Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
File:                     r2wr579CguHNaQjyiaec7Apd9C4.mft (raw, json)
Hash identifier:          jiKFBHAfQaq8LO7CXdf6ZPD3S3rG5au2AR2s0Dd6zx0=
Subject key identifier:   2E:74:6F:FB:6C:22:C6:16:D7:E9:F3:BD:0C:EE:A0:B0:16:CB:BB:10
Authority key identifier: AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E
Certificate issuer:       /CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
Certificate serial:       019EBF23290D45A4CA6F053D8BE9E0F9EC9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
Manifest number:          03FA
Signing time:             Sat 13 Jun 2026 04:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:12 +0000
Files and hashes:         1: 9Xrlh9UG6YWWGE2DSWpmDwT_iO4.roa (hash: rmGIE8RLPp2ZBEe7jUWomsqx9QMK5jj6TTJjEreNzk4=)
                          2: XB5JQ6tMGhK6VXwjo3nOEFMkM-U.roa (hash: KV414vkbOzOU+S9G8Ie1ETRwhJyk99wklT+FH+pmi/w=)
                          3: r2wr579CguHNaQjyiaec7Apd9C4.crl (hash: OijjaUyjaDLsy938/yW4jkgsdF0l5Z4CBiJbCl+8fRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:29:0d:45:a4:ca:6f:05:3d:8b:e9:e0:f9:ec:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6c2be7bf4282e1cd6908f289a79cec0a5df42e
        Validity
            Not Before: Jun 13 04:00:12 2026 GMT
            Not After : Jun 14 04:00:12 2026 GMT
        Subject: CN=2e746ffb6c22c616d7e9f3bd0ceea0b016cbbb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:1b:ce:20:a7:f7:ac:c8:9e:70:b1:92:25:
                    e7:3a:ea:c4:87:2e:ff:67:c9:5f:46:cc:cf:ad:bd:
                    22:23:ff:7f:fd:8d:4b:b4:e1:e3:09:7c:d8:93:7a:
                    36:b0:50:90:6b:a6:dd:dc:37:41:7b:48:f9:71:10:
                    07:87:3b:8d:01:8a:57:0a:35:d4:88:8f:c5:c7:19:
                    1c:42:34:3f:2a:b5:d6:a0:3c:fc:4c:15:b8:bb:67:
                    f9:a3:32:56:fc:f5:14:9e:7a:7c:12:ce:49:0d:af:
                    e3:f2:27:85:df:51:20:d8:bf:44:a7:10:fe:95:de:
                    85:20:eb:9d:2c:1e:61:af:d2:b6:c4:1a:f6:91:72:
                    8e:2a:d3:f4:72:53:05:cf:53:a3:e1:f9:d4:86:32:
                    6f:d2:2b:d3:c5:24:11:c6:eb:1b:ec:a9:2d:f5:27:
                    21:fd:e3:6f:4c:5c:08:56:fc:86:9a:56:0a:0e:6a:
                    2c:f7:b6:b5:54:31:3b:8a:8c:87:04:c0:0c:92:93:
                    e9:17:f6:d2:23:2e:0f:0c:c8:86:df:17:46:cd:6f:
                    3b:ba:dd:27:ac:ec:1f:ca:b1:c6:b0:fe:75:dd:41:
                    e7:bc:94:9c:e7:36:3b:2c:93:41:48:f1:89:cc:0a:
                    c3:35:ee:e3:68:01:48:86:03:09:a9:59:32:92:b7:
                    33:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:74:6F:FB:6C:22:C6:16:D7:E9:F3:BD:0C:EE:A0:B0:16:CB:BB:10
            X509v3 Authority Key Identifier:
                keyid:AF:6C:2B:E7:BF:42:82:E1:CD:69:08:F2:89:A7:9C:EC:0A:5D:F4:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2wr579CguHNaQjyiaec7Apd9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/r2wr579CguHNaQjyiaec7Apd9C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f2:d4:55:ec:f7:ff:16:45:8b:97:46:2e:38:a5:63:5c:b1:
         67:ac:c3:5b:02:3f:5c:41:5d:27:47:6d:97:9d:01:4e:96:e7:
         cf:38:53:58:f1:b6:61:04:71:84:07:15:c1:2a:1e:9d:02:27:
         9f:49:25:eb:c3:bf:60:49:71:3a:d9:d6:29:1d:8d:7e:72:0c:
         bc:39:b6:10:b4:fc:79:eb:60:1b:cc:11:ee:8a:3f:43:24:d3:
         4a:cc:35:fa:da:f8:b4:f9:fe:19:ae:98:57:30:d7:59:c4:f7:
         e6:32:10:29:47:40:74:44:cf:b9:b3:34:19:df:d3:4e:18:0e:
         30:ea:1f:d2:fa:53:7c:46:22:e5:82:9a:08:7c:4f:1f:18:fb:
         3c:04:21:81:ab:0f:3c:e7:2c:8d:f2:2e:c4:b0:82:0c:e6:ce:
         9d:ac:bc:4e:57:ed:b5:9a:5f:8c:ae:8a:1e:79:12:0d:b0:57:
         f8:79:f6:ae:87:fb:30:63:f9:cd:33:33:27:1d:ef:fb:79:62:
         f3:bb:5c:1d:32:94:c2:a9:0b:ac:88:9c:1c:2f:50:f2:2c:e7:
         31:13:9d:05:0b:c2:36:aa:4f:27:1c:1e:60:ca:dc:ce:ba:27:
         14:31:dd:97:63:9e:fe:24:e3:3a:81:8d:ce:bb:0f:ae:1c:2d:
         f8:fd:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:50 2026 by rpki-client