Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
File:                     TXaD1upTn-8ba22910ox0F5fCiM.mft (raw, json)
Hash identifier:          XYVtdMqOKtD9P5bHMuMLWLgxwT5T+5KmEa8Z+sIxgNI=
Subject key identifier:   8F:A3:28:7D:0E:91:43:A6:80:71:28:14:9D:AC:95:1D:CA:67:51:A2
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Certificate issuer:       /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial:       019EC2CA098CB029E32D810CDC709FB17E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 21:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:20 +0000
Files and hashes:         1: 9nRBo0Yomhpgm9TNkjDZWwhznG4.roa (hash: JVKW/CXhEruKd4nkDT8EtdFwFBbGNGwV/vGyVQso2YA=)
                          2: CJ1p60ncJ6lwmkba6tzp8PwUtGA.roa (hash: Fs77R9OF/tCUM07EJYitJlab1am9Hn64q8ob0oebDkA=)
                          3: PabEzo_xhzNh86GJKwujZAVSaKY.roa (hash: KpQX2bvuJbagEXNR3/7qIg5Rru1wDlXdCAjMjXG/6Mc=)
                          4: TXaD1upTn-8ba22910ox0F5fCiM.crl (hash: jqWQavNiCdPsBowIStZC5js/nO6Yy7EKvXEMx7kseI0=)
                          5: fTj8VjA3jlGkhYbcidRdlQKvw2s.roa (hash: jRzOWOgwnHuf2EMT7ZgwseHhtj6/xt+nW051JNR2aY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:09:8c:b0:29:e3:2d:81:0c:dc:70:9f:b1:7e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
        Validity
            Not Before: Jun 13 21:01:20 2026 GMT
            Not After : Jun 14 21:01:20 2026 GMT
        Subject: CN=8fa3287d0e9143a6807128149dac951dca6751a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:98:ab:6c:1c:39:cc:3e:67:f7:70:36:e6:
                    ac:99:d0:82:e8:e6:e3:d9:84:55:0b:1b:85:bf:2e:
                    d6:fb:7f:ec:7d:23:aa:82:1a:f7:3a:23:70:ef:08:
                    a2:34:23:81:54:82:cd:36:16:73:7e:62:94:a9:a5:
                    23:a6:0d:92:f1:4d:6f:e1:32:86:98:c6:e8:93:b9:
                    00:7a:1e:77:5e:19:bc:b9:e0:90:c5:f7:c1:20:e8:
                    bf:e1:4f:7c:f2:2d:0c:03:db:f7:5a:e4:32:d4:d7:
                    ef:32:91:1d:10:b0:fb:18:3d:4a:43:9d:46:d7:be:
                    73:9e:c6:6e:d3:29:55:49:a0:24:33:b4:ee:72:16:
                    b2:91:af:8f:77:c3:2b:5d:d3:aa:2a:3a:bb:75:bf:
                    8f:18:dd:06:54:1f:62:69:ee:e5:74:70:09:75:ea:
                    f9:0f:c7:6a:e8:09:2e:c1:c1:85:23:66:9e:94:53:
                    c3:0c:b7:9e:4a:18:72:c8:6e:62:b2:41:47:56:6f:
                    03:7b:51:51:bf:47:3d:17:e5:73:c4:e6:60:76:97:
                    cd:f6:8e:a5:df:85:d6:fb:41:bc:9c:4d:65:59:ef:
                    71:44:6d:eb:df:ef:b7:9c:f1:91:a0:09:fe:77:f0:
                    4f:e6:18:b4:4a:26:88:99:0d:fc:c9:f9:41:29:e3:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:28:7D:0E:91:43:A6:80:71:28:14:9D:AC:95:1D:CA:67:51:A2
            X509v3 Authority Key Identifier:
                keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:b9:9d:ea:44:f4:49:20:68:8d:12:fc:22:e2:ff:fe:ec:ad:
         7f:a8:0a:df:4a:b7:ec:e5:f7:fc:cf:8f:bd:9c:60:20:e5:34:
         6a:27:fe:be:4a:d3:14:95:58:e2:f2:1f:b7:49:0b:e5:e5:ed:
         39:6f:06:06:d7:78:0a:59:fe:d9:63:0f:e7:72:52:68:3c:1b:
         fe:15:80:06:05:d1:cd:4e:a4:16:9b:0d:f0:de:7c:03:e0:f3:
         3a:0f:37:c9:ea:24:7f:21:86:71:5b:5d:02:6c:8e:ec:59:81:
         98:13:49:11:c7:d5:d9:b2:22:2c:d0:a6:b0:99:61:21:27:f4:
         74:6d:41:4b:ca:2b:b5:b7:60:5d:74:d9:f0:ab:28:4b:5f:48:
         ae:54:68:e9:1a:8c:2c:8c:2d:98:b3:29:3a:a7:dc:96:a7:de:
         35:fe:02:0d:f9:e3:4c:67:95:f1:0d:39:30:76:d0:52:d0:33:
         37:d7:f7:1e:b8:f3:2a:a2:f8:5b:65:d8:25:26:73:61:d4:f1:
         2c:68:36:01:27:8f:a6:4d:5f:f8:2d:61:05:2e:09:b6:10:10:
         e2:63:18:56:0f:a6:21:da:a4:79:d6:e8:ce:e7:2b:a4:2b:1a:
         35:77:da:1d:cb:e0:5e:0f:60:8e:67:4b:72:0d:a0:dc:c4:7d:
         57:df:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:19 2026 by rpki-client