Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
File:                     invfL1uWEjLljbKJtIqf4kX6nWw.mft (raw, json)
Hash identifier:          g8zJuBbLo4S0pU0WNQnIwhqJB8gch32SukxW68m+VwI=
Subject key identifier:   2D:CE:60:74:02:86:CB:62:B9:67:E0:18:7B:F8:AA:AA:71:C7:75:5F
Authority key identifier: 8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C
Certificate issuer:       /CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
Certificate serial:       019EBF5A586A950B088849A314768D8787BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
Manifest number:          06EB
Signing time:             Sat 13 Jun 2026 05:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:29 +0000
Files and hashes:         1: 13bg8sr321aaC-jFOX86O1_lBzU.roa (hash: bU7Oi7TbB7FOIxER/ptIdZra1cEI8qAD1Nz/78F0Vtg=)
                          2: invfL1uWEjLljbKJtIqf4kX6nWw.crl (hash: lyIrXqz0IbOvl4gDXr3yp/wHs9WBvr3zlHufAdPZ2qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:58:6a:95:0b:08:88:49:a3:14:76:8d:87:87:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7bdf2f5b961232e58db289b48a9fe245fa9d6c
        Validity
            Not Before: Jun 13 05:00:29 2026 GMT
            Not After : Jun 14 05:00:29 2026 GMT
        Subject: CN=2dce60740286cb62b967e0187bf8aaaa71c7755f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:33:e9:e8:18:cd:2d:7c:c8:2f:ec:58:ec:
                    75:2d:89:ab:01:86:3d:55:41:2a:76:61:b9:7c:be:
                    ea:52:91:24:70:ff:a0:fe:fa:ae:aa:64:9c:f0:69:
                    67:d0:4a:42:9e:1b:d0:4d:98:c9:76:30:8c:53:11:
                    92:e9:dc:6b:57:e6:1c:b4:91:ba:bf:e6:ef:a5:88:
                    ad:6e:44:48:08:fa:d3:9a:ca:04:bc:f7:08:3e:d4:
                    dd:2e:bb:32:bd:90:a6:4d:53:59:f9:28:2a:09:ef:
                    5c:65:48:db:7b:0b:a5:dc:63:87:3a:22:4d:4a:de:
                    18:ea:11:03:1d:e9:df:aa:df:2c:bf:5c:a2:9e:20:
                    4b:90:8b:a1:b3:43:fe:1d:b0:bb:d5:c3:a4:dd:f3:
                    08:82:f6:be:c2:d0:bc:95:4f:b3:25:ee:61:a3:63:
                    2f:30:95:61:1a:60:cd:3c:e6:c3:3d:f7:01:eb:04:
                    72:af:80:95:be:9e:53:50:0c:56:e7:14:65:52:a2:
                    3e:19:06:53:ae:52:c1:43:36:2b:d5:2d:83:6f:e6:
                    15:bc:ac:b9:6d:74:4a:36:57:8e:b0:14:20:1d:c7:
                    94:a2:49:4d:a0:fa:7a:0d:f8:5c:40:74:22:6f:e4:
                    d9:af:dc:7c:93:45:3b:e9:90:46:c2:96:61:68:f2:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CE:60:74:02:86:CB:62:B9:67:E0:18:7B:F8:AA:AA:71:C7:75:5F
            X509v3 Authority Key Identifier:
                keyid:8A:7B:DF:2F:5B:96:12:32:E5:8D:B2:89:B4:8A:9F:E2:45:FA:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/invfL1uWEjLljbKJtIqf4kX6nWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/acd746-71eb-4cde-ae20-67685b4dc8b9/1/invfL1uWEjLljbKJtIqf4kX6nWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:21:19:aa:ab:4d:55:78:3e:60:48:c9:47:08:5f:0a:0d:20:
         d2:87:ac:ff:ea:81:6f:dd:77:fb:d9:72:c1:14:9d:8f:f0:a6:
         b4:aa:d3:ee:d3:3c:dc:81:7e:f3:19:fa:38:c5:30:9a:39:6e:
         f7:a4:17:0b:d0:22:02:d1:88:bc:e1:2f:f2:2a:19:9b:55:40:
         82:28:8c:79:12:b5:8a:82:b0:aa:f3:9e:ab:a2:28:9a:9e:77:
         fc:b0:8d:e9:e4:9b:80:60:24:70:9c:f7:aa:ec:9b:93:d8:18:
         31:e3:24:d2:73:f7:77:b3:65:de:09:f2:19:10:3f:70:b0:f6:
         82:97:ce:3f:54:3e:25:58:ba:29:46:45:1b:1e:9b:eb:22:3b:
         7c:7d:17:3c:7e:a3:4a:f6:21:8d:da:9d:78:a2:95:0b:4a:03:
         62:9d:e4:34:80:48:38:c4:fc:69:de:64:cc:dc:b7:4f:21:0f:
         2e:0a:46:37:42:a3:5b:29:d5:39:ff:88:45:bc:c3:a1:62:a7:
         3e:de:8f:1c:c6:80:77:09:27:47:bd:e7:de:1e:7f:ff:33:ed:
         09:31:98:21:13:a9:0c:a8:91:49:ff:fa:56:2d:7f:70:18:dc:
         4f:67:b0:0f:c7:a7:0b:9e:cb:1e:8b:c3:57:a4:9a:b6:6a:c1:
         d7:83:69:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:17:04 2026 by rpki-client