Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          a6U/QTi4Y5gPEsmBOSrSnO6cQVI/whuTFbwLHnCpYUE=
Subject key identifier:   DF:A4:6B:54:04:0D:46:5E:8F:D5:DF:F7:5E:05:48:B8:01:5A:F3:03
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       019EC224A8E1627CD3B86E3F15DE6C2BDF24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1A82
Signing time:             Sat 13 Jun 2026 18:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:42 +0000
Files and hashes:         1: 1M2KagV24hXAA8ntBOmE5ZtFEE4.roa (hash: fuAGV01bY0OV1hl/KpYh37DkUhtHHw1J5xifI6HGxKQ=)
                          2: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: e6Mk5GyGgKlg2/iv750JKg9f5KWoW0IdDfNCncy5bYo=)
                          3: BY90jgROFhJJZ1NbH4-tElkR_GE.roa (hash: Y5QIyQBYfCYfbH1jDCElmPITA4Jk6lEfynUlV4MgKn0=)
                          4: jOKUVjy0c9vId2Sgar1ALyHha2U.roa (hash: LYaq4K0uwHA/ENOgkf4QZP3JMqPWmSKEI1664spJ028=)
                          5: q38Vrr1-lrXh4gRVryv7KRjcsHU.roa (hash: GS4WkhgAvCrSjsSDa1MVGmMSwhXFRTBu+xrlewUGZtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:a8:e1:62:7c:d3:b8:6e:3f:15:de:6c:2b:df:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Jun 13 18:00:42 2026 GMT
            Not After : Jun 14 18:00:42 2026 GMT
        Subject: CN=dfa46b54040d465e8fd5dff75e0548b8015af303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:92:9b:08:df:f0:58:fa:f8:29:c6:ef:d5:
                    5d:c7:71:ce:0e:76:86:9a:ac:c2:87:52:7f:2d:0b:
                    e4:36:e1:25:48:2d:93:f2:74:b7:b6:e3:40:a1:b5:
                    4b:0a:86:5b:9d:88:f2:d8:f7:5d:a8:d0:89:70:64:
                    54:e6:3f:5b:2c:ef:2a:0c:bb:7c:0a:df:c0:4e:fd:
                    ab:83:88:9d:c4:b0:3b:9d:18:73:55:2c:91:79:38:
                    ff:1d:fd:df:85:9a:08:ce:6b:de:2a:0a:a4:a1:a9:
                    8d:c3:5a:66:f4:6b:4e:61:a1:bb:aa:bc:4d:28:59:
                    0c:f3:5d:ae:a4:a3:47:1c:c8:e8:84:d8:61:7c:e7:
                    e6:39:4c:b7:95:94:3f:16:1b:44:c3:77:20:1e:92:
                    77:5f:f2:75:64:f4:63:9d:50:84:ea:22:40:35:e7:
                    a3:c1:dd:b0:b8:10:4a:fa:27:14:a0:79:fe:2a:f1:
                    36:02:cf:d4:d7:0d:63:c6:95:77:1f:a1:b8:87:46:
                    fb:bb:98:10:3e:45:86:12:30:cc:42:a6:64:83:dd:
                    2f:b4:d6:68:c4:0a:42:23:5d:57:3e:3d:09:bf:c8:
                    b3:e8:cf:d0:a2:25:8c:9b:15:31:f0:83:e6:12:ae:
                    ff:9c:bf:3e:fd:93:ad:f0:42:88:2a:38:75:e8:f9:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A4:6B:54:04:0D:46:5E:8F:D5:DF:F7:5E:05:48:B8:01:5A:F3:03
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8d:df:24:7b:07:1b:9a:d5:6e:16:81:6d:c7:09:c0:d4:57:
         0d:3a:9b:0b:0c:51:7f:22:5f:95:d7:5b:18:54:33:10:db:1c:
         4a:b7:64:c0:27:87:08:89:f8:93:4b:3d:14:76:a5:c8:c7:14:
         9e:56:1f:9f:51:f4:6d:8d:ec:fe:2a:53:3a:4c:2d:08:a1:e6:
         4e:7c:5d:42:82:a6:63:48:92:3d:bc:9d:7c:00:c3:6f:f2:16:
         40:9e:7f:c5:b3:d2:38:df:70:7d:53:5c:be:61:36:a9:16:8c:
         1c:e3:9b:ff:cb:5f:f7:94:8e:c3:4c:e2:3d:85:1c:fb:37:82:
         50:20:99:2c:73:20:fa:23:ec:fc:91:d6:f1:2a:57:db:15:48:
         52:34:ce:8f:65:a8:4d:c1:aa:26:18:d3:30:0e:52:a4:c4:cf:
         40:64:a7:94:6d:6f:2a:92:95:fb:cd:5d:b6:97:14:44:81:53:
         cd:ff:d9:a2:97:32:ed:74:f1:74:57:a1:d8:9f:ab:55:bc:ac:
         0d:51:b6:92:36:b9:94:b6:89:c7:e9:86:d9:f1:e9:43:3f:f8:
         ed:f5:5f:23:85:59:76:5f:ad:f0:85:f2:32:25:fe:15:45:c7:
         e7:72:2f:92:62:4f:e7:0f:c0:fa:c5:12:6a:2e:ec:bc:b0:41:
         de:21:ad:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:46:26 2026 by rpki-client