Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
File:                     1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json)
Hash identifier:          r15wpMCGihRDlF/D/JGRaSLylyaCXOqO0eS/bvkBUXs=
Subject key identifier:   9A:DE:F2:BC:4A:54:C8:46:1A:FF:DE:AA:B8:34:1C:5C:A1:D2:8B:F5
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Certificate issuer:       /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial:       019EC0DB7B999EB54EA271AACB26C2A09AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
Manifest number:          0659
Signing time:             Sat 13 Jun 2026 12:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:09 +0000
Files and hashes:         1: 1-hH0OdTs66ZHAoF3LxN6GzGRGLA.roa (hash: lwxtwCNle18YFsAjD50qJJ41jy6oJAGh+Vhp9fwJVGo=)
                          2: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: Vg3yMAPpn1wVdS4Vq2c5Lb93VkqXEgaIy9eiK+hs7pY=)
                          3: 4FvrTlxGhcdz6JszhweukK-HXp4.roa (hash: vyQEyyYQodDDsgXdHyrJ4jLSuzaa1xOpp48GTtDNY8I=)
                          4: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=)
                          5: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=)
                          6: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=)
                          7: PT8f8KrDCyi-fOHRybRu5os8t7I.roa (hash: aps2zxt1lkijYJV6i+9YBPtT0emoODtU3jQBxhvYqO0=)
                          8: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=)
                          9: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=)
                          10: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=)
                          11: fro6TGls5A_k6d-cTWMJbP0QioE.roa (hash: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=)
                          12: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=)
                          13: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=)
                          14: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:7b:99:9e:b5:4e:a2:71:aa:cb:26:c2:a0:9a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
        Validity
            Not Before: Jun 13 12:01:09 2026 GMT
            Not After : Jun 14 12:01:09 2026 GMT
        Subject: CN=9adef2bc4a54c8461affdeaab8341c5ca1d28bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:45:40:88:65:6d:50:0a:28:90:ef:84:70:
                    32:00:85:28:0f:0f:c7:0c:7b:0a:ae:45:8e:4c:d5:
                    d8:01:68:71:6c:86:e2:06:39:46:a7:0c:69:f2:73:
                    7e:23:6f:f4:0a:a5:5d:a3:f2:c9:d0:b1:b7:9a:19:
                    69:58:87:1e:1d:bb:5a:3d:d4:6f:6d:6e:ca:4b:f5:
                    82:0c:46:52:63:b8:34:ec:dd:6b:e0:30:7f:0b:53:
                    9e:92:e6:3e:72:a8:06:06:af:e7:91:a1:49:b5:b7:
                    64:9a:22:65:02:47:ed:cb:2e:5b:6f:20:d7:ea:fa:
                    26:fe:93:1c:23:69:7c:72:1a:79:c9:3f:49:9b:9b:
                    e6:06:c2:9f:9a:ea:b1:8f:95:99:62:94:48:1c:2a:
                    4f:47:1c:08:00:ec:af:d0:18:8b:8f:33:21:a4:79:
                    78:3b:f0:3b:4f:52:da:8c:33:77:20:66:cf:c4:c3:
                    ad:cb:42:9b:2e:cf:25:45:90:43:73:dc:f5:41:0c:
                    ec:60:fe:3f:53:72:f6:7d:a1:2d:77:63:94:34:cf:
                    62:44:51:63:d3:ba:4d:00:7e:ff:32:b4:3b:a9:90:
                    f3:68:72:ad:c1:4d:60:fd:c7:e3:e9:c4:aa:d8:9f:
                    59:86:1f:b7:4f:98:40:81:8c:81:66:2a:7f:4d:57:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DE:F2:BC:4A:54:C8:46:1A:FF:DE:AA:B8:34:1C:5C:A1:D2:8B:F5
            X509v3 Authority Key Identifier:
                keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:c9:fb:b0:d9:97:b9:30:0c:22:ae:86:c8:c2:57:9c:14:
         11:c3:b6:6f:b7:ed:40:91:f7:0c:7a:0b:3f:33:26:c5:20:9b:
         20:45:92:0f:7a:31:0a:c4:8d:91:7d:20:39:15:98:33:b7:1d:
         f5:e1:a1:33:75:85:f4:69:48:2b:6a:0d:52:67:a3:3e:39:e6:
         6f:36:56:07:08:b9:03:6e:58:9c:57:d7:ad:9e:2b:61:98:07:
         48:fe:0d:c0:24:b7:25:d8:3f:9a:40:ea:d3:3e:69:c4:d0:01:
         e3:78:59:94:bf:8d:8b:ed:4f:00:9b:20:88:f1:05:0c:08:18:
         9f:b0:d2:d2:d7:36:8c:44:41:91:01:de:09:83:5b:56:94:71:
         93:65:be:5d:e1:70:ba:fb:b2:06:a3:86:61:18:57:e7:19:8c:
         c5:4d:2a:cb:9a:99:1e:5f:95:9e:de:7e:0f:c2:61:e4:3f:4c:
         d5:39:1d:7b:56:9f:3d:d6:b8:df:f2:51:b1:39:74:a1:07:c1:
         77:e6:e7:51:6e:41:4a:3c:89:9a:d9:3f:02:ed:ce:98:ba:54:
         42:78:89:23:9b:3d:6d:b9:60:c9:35:00:c7:01:47:fa:77:a0:
         88:e8:cb:61:88:47:65:f6:99:cd:14:88:8e:7b:21:42:5c:d8:
         bd:f0:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:34:28 2026 by rpki-client