Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File:                     fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier:          zZ2T2fH2VcVIAU+hgwZ0U/JlcCL1TdjhtItgRkyVlpQ=
Subject key identifier:   F5:D9:15:20:EA:05:96:2D:92:26:FD:4C:42:22:40:A7:F3:9B:3B:9F
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer:       /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial:       019EC1EDF6F1AED234751F014435FB9E8A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number:          04EC
Signing time:             Sat 13 Jun 2026 17:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:58 +0000
Files and hashes:         1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
                          2: a7dc7sTXBG9g6baqXZ5n-zFcW2U.roa (hash: NAb+NkDlWJd04gSzwtykl0+s9KlRgbw76dF4Fu82HXg=)
                          3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: yFYvQ4iu2/Xo8MxlBBVr3+aXnVvgzfqDm9Zn3AP4S5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:f6:f1:ae:d2:34:75:1f:01:44:35:fb:9e:8a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
        Validity
            Not Before: Jun 13 17:00:58 2026 GMT
            Not After : Jun 14 17:00:58 2026 GMT
        Subject: CN=f5d91520ea05962d9226fd4c422240a7f39b3b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9e:3e:ca:03:e2:9e:28:12:80:7a:11:73:c1:
                    4f:4c:d0:fa:5b:b1:8b:95:1e:e1:7e:9e:65:9f:74:
                    15:b8:98:43:bc:43:4a:5e:2e:5b:d3:9b:0d:4c:d2:
                    84:86:c7:33:0a:dc:e3:24:4f:ca:f2:be:b2:0e:a1:
                    58:79:34:a3:ce:35:bc:30:d9:c6:b7:b3:45:88:98:
                    83:0f:89:84:ce:4b:8e:01:cb:87:03:7f:2b:7e:d5:
                    6b:81:07:16:d0:67:4d:62:19:5a:65:5d:ee:aa:1a:
                    c2:11:15:3b:61:f8:97:7f:21:c2:38:43:ae:fc:17:
                    c6:19:0f:a8:12:d6:b1:ca:93:b8:06:c3:19:ff:c4:
                    be:85:b2:03:6d:65:2f:24:70:9b:89:a3:81:33:57:
                    ef:79:ad:22:56:ca:96:25:82:ea:d4:5c:e5:c8:23:
                    c8:49:bf:76:2a:a1:3b:b8:4a:76:e0:10:46:a9:66:
                    78:c3:02:dc:1c:45:37:f6:14:47:9a:ba:a0:a3:66:
                    94:f0:cf:27:d4:59:a1:bf:e0:30:67:fa:1f:c9:ba:
                    7c:50:60:16:46:fb:23:58:03:5e:c9:c2:2c:42:bf:
                    c0:31:a5:f2:42:1e:19:25:22:5e:56:93:df:a9:6e:
                    e0:6c:e0:66:06:96:17:66:9a:24:1c:32:21:9c:64:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D9:15:20:EA:05:96:2D:92:26:FD:4C:42:22:40:A7:F3:9B:3B:9F
            X509v3 Authority Key Identifier:
                keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:49:c3:b8:34:16:8c:d8:a5:0b:3f:c7:7e:0f:34:ee:b3:d4:
         dd:06:84:d6:5b:ab:7c:a5:35:0d:7f:47:bf:df:b2:b2:16:ba:
         a5:2e:fe:c8:95:5a:81:bc:c7:92:6a:4b:e8:db:15:90:4b:d3:
         ee:36:95:fc:23:84:8e:ab:88:ef:a0:c1:db:89:03:53:26:b3:
         71:06:5c:95:2b:d8:3a:86:89:b5:39:02:ea:bf:15:49:e2:1a:
         df:3d:87:64:b1:12:be:5c:6f:9e:4b:b0:ea:f2:48:f0:c7:40:
         e2:eb:e1:b9:c9:df:28:61:16:f5:29:ae:a6:fd:3d:6f:45:93:
         59:48:fb:1d:26:fe:97:6c:95:a0:bb:bc:29:a3:1d:f7:20:54:
         20:b8:62:53:e9:44:8a:a6:3b:e3:dd:96:24:4c:c1:8e:55:30:
         96:7f:fc:f9:ee:9a:9d:22:c7:39:0c:27:1f:22:bd:bf:67:95:
         92:ed:f1:e6:79:22:70:8a:62:0a:8e:61:8b:d7:c2:2b:66:24:
         5f:8a:3e:34:6e:53:66:cb:b2:7b:0e:ce:64:ee:53:d4:eb:0e:
         61:45:c6:02:e6:b9:dd:af:22:13:20:d3:d7:08:f1:9f:6d:70:
         b3:e7:98:54:1a:37:e6:56:62:c6:6e:5a:c9:36:bd:d6:3b:09:
         7b:2a:2a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:02:25 2026 by rpki-client