:58:FB:3E:63:51:79:D3:5A
Certificate issuer:       /CN=a7c7529d9884da3088ab8f3b58fb3e635179d35a
Certificate serial:       019EC3005E3E121D391771032F688F454C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
Manifest number:          1F
Signing time:             Sat 13 Jun 2026 22:00:41 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:41 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:41 +0000
Files and hashes:         1: 6wwyHetaWlbuQqBi8km0Pln5kLU.roa (hash: NfTKPcEnOPcVeUQUwx5+VFtDZy/ENtzf3n4eNOFkcHM=)
                          2: RMWx0na57fb4dm5uTmWlaZfAY8o.roa (hash: oMhmDSIeMo2V2QXvcmz5Nm8/bP3iTh98RN6hsLbmoWU=)
                          3: p8dSnZiE2jCIq487WPs-Y1F501o.crl (hash: ApZqa72DRAsf4kM1aB/RS2KWnF8ivlztOAA+mGQvv/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:5e:3e:12:1d:39:17:71:03:2f:68:8f:45:4c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7529d9884da3088ab8f3b58fb3e635179d35a
        Validity
            Not Before: Jun 13 22:00:41 2026 GMT
            Not After : Jun 14 22:00:41 2026 GMT
        Subject: CN=2fe99ef09b57f2df411e64ff6189e2859f05a950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:2b:b0:53:a2:58:17:e5:a9:7b:57:7c:b1:
                    63:9b:39:d6:8e:4c:de:32:96:74:02:b4:4f:be:81:
                    e8:1c:a3:e2:e5:64:b0:1b:32:58:a0:25:57:0e:7b:
                    6b:a5:77:2b:31:53:53:9b:ea:07:91:e9:21:00:7c:
                    cd:d8:9f:44:0e:01:bd:17:25:09:d5:80:6c:ea:00:
                    b2:d7:88:e3:48:a7:86:0c:26:1d:22:41:42:45:f6:
                    3d:fe:f3:53:ef:5f:2f:05:8e:e1:5c:d7:14:01:4c:
                    05:ab:50:a8:68:53:b6:ff:7c:3a:d7:51:e8:32:49:
                    8f:66:95:e6:d9:1e:60:96:e2:2d:c0:34:ac:11:f4:
                    b3:fe:0b:66:fd:49:10:3b:12:59:fd:3f:ac:a5:5e:
                    37:14:f6:3e:f1:8b:01:d2:ad:91:57:55:a8:15:40:
                    bd:89:2e:c1:ff:67:e0:d1:6c:9a:8c:62:e7:1d:de:
                    a6:74:0f:db:1d:9b:86:43:59:d6:d6:41:43:2d:8b:
                    fc:9a:a4:c9:7e:6e:30:a5:d7:3c:c2:7e:d8:60:44:
                    36:48:dc:a6:67:ee:cc:a4:71:24:23:ca:64:5e:8f:
                    d8:e1:e5:ba:fa:be:de:c1:e2:0c:44:06:12:dd:7c:
                    b4:3f:90:21:5a:bf:31:27:d5:d4:cb:f8:ce:00:d0:
                    16:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E9:9E:F0:9B:57:F2:DF:41:1E:64:FF:61:89:E2:85:9F:05:A9:50
            X509v3 Authority Key Identifier:
                keyid:A7:C7:52:9D:98:84:DA:30:88:AB:8F:3B:58:FB:3E:63:51:79:D3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a9:a0:8e:f1:45:61:8c:33:4e:29:c1:53:67:69:fa:37:c4:
         02:58:3f:5b:ce:f1:ee:27:cc:00:ad:67:6f:a2:4c:37:6e:5c:
         a4:e8:ed:3d:d0:2f:4d:3e:b9:51:c4:7d:9a:87:f6:9c:be:3c:
         ca:49:2c:6a:da:50:69:c7:51:aa:7d:7e:f2:89:0a:26:0e:28:
         94:8b:b9:4b:64:37:ab:82:52:6e:19:59:8a:89:49:7a:e0:5d:
         ac:35:27:8a:58:50:31:e2:05:8d:cf:81:31:8b:0e:75:77:d4:
         3f:0f:74:94:b9:75:26:27:ad:d4:d5:1d:78:3e:08:5f:d6:67:
         98:af:3c:6e:c1:63:b1:66:52:00:72:0b:d5:d9:8e:a5:21:cb:
         42:9d:e7:91:cc:7e:41:f0:7e:12:33:3f:79:79:36:da:fe:be:
         3e:c6:ac:bd:5d:1d:c8:3d:f5:76:73:b5:db:3f:75:99:c4:ff:
         39:22:1d:eb:0c:a6:6d:94:ea:8a:ae:f2:49:46:6a:58:41:4a:
         f7:77:d1:13:46:80:05:1f:f3:31:2a:16:c6:e2:26:29:11:f5:
         73:a0:1a:ed:d8:0b:33:0b:57:19:0a:1c:c2:63:14:7b:76:07:
         ae:78:5b:98:d6:6e:c7:e8:47:2c:c5:26:ac:3b:5d:f6:e3:ee:
         38:82:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:06 2026 by rpki-client