Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File:                     87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier:          5Vt+pUqhLYrv5C3V4DsoQXb0y+PG8egKWMWMldFCM4w=
Subject key identifier:   B6:28:4A:21:7F:1F:56:99:06:C2:C7:6D:C6:15:70:FF:E0:65:F1:3D
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer:       /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial:       019EBEECE75D1AACED630A48FD6B852189AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number:          0AEF
Signing time:             Sat 13 Jun 2026 03:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:57 +0000
Files and hashes:         1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
                          2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: OKu9C5L8pC2nEMutQJeWoPOZK7+Omt7ScawwqedRj98=)
                          3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
                          4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
                          5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
                          6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
                          7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
                          8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:e7:5d:1a:ac:ed:63:0a:48:fd:6b:85:21:89:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
        Validity
            Not Before: Jun 13 03:00:57 2026 GMT
            Not After : Jun 14 03:00:57 2026 GMT
        Subject: CN=b6284a217f1f569906c2c76dc61570ffe065f13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:ce:38:8b:77:f5:f4:75:bd:13:1a:46:4e:
                    a5:9f:a9:ea:a9:df:67:29:95:e3:2b:b0:57:4e:f0:
                    29:9a:46:e9:3b:52:1d:7a:2d:1a:53:54:83:27:f5:
                    e6:e6:14:b4:c7:69:ca:29:2f:3d:cc:60:d2:57:b4:
                    aa:6c:76:90:fe:76:68:45:ea:e8:39:b7:8e:b5:28:
                    9e:b7:95:5b:9f:e4:19:cc:d1:8c:db:91:01:78:57:
                    0c:6f:6c:14:ae:63:47:e2:c6:90:22:5e:dc:0b:68:
                    d8:c6:09:d1:88:91:47:f6:90:44:a2:71:6a:ef:fc:
                    0b:b2:86:df:4c:f4:9e:43:0f:48:3f:33:22:09:b6:
                    4b:62:05:00:3d:e3:ef:aa:2b:4f:ef:4d:18:de:94:
                    37:95:c3:46:82:f4:19:93:4d:5f:88:87:00:d1:41:
                    77:66:d0:5f:d0:4d:bd:f2:6c:c2:b7:a6:d3:41:28:
                    78:d0:ed:fb:1f:7e:b6:ff:25:3b:34:04:f7:45:f2:
                    0b:7b:03:45:03:8d:d3:71:bc:82:cc:08:21:e7:c0:
                    5c:53:7e:26:5e:e8:b8:4a:ab:f6:08:e6:28:02:ce:
                    7e:d4:94:91:bc:c3:ea:ec:aa:31:2c:61:d4:82:32:
                    45:83:b9:78:2d:b7:75:72:01:05:f5:fe:97:c3:fd:
                    60:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:28:4A:21:7F:1F:56:99:06:C2:C7:6D:C6:15:70:FF:E0:65:F1:3D
            X509v3 Authority Key Identifier:
                keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:fb:2e:a3:b2:49:ec:b6:f0:0a:03:e5:72:7d:47:c6:54:c8:
         54:7e:fe:d6:fa:f4:92:91:96:d3:eb:8d:3c:50:f1:da:0d:96:
         aa:f2:64:cc:c3:ae:55:c4:bd:d3:11:e7:4c:6d:7c:77:dc:6f:
         e5:b3:19:93:e2:e2:55:0a:1c:60:1f:c5:47:ce:f9:64:56:5c:
         25:fe:61:f2:06:f0:cd:0c:1d:23:9b:99:3f:43:f6:38:96:9b:
         43:9e:7d:a5:e6:c5:40:97:b6:fa:63:e1:27:fa:9a:0a:51:42:
         5f:cf:92:b2:92:50:cc:02:c1:4c:dc:8c:5a:61:71:28:c9:0c:
         71:c3:a6:f0:a4:6d:be:14:47:bf:84:d3:76:68:1a:f0:04:92:
         93:8d:35:b1:9c:2d:ef:1d:22:e5:cc:28:dc:4a:fb:f6:09:d8:
         d6:07:df:33:b0:59:90:f5:5b:c2:5e:03:93:3d:e7:bc:f7:7d:
         12:df:e0:f3:58:00:22:17:38:15:aa:96:90:26:71:70:66:b4:
         cc:91:c9:de:66:2a:0d:d0:47:4f:3a:31:8f:69:8f:5c:92:1d:
         02:9f:a8:5d:a0:17:e5:8b:8c:36:27:a5:b4:54:43:8a:01:80:
         a1:d4:d2:72:c5:0d:da:33:b4:e5:15:3c:ca:57:ce:df:c2:67:
         7d:fd:b3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:13 2026 by rpki-client