Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File:                     hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier:          3++ExS7zbCR1EPYK3tpbMkG33+4fusP+B8JuBj361cM=
Subject key identifier:   69:64:D5:7E:8E:34:BD:61:09:6E:C0:02:28:11:9B:31:49:26:2D:5E
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       019EC337DC1F447CC7F083094FE1EBCF202A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number:          1963
Signing time:             Sat 13 Jun 2026 23:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:18 +0000
Files and hashes:         1: 7mhV_rdVlcfkhURFQ4wNrLsuU1c.roa (hash: VRlZTooxFrT0D1E6AOYVVz4EsX/5w5g/g1JyVqO9SPM=)
                          2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
                          3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: FxyuVptutVXfK7mV/uR5O02bXyppzwcpIjFB5K5NEgc=)
                          4: mBU4ZRokNQYo8hY7jxPLO4xVWjE.roa (hash: fbuOZHgRTTEjubl87/wnr5NfhswtzCz7CKZVt7r/aRI=)
                          5: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:dc:1f:44:7c:c7:f0:83:09:4f:e1:eb:cf:20:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: Jun 13 23:01:18 2026 GMT
            Not After : Jun 14 23:01:18 2026 GMT
        Subject: CN=6964d57e8e34bd61096ec00228119b3149262d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:21:bb:d9:4b:1f:05:dd:34:de:8f:8b:cb:
                    f5:6e:1d:e5:d4:d2:38:ef:a7:fd:0c:b5:9c:00:c5:
                    c8:4d:ad:f3:1d:63:fe:12:8a:6a:75:a1:62:8f:cc:
                    79:f0:8b:6b:5b:9c:34:a2:8c:e7:03:a3:4f:7c:2d:
                    6d:a8:af:3f:0b:ee:df:aa:cc:23:50:53:7f:b4:a8:
                    be:c6:9c:16:72:89:01:e0:15:d0:fe:cb:77:2f:12:
                    29:fb:76:5c:6f:e6:91:59:94:4e:80:1f:de:35:e8:
                    29:9a:5b:c2:68:5a:4c:81:4e:18:1d:50:a9:ed:4e:
                    2b:7a:db:ca:1d:be:0b:47:f3:70:96:e3:c9:bb:c3:
                    0b:d3:2a:65:f3:87:01:1e:21:6b:c0:be:7d:18:ed:
                    40:0b:ce:d7:78:a4:a9:15:e9:68:3d:1b:4d:49:04:
                    8d:33:4e:2d:b8:2c:a9:8e:62:82:43:c5:b5:e8:bb:
                    8c:1b:b9:7b:ab:50:2e:c8:6a:25:92:70:21:53:e6:
                    70:7d:0c:d9:5c:6d:0e:86:10:30:fa:2f:0d:98:ec:
                    81:24:87:7e:9d:fa:70:58:b1:a3:fc:03:ce:fd:46:
                    f9:d5:3e:4e:27:44:66:ad:23:9e:d6:6b:24:f3:bb:
                    97:c4:d0:76:c0:02:d4:b3:a8:e7:7e:a3:25:16:b1:
                    ee:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:64:D5:7E:8E:34:BD:61:09:6E:C0:02:28:11:9B:31:49:26:2D:5E
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:19:21:7e:91:38:81:39:ba:c1:70:bd:0d:19:c5:27:ec:2e:
         e6:e4:0b:7c:a5:24:3f:66:4d:86:ff:df:87:c2:90:a8:9a:cd:
         2d:e3:fb:ee:43:df:84:a8:de:a8:18:55:22:0f:dd:53:6e:d3:
         d9:5b:e6:3c:4e:7b:9b:7f:69:f6:b9:c5:b1:b5:5f:84:ec:5d:
         ca:4f:1f:55:bf:38:97:cd:40:53:b6:05:27:3e:ed:1a:35:c7:
         f3:7f:81:f8:16:d7:21:97:f0:09:6d:5e:e8:b3:b0:b1:91:07:
         5f:d5:eb:d7:54:2d:1f:ef:a3:ca:6c:4d:16:d1:7b:f7:ab:c6:
         42:0b:c6:15:cd:36:8c:68:35:94:c4:be:7d:ff:a0:74:db:2e:
         b4:b2:8c:c2:a5:41:74:f1:9a:da:2e:37:c6:30:70:e0:b0:01:
         58:00:8d:fc:ca:0c:74:24:19:5d:12:80:e7:52:f2:46:ca:e7:
         f6:fe:73:2b:1c:0f:ab:35:51:f1:2b:11:5c:ea:ef:ac:2a:a2:
         de:33:ec:4a:f0:b1:2d:00:cd:66:19:95:f6:29:04:23:6b:eb:
         9a:16:f6:51:11:a2:f6:43:19:90:32:e5:f6:d5:be:84:6a:e5:
         7d:ba:9b:68:a0:f3:6d:7e:b8:b5:ed:db:28:6e:bd:a3:21:c7:
         77:e4:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:02 2026 by rpki-client