Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
File:                     cugftc8PsyxFdfhBOsvUGqhLgvQ.mft (raw, json)
Hash identifier:          68WyFH23pCfjo4ByojBVbV1ENMvLqEQoGsONVwe87Go=
Subject key identifier:   BA:2A:85:EF:31:FC:58:83:E6:B3:09:DF:70:C1:C4:CF:30:E9:85:85
Authority key identifier: 72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4
Certificate issuer:       /CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
Certificate serial:       019EC44A9E396B45EE3AF974EDF699FB2681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
Manifest number:          1979
Signing time:             Sun 14 Jun 2026 04:01:24 +0000
Manifest this update:     Sun 14 Jun 2026 04:01:24 +0000
Manifest next update:     Mon 15 Jun 2026 04:01:24 +0000
Files and hashes:         1: JnoidLA6vJrAfrMDINBzIOY4x_A.roa (hash: HehI5e9k9+SobZZSHZ1mKzsCznf3aOX4aCgw4ruzjYM=)
                          2: cugftc8PsyxFdfhBOsvUGqhLgvQ.crl (hash: 4t9zeomy6bP1H6phY8/I55ettXsSQZLwIzBjRFhM40I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:4a:9e:39:6b:45:ee:3a:f9:74:ed:f6:99:fb:26:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e81fb5cf0fb32c4575f8413acbd41aa84b82f4
        Validity
            Not Before: Jun 14 04:01:24 2026 GMT
            Not After : Jun 15 04:01:24 2026 GMT
        Subject: CN=ba2a85ef31fc5883e6b309df70c1c4cf30e98585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:d6:ba:1f:7f:99:57:aa:e3:e5:82:05:ed:
                    40:89:55:d1:e4:e0:5a:b9:ff:da:d0:b6:38:96:b2:
                    f0:c3:ce:ff:81:b4:32:70:a8:ea:b4:ae:e2:7f:7c:
                    12:52:fe:7b:f8:fb:2b:49:99:ad:99:5b:4e:5c:26:
                    8a:12:c7:d1:1c:d3:40:67:a2:9d:00:f8:53:2b:11:
                    c8:0b:f6:3c:66:dc:0a:cc:29:65:db:6b:d0:99:99:
                    1c:7d:ab:a3:80:67:9b:3f:f7:de:16:eb:15:c2:a4:
                    09:44:48:22:ba:6a:39:81:33:2f:d8:e6:fd:06:69:
                    1d:9d:74:5a:57:ef:de:79:08:70:11:41:49:97:91:
                    49:7e:6c:77:84:37:3a:ff:0a:73:26:fd:82:b1:c0:
                    46:c3:fd:42:dd:a0:1e:42:04:2c:84:85:b7:d4:16:
                    f5:6a:0d:f5:41:f8:b0:0c:54:4b:fc:da:4c:95:79:
                    b3:18:3d:a5:ac:ac:49:e9:ed:e9:b8:9f:63:1c:77:
                    6b:bb:fa:89:4d:67:3f:03:a1:e8:09:38:1c:c2:16:
                    4c:8f:7f:ac:ca:cf:25:85:fb:49:d8:14:62:59:89:
                    73:34:9b:87:fd:d8:a6:0e:8c:3f:63:2c:64:aa:57:
                    d0:27:a4:31:df:31:1f:56:df:7c:34:2d:82:d8:1d:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2A:85:EF:31:FC:58:83:E6:B3:09:DF:70:C1:C4:CF:30:E9:85:85
            X509v3 Authority Key Identifier:
                keyid:72:E8:1F:B5:CF:0F:B3:2C:45:75:F8:41:3A:CB:D4:1A:A8:4B:82:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cugftc8PsyxFdfhBOsvUGqhLgvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f068a7-5f8c-4f32-ab94-cda6e19ffb88/1/cugftc8PsyxFdfhBOsvUGqhLgvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:39:1a:b1:cf:44:32:6c:d7:aa:f6:03:e9:bc:12:46:61:e1:
         05:40:ef:1f:3c:d8:bc:19:82:9a:f6:98:98:30:e5:4d:ed:db:
         70:7a:92:15:97:5e:66:3e:17:f4:fa:36:13:fa:72:be:6b:5e:
         ee:81:35:e4:fe:86:0d:f6:44:11:44:bd:86:7c:2c:d7:47:b2:
         57:42:11:a7:2a:e4:ff:00:80:63:15:5a:ed:2c:d6:b6:cb:90:
         07:30:e7:09:8a:02:84:f4:ed:64:13:f6:eb:6a:35:75:f3:fe:
         49:2b:3e:a2:21:25:40:64:31:de:e9:5b:80:04:58:05:f8:b7:
         4a:bc:93:64:4c:61:0f:51:16:fd:51:c3:61:f7:fc:ca:a9:5e:
         97:ca:ba:73:1e:55:a7:09:b7:01:d9:c2:c8:0e:90:1c:a0:7d:
         9c:76:62:26:d1:08:e2:a3:66:28:7c:76:3c:aa:3c:13:da:9c:
         7b:c8:53:64:2b:37:48:a5:65:cc:0b:0b:15:9c:58:29:71:aa:
         60:a5:25:09:56:82:29:be:37:5f:cf:69:3a:96:fd:94:1d:d1:
         c0:72:5e:ee:1a:52:4b:91:62:9b:2c:d3:03:94:01:fe:ee:13:
         11:55:68:7d:27:9d:11:d8:21:29:04:fd:3e:14:44:f6:0c:0b:
         9d:c0:c0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:45:07 2026 by rpki-client