Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File:                     txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier:          YBxW3TGNLJfmal5MGnHb6fKLU/h2oFgVcw+Lr8rItEA=
Subject key identifier:   7B:88:AF:E5:23:D3:4F:89:24:4A:E1:07:34:73:E9:3F:A7:57:5D:26
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer:       /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial:       019EC3DBF9B462135CD7E40FF96BD7B15470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number:          13BE
Signing time:             Sun 14 Jun 2026 02:00:33 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:33 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:33 +0000
Files and hashes:         1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
                          2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: ORBQ6ZKoyD940BzhJQ5IM0xyl3IEEwLaOZU6DLz/G2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:db:f9:b4:62:13:5c:d7:e4:0f:f9:6b:d7:b1:54:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
        Validity
            Not Before: Jun 14 02:00:33 2026 GMT
            Not After : Jun 15 02:00:33 2026 GMT
        Subject: CN=7b88afe523d34f89244ae1073473e93fa7575d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:84:5b:ec:51:c3:3d:f0:b3:75:2f:81:e5:
                    b2:e4:14:8d:f2:e9:53:ca:fa:7a:e5:b7:82:05:e8:
                    fd:e2:5c:4a:68:db:58:70:fd:91:c4:bf:d9:21:f7:
                    9a:f5:89:bf:58:dd:8f:c7:bb:93:3c:ef:78:ff:fc:
                    fd:b4:54:8c:f3:6a:60:a0:fe:0a:98:5c:7d:c4:c4:
                    8e:9e:dd:a1:18:39:1c:9a:b1:f6:f0:a3:99:bb:bb:
                    73:e7:b1:6a:aa:0f:b4:d2:3d:c7:e0:bd:40:6c:2e:
                    93:69:7f:79:e1:de:fc:6d:9a:44:be:10:e5:fc:46:
                    76:9b:53:49:62:20:f6:1f:d4:3b:11:7c:1a:99:02:
                    88:34:45:79:ea:77:ff:d6:9f:d3:80:83:56:b3:7c:
                    51:39:a9:16:d5:f2:08:d8:73:fa:c4:29:f0:f5:ac:
                    72:3c:a5:b8:e8:fe:61:bb:b9:08:32:c8:d8:a7:88:
                    44:9c:11:17:2e:d9:d4:8f:95:ee:1e:0e:87:53:c0:
                    fc:47:44:d0:15:b3:00:eb:ab:6d:57:fa:16:f7:61:
                    ad:48:37:65:9c:9c:60:36:5a:c3:71:a9:d9:ea:7c:
                    e1:81:b4:a4:ec:4b:a3:9c:36:bc:5d:ca:8e:a2:fc:
                    c4:3e:c8:9b:fe:65:2a:92:e5:31:a3:1d:31:f6:1f:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:88:AF:E5:23:D3:4F:89:24:4A:E1:07:34:73:E9:3F:A7:57:5D:26
            X509v3 Authority Key Identifier:
                keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:11:55:96:79:f3:db:ee:a9:24:99:78:58:75:97:99:ce:cb:
         94:ee:0e:aa:22:e2:5f:35:99:74:32:e1:76:24:7c:af:4d:85:
         c9:41:cf:ce:6a:d0:03:75:e0:62:0c:4f:ba:8d:e5:be:9b:a3:
         6b:56:d8:6f:ff:9e:71:c0:96:71:f0:b3:79:cb:7f:7f:f2:ed:
         08:89:79:1e:cb:09:8f:91:32:cd:59:14:57:28:8f:df:cc:cf:
         60:c4:70:31:b5:d7:85:7c:d4:93:95:1e:ca:df:e8:f3:5e:b4:
         04:8c:63:d0:30:ae:4c:f9:a9:85:2c:c7:34:30:06:01:db:98:
         b7:eb:ae:59:32:90:12:80:62:ba:98:f1:a4:9b:28:8e:a9:54:
         26:e4:4e:cc:38:69:92:41:32:4f:d1:6c:c5:d0:df:0b:a1:af:
         26:4a:f2:73:49:14:2c:d7:e6:95:1d:84:2d:04:cf:44:55:17:
         17:a5:dd:77:e4:0c:d7:c4:61:fc:0d:db:41:88:f1:3b:8b:4b:
         00:50:f9:1e:51:e6:2f:77:ce:c1:5a:3e:fc:cd:4c:39:0d:45:
         ca:cc:50:cf:6e:7f:24:09:34:44:2e:a5:57:60:84:68:89:3b:
         ce:28:54:80:19:77:f5:5e:c2:b8:f1:8b:ad:aa:66:6b:18:d8:
         b2:21:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:15:15 2026 by rpki-client