Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
File:                     5wQefn0YTV261xQp42W58Kx2ylI.mft (raw, json)
Hash identifier:          ecnU6bbc+VzW0iR7XZxksiND3AlqhGidip9D6y7xrWo=
Subject key identifier:   C4:83:5B:3D:B4:89:06:86:02:C8:57:B6:17:B1:FC:FC:AA:6F:78:8D
Authority key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
Certificate issuer:       /CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Certificate serial:       019EC3007185FA3E24DD1710041D03ABCAF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
Manifest number:          023A
Signing time:             Sat 13 Jun 2026 22:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:46 +0000
Files and hashes:         1: 5wQefn0YTV261xQp42W58Kx2ylI.crl (hash: 4/ZFO5oxzniw6KK/Nws8vBE/Y2kw2bPdOJeBk+lPHfk=)
                          2: JGaj-VMF82BATvYd0lQOFLHFMc8.roa (hash: pT58jY5xAuPaGqFJHp5UHGx9TDCbSHrDu393sd5XVkQ=)
                          3: Tgyba4QUN4V8tZaz-LrXuKGglcI.roa (hash: 3N1ko+R/E9uyhb+olKiqz7rmkIhC5Q0D6JIxxMh2AjI=)
                          4: ng1Tkoik0468H1Ss1bWCZlgGMXA.roa (hash: syZ/2LZN01/WEB1S0lL+Wm4S4EZXka7JcoKvJG2ctoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:71:85:fa:3e:24:dd:17:10:04:1d:03:ab:ca:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
        Validity
            Not Before: Jun 13 22:00:46 2026 GMT
            Not After : Jun 14 22:00:46 2026 GMT
        Subject: CN=c4835b3db489068602c857b617b1fcfcaa6f788d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:80:13:0e:9a:9f:26:6a:d5:f7:26:21:d8:
                    ab:5f:04:76:78:e5:b0:de:6b:c1:02:2c:b3:ec:cf:
                    9f:71:65:2a:1c:a9:94:27:d9:e6:10:4a:68:d8:e2:
                    a9:ce:1e:53:9e:eb:ce:e5:71:7b:32:26:12:38:e7:
                    66:c4:0b:cd:4a:19:87:cc:a8:5e:b6:c9:e8:ee:32:
                    3a:11:82:9a:c5:23:2b:68:ff:fe:de:09:ce:00:0e:
                    40:94:03:70:44:e4:25:f9:38:66:48:10:dd:1e:46:
                    0e:66:62:71:da:b5:f7:97:2d:e6:40:77:f1:d8:91:
                    4c:c9:f1:14:49:3b:d3:5e:57:b2:b1:60:4f:3e:f5:
                    0c:d9:28:fe:22:24:41:82:c8:03:5b:56:db:bf:53:
                    8c:85:53:c2:7f:c6:4d:aa:6d:ce:44:19:5d:c5:5e:
                    62:ef:af:3b:49:dc:9c:ea:9c:b1:ea:09:b3:0d:70:
                    f2:f3:b5:e5:b8:2e:a4:ec:6f:d4:2a:b8:f9:18:dc:
                    17:8c:1d:24:cb:17:38:f4:c1:e4:63:60:80:7e:48:
                    db:98:c1:c2:c1:8a:5a:8b:3c:91:4a:ff:24:de:00:
                    b2:dd:53:ed:be:62:3a:25:75:63:5c:60:28:c3:87:
                    fa:33:4f:63:e2:0d:1d:aa:d2:6c:34:cc:1c:9b:28:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:83:5B:3D:B4:89:06:86:02:C8:57:B6:17:B1:FC:FC:AA:6F:78:8D
            X509v3 Authority Key Identifier:
                keyid:E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:65:7c:fd:04:86:3b:cf:9b:72:cb:16:d9:e7:6b:6d:63:ca:
         6e:9b:50:04:b1:84:91:a0:e5:57:50:d4:fd:9b:19:c1:c4:e3:
         c8:17:5f:46:f4:ce:a0:50:7e:81:5c:d7:3c:aa:5d:e4:05:47:
         7b:c2:50:ad:80:c1:12:3c:50:de:d7:00:51:e2:90:f5:d5:fc:
         c9:65:58:a0:08:5e:16:62:5f:46:6f:89:af:37:28:00:94:17:
         af:87:b8:87:d1:c1:53:cb:dd:d6:ba:31:5f:92:fa:74:3f:b7:
         e3:10:01:20:bd:3e:60:3d:9a:af:e1:0e:45:21:96:83:a2:a5:
         5c:28:54:f4:7a:fb:5d:20:5e:07:2d:7c:f4:0a:a0:18:66:f6:
         d7:9e:58:42:40:c0:17:72:44:5b:c1:1a:2a:27:f5:b0:db:3e:
         58:38:df:50:cc:0c:38:11:9e:5c:a0:34:65:0a:7d:a5:01:25:
         5e:85:ad:74:30:94:a3:82:46:c3:85:92:4d:69:63:1f:42:d9:
         f6:fd:54:f4:6d:85:bc:84:1c:94:bf:7b:91:cc:9b:a8:d5:aa:
         4b:24:53:62:88:f2:c2:19:73:32:7e:dc:e0:9d:40:87:c1:3b:
         3d:25:34:5d:31:41:19:4d:3d:2d:01:f4:d7:58:71:49:b9:39:
         ef:ca:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:30:42 2026 by rpki-client