Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File:                     S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier:          Xq/l10tIKGDYruMNwmpKeV6cnzMw2+qbNVwIDUU5jVo=
Subject key identifier:   8F:E0:CE:D9:CF:3E:52:B9:9E:4C:CC:BF:AA:41:F6:58:CE:EB:D2:5E
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer:       /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial:       019EC25C8CE536D642659C3525C7FB8B06E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number:          0F65
Signing time:             Sat 13 Jun 2026 19:01:45 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:45 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:45 +0000
Files and hashes:         1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
                          2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
                          3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: 4/OuB2/qFqyV+31RMfqXYilB/0Pc7HGjM6AakRYKfgA=)
                          4: c2NaEAlgVUYgoY72a0dwilashus.roa (hash: fAkWFixs8K72eGX6Cl0h1wXhSk4FbU9HoS7xaKjx650=)
                          5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:8c:e5:36:d6:42:65:9c:35:25:c7:fb:8b:06:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
        Validity
            Not Before: Jun 13 19:01:45 2026 GMT
            Not After : Jun 14 19:01:45 2026 GMT
        Subject: CN=8fe0ced9cf3e52b99e4cccbfaa41f658ceebd25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:21:2a:66:37:af:bf:58:55:92:ec:5c:6a:
                    1b:ca:6a:2d:6d:01:47:80:4a:f9:14:02:3c:f4:1c:
                    f8:84:28:9b:0f:00:0e:04:a7:27:42:dd:84:d7:96:
                    04:7f:4f:16:f7:69:ad:66:a4:d8:e4:59:75:24:2a:
                    9d:7c:65:61:1f:c4:24:e8:04:2c:a3:f3:9d:42:f7:
                    20:a7:03:f9:1d:2e:57:1c:25:5f:7c:26:52:9b:a0:
                    e5:9f:74:e7:3e:74:87:ea:a8:30:47:f1:27:95:d2:
                    81:c6:d8:78:54:9c:1e:ba:9b:d2:88:de:ce:5f:a4:
                    1a:8f:32:07:00:75:e6:bc:93:93:38:65:fd:20:4f:
                    02:3a:e8:e8:0e:e7:b1:0e:a7:c5:cf:26:ee:30:5b:
                    17:ce:46:05:0c:4c:05:6c:f7:09:2f:78:da:05:17:
                    77:57:dd:f8:26:30:4f:e1:7e:84:25:86:45:fa:2c:
                    a8:f8:44:4c:4b:65:0f:50:a0:16:8f:f6:48:5a:9d:
                    51:96:33:41:fd:c8:b2:ab:92:1b:25:5d:2d:2d:bd:
                    9b:af:d1:02:80:fe:e6:be:e0:df:2d:a1:8c:b0:40:
                    15:dc:e3:25:54:53:5f:59:ff:ed:c6:34:12:27:50:
                    ec:86:dc:fa:0e:bc:f5:aa:cb:04:36:9c:71:46:f2:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E0:CE:D9:CF:3E:52:B9:9E:4C:CC:BF:AA:41:F6:58:CE:EB:D2:5E
            X509v3 Authority Key Identifier:
                keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:a6:ca:78:e9:42:77:b2:bd:14:e3:02:ca:f3:74:c8:86:
         39:d3:2f:33:09:57:92:e9:73:8d:9c:c7:60:30:31:d3:98:65:
         0d:a1:80:e5:dd:6f:2f:ec:30:37:96:89:b4:29:3b:b7:29:c8:
         2c:8b:33:09:49:72:38:b8:0a:ea:43:4d:b7:a7:a9:51:23:bf:
         82:c5:28:10:bb:78:f0:f0:b4:da:2a:4a:4b:06:e1:5f:a9:22:
         8b:56:92:00:ea:38:3a:58:74:f7:46:6e:72:06:03:61:82:d2:
         c1:e5:cd:72:a4:3c:4b:23:7c:2c:90:cf:5c:e7:8b:51:bf:5b:
         30:ba:86:c2:e4:0f:7e:9a:68:79:c2:76:e2:44:95:13:c2:41:
         2b:44:60:54:95:df:1e:cd:73:d4:2c:e8:4e:42:b3:f6:57:3a:
         f6:d2:db:13:12:2a:7d:a7:b2:98:e9:ec:de:93:c4:08:01:4e:
         67:0b:9b:41:d8:c8:56:ac:6c:26:55:15:06:1d:c8:7a:e1:d6:
         d6:ef:69:e2:f0:8d:ae:5d:42:4c:6e:e3:e2:f9:51:73:f7:03:
         00:c5:e4:d0:27:64:30:5a:c6:15:a8:da:10:ea:40:c8:7b:d7:
         a0:9b:61:c0:59:57:3c:cc:6a:ed:ac:55:d9:64:f2:72:6d:de:
         b2:f8:cf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:14 2026 by rpki-client