Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File:                     gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier:          Xl6AazdCk0twrDu5j+OidWGFi6noZaX69knieBSpy+8=
Subject key identifier:   87:69:48:64:6C:60:1D:26:30:B5:48:28:8A:D9:54:CC:BF:AA:03:89
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer:       /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial:       019EBF2415DAE8CA47EEFC5EC6AC2A4E03BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number:          0FD6
Signing time:             Sat 13 Jun 2026 04:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:13 +0000
Files and hashes:         1: 3WDU47d2fLscnSW7F3hgvaXG5ss.roa (hash: BfORbJGgiA+wWZ0EeMRYkEWvSYxDk7NkNvd7Q4xSZco=)
                          2: C5clDNKWWV0HBKYFKcpzORw8EhA.roa (hash: XUJvNLXyYDdL2C6nEB+rx6DsIA04Nnq77ZyzZhlVv1Q=)
                          3: E50tmVkqcKJ8hvkMgzElVUsN-nk.roa (hash: v6/X+2RH7lba53xOm7erhTp0p/yhNOGtKRcVvRlqm6o=)
                          4: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: ywwgbgdDoQPqUICJhcVkYKYju9Ca7XnJmb2Ci5D2434=)
                          5: ppKOK1k4bpVipnmImPdupSEmNC0.roa (hash: F13uVr28Hl5+Q/lhAirlIzj/fvyS+AXLflKOQ84sZ2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:24:15:da:e8:ca:47:ee:fc:5e:c6:ac:2a:4e:03:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
        Validity
            Not Before: Jun 13 04:01:13 2026 GMT
            Not After : Jun 14 04:01:13 2026 GMT
        Subject: CN=876948646c601d2630b548288ad954ccbfaa0389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:29:77:da:77:32:4b:dc:8e:f7:c1:d6:3c:
                    42:2c:dd:d2:58:c4:86:16:2e:36:8d:bc:00:ed:71:
                    af:95:21:97:41:bb:c0:7f:c6:e7:cc:42:ba:ae:14:
                    db:92:89:26:22:ab:f7:c1:70:6f:6e:4f:31:45:8f:
                    23:e3:4c:40:ea:08:a6:b2:32:64:e4:4e:aa:64:ec:
                    2f:5f:ec:c4:54:ba:bf:c3:a8:51:8c:4c:e0:84:2c:
                    45:31:d9:e0:01:b7:0c:ad:74:1b:c3:68:c6:45:32:
                    d8:d3:4c:c2:8d:fc:71:2e:6f:a6:2b:75:e4:12:86:
                    4f:b6:00:d3:93:50:cb:5a:64:5a:04:06:57:40:42:
                    13:01:21:b9:52:5b:39:9f:fb:15:d5:95:83:1b:43:
                    92:81:c0:f6:8c:ca:e4:23:14:ee:54:97:94:86:87:
                    c9:ae:96:2f:28:b2:93:00:66:b9:05:10:2d:b5:3b:
                    87:78:dc:e5:43:83:09:2a:59:ee:5b:47:85:41:5d:
                    30:61:7d:6c:81:28:21:c3:4d:27:31:2c:42:67:30:
                    fa:aa:0a:b6:6b:f8:16:25:bd:12:2c:cd:09:c0:e3:
                    1c:cb:51:b5:9c:0e:0e:0f:60:4d:63:cc:45:dc:dc:
                    4c:ef:ef:ac:25:b9:64:75:08:b5:cd:d5:e8:74:ff:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:69:48:64:6C:60:1D:26:30:B5:48:28:8A:D9:54:CC:BF:AA:03:89
            X509v3 Authority Key Identifier:
                keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:91:61:ba:a8:18:cc:40:2f:d0:b4:5d:bb:04:eb:ce:bb:f9:
         37:eb:a2:eb:f2:a7:97:e9:c9:82:a4:d1:b9:40:50:b9:27:41:
         2c:e4:0e:7f:08:81:78:80:cd:36:db:c3:b2:69:46:5e:0d:4b:
         9b:63:8e:ca:e1:e2:38:3f:2c:c5:b2:7a:a1:51:48:12:7a:e5:
         2f:61:5b:eb:ac:2d:17:db:c6:29:c8:7d:52:de:8f:00:31:69:
         47:41:ef:40:f1:6b:dc:58:77:1b:a0:a1:3b:0b:0f:6f:77:69:
         1a:e5:a1:da:3d:4b:70:be:b6:5e:84:ad:41:aa:4b:92:22:77:
         ec:a2:6c:f1:96:47:30:3c:8b:37:f2:32:1d:fe:23:59:6e:dc:
         14:d3:33:ea:18:c2:82:fa:c0:99:f8:cc:1a:bd:1c:31:41:5d:
         26:83:8c:6f:f0:37:ce:2d:cf:1f:dd:a4:5d:19:d0:53:5d:11:
         84:80:37:4a:c6:89:65:f7:ca:70:13:3a:e4:b4:41:5c:fa:06:
         02:e9:c2:7e:fd:d1:a9:e9:a1:7e:cb:b4:e9:56:da:29:01:83:
         3d:67:53:42:c6:89:de:55:ce:ce:ee:5c:50:10:86:22:a9:7e:
         c1:3c:d4:76:51:7e:5b:7c:47:88:90:37:93:0d:09:55:32:bf:
         d2:3e:d5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:08:16 2026 by rpki-client