Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
File:                     AwSWBHN8eL0k27Jeszb0pBbmRfY.mft (raw, json)
Hash identifier:          xsLlCqzf9V2PKE5BKo/TEf0FhaUCWRfCPVd4bB558OU=
Subject key identifier:   14:F5:F3:DA:EB:E7:72:1A:31:69:BA:6F:2D:D9:62:71:9B:D2:6A:77
Authority key identifier: 03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6
Certificate issuer:       /CN=03049604737c78bd24dbb25eb336f4a416e645f6
Certificate serial:       019EBD6C5AA93162603D3D679A5962C0998E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
Manifest number:          0711
Signing time:             Fri 12 Jun 2026 20:00:55 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:55 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:55 +0000
Files and hashes:         1: 0N508Xe1lkHiB3GV4gBTEAMYSg0.roa (hash: 9ysDCSkav8KkWk0caqcKxtu4CxhKYt/csAkRzD0sTbY=)
                          2: AwSWBHN8eL0k27Jeszb0pBbmRfY.crl (hash: 0jrYzZBHc6jkCnywCzNeLD54v7HG+YB6arU1cV50AkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:5a:a9:31:62:60:3d:3d:67:9a:59:62:c0:99:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03049604737c78bd24dbb25eb336f4a416e645f6
        Validity
            Not Before: Jun 12 20:00:55 2026 GMT
            Not After : Jun 13 20:00:55 2026 GMT
        Subject: CN=14f5f3daebe7721a3169ba6f2dd962719bd26a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:5b:b7:3b:6e:5c:93:73:27:99:a7:08:06:
                    70:b8:ab:ae:1e:f9:20:d9:64:42:df:30:b9:53:7c:
                    b4:42:b9:72:a3:17:3e:f7:1a:c2:55:67:08:1e:0c:
                    5d:3d:42:c9:16:51:93:34:e1:ff:87:13:65:f8:d9:
                    38:ac:e9:96:10:77:c1:12:95:30:ac:01:58:9c:4d:
                    ab:25:c9:ca:a9:47:e6:18:26:1a:a2:82:f5:da:91:
                    a0:bc:fb:67:62:49:f7:99:63:bd:4f:bb:b1:09:61:
                    2d:8b:71:e7:f5:15:73:1d:df:ac:70:55:27:b5:2c:
                    84:58:59:1c:9d:e8:37:b2:2f:3b:52:7b:c0:de:c4:
                    d6:81:28:3a:e5:fb:63:2e:c6:d0:e7:a2:30:45:4b:
                    07:d3:37:46:f5:ff:13:65:08:19:03:81:a3:f4:58:
                    85:24:43:e6:b7:8f:99:ff:6a:35:ad:4d:4c:d8:e4:
                    7b:b2:51:34:29:29:94:d1:68:7d:4c:dd:f4:84:5b:
                    c0:0c:42:f3:2f:b9:f0:70:39:3f:ee:95:f9:bf:04:
                    52:40:72:f6:a2:30:f0:d5:36:ac:1e:bb:24:ba:20:
                    b8:cb:7b:ac:a3:09:65:a9:03:69:0a:92:a3:3c:6a:
                    31:c5:9e:b8:48:87:b0:3c:9d:68:64:d2:28:5a:89:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F5:F3:DA:EB:E7:72:1A:31:69:BA:6F:2D:D9:62:71:9B:D2:6A:77
            X509v3 Authority Key Identifier:
                keyid:03:04:96:04:73:7C:78:BD:24:DB:B2:5E:B3:36:F4:A4:16:E6:45:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwSWBHN8eL0k27Jeszb0pBbmRfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/35b4c5-297b-420c-822a-169e537a890c/1/AwSWBHN8eL0k27Jeszb0pBbmRfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:13:e0:1b:ee:ea:0b:45:45:c9:16:8e:3d:f6:3d:67:77:ac:
         44:09:62:d3:8e:6a:bc:9d:f6:a0:5f:1f:13:45:98:db:77:da:
         bc:4d:86:73:0f:e2:71:c6:03:11:63:f5:ef:bb:68:66:73:bf:
         45:c8:2b:f8:90:cd:05:3e:b2:7c:83:13:6a:a5:ca:8e:b6:d8:
         40:5b:c9:41:43:9c:6a:ea:75:57:2f:37:75:46:dd:1c:3e:e7:
         5e:54:77:be:89:b4:f5:c5:2d:75:04:aa:e2:a1:ee:a9:65:18:
         78:98:98:75:8b:48:36:b3:86:36:ba:23:14:27:68:5c:35:42:
         f8:7d:83:cc:9a:8a:18:9f:8a:57:eb:17:fa:93:44:b7:e9:42:
         f1:ab:9f:0e:14:fa:11:7c:26:54:74:c8:25:bb:f2:ef:b1:bd:
         c7:4a:14:56:9a:e2:7c:2d:8a:f7:87:06:7a:db:0c:20:f3:04:
         2e:0b:e1:20:c9:3d:c5:67:12:d6:eb:62:9d:da:11:d9:1e:ca:
         54:1f:1a:b0:4f:33:1f:ec:a6:8b:4f:13:31:0d:e8:9f:06:93:
         60:75:6f:c9:f0:cd:07:5f:0c:ec:90:3d:24:7a:fe:4d:3b:47:
         84:46:9c:73:3f:ef:5c:4a:ed:42:4d:41:2e:ee:fe:0f:1f:4d:
         d2:db:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:40 2026 by rpki-client