Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File:                     rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier:          gMtNfTDfIHFg2kOPVrBjE/O5i+w7FMrMcxxb8XEbB1o=
Subject key identifier:   85:86:E5:48:E6:E4:0E:36:F0:4B:57:34:83:D0:04:FD:11:D9:28:BF
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer:       /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial:       019EC0A40F529C2C10CBB4FF29AD7A78CF83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number:          1963
Signing time:             Sat 13 Jun 2026 11:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:37 +0000
Files and hashes:         1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
                          2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
                          3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
                          4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
                          5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: jsa4pAaZL9IuQgIZZDhk/Vb32R4TIGcyoAC+oveP9Dw=)
                          6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:0f:52:9c:2c:10:cb:b4:ff:29:ad:7a:78:cf:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
        Validity
            Not Before: Jun 13 11:00:37 2026 GMT
            Not After : Jun 14 11:00:37 2026 GMT
        Subject: CN=8586e548e6e40e36f04b573483d004fd11d928bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:10:10:b9:04:0a:ca:65:e0:97:1c:c0:ed:
                    fe:ea:64:ee:8a:15:47:67:4d:a4:65:82:97:d8:b8:
                    8d:2b:36:02:7a:02:18:27:5b:bd:86:d6:ab:43:86:
                    5c:5f:61:95:f5:ee:9e:a2:21:eb:62:a2:db:27:e5:
                    e3:fe:9c:51:ae:52:1a:5b:19:cd:a8:43:6c:99:6a:
                    6f:79:0d:65:a0:cc:a1:b1:01:ac:f2:d2:ba:58:bb:
                    6b:89:43:3f:9f:b4:f3:10:d3:94:aa:b6:87:37:5b:
                    ec:ee:2b:85:72:6f:f8:80:37:33:69:64:54:f1:16:
                    22:8a:b7:48:7b:bf:dc:b8:de:31:5e:6e:8d:97:b9:
                    b4:47:7e:75:6e:0b:68:dc:d9:de:4f:f1:eb:93:d5:
                    4e:69:c2:fd:16:aa:1d:a5:72:ce:4d:d9:aa:87:77:
                    6a:02:89:32:df:28:96:52:37:cc:04:02:95:e8:db:
                    a6:95:0b:13:15:9a:d7:d3:10:3f:e3:02:42:e7:80:
                    f6:36:b0:80:1c:b3:79:77:51:5a:b0:60:15:eb:ee:
                    75:e7:d7:e6:29:35:5a:a3:0d:d4:e7:e6:a9:0a:00:
                    f2:23:26:06:a4:dd:37:22:54:2e:75:af:6e:39:5d:
                    ec:83:9f:73:e1:f6:f7:20:15:d4:ee:07:e1:a0:06:
                    af:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:E5:48:E6:E4:0E:36:F0:4B:57:34:83:D0:04:FD:11:D9:28:BF
            X509v3 Authority Key Identifier:
                keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:67:59:1a:92:43:12:cb:c3:a2:97:6c:d6:28:b0:c8:5d:3e:
         7e:f3:0e:e3:4d:d2:74:da:0c:e4:16:f9:ef:89:77:16:7f:c1:
         69:d0:e8:32:c7:84:06:d7:54:63:b8:db:b9:b2:e5:34:50:57:
         9c:52:f5:f1:61:88:1e:89:84:26:d3:17:52:2c:aa:51:59:96:
         48:a0:8e:7c:65:e5:2e:12:76:05:27:28:c6:74:88:de:5c:68:
         28:bd:84:bd:9e:f5:30:8b:45:f7:44:1e:11:f0:51:b5:12:54:
         30:49:2a:8e:6c:ca:fe:5a:30:76:41:dc:8e:40:e5:8a:3a:12:
         af:bf:5d:f3:29:26:c3:34:81:78:75:24:6c:cb:9f:c7:f8:9c:
         ae:e5:ef:c7:de:51:5b:72:0a:7c:ed:93:d6:23:63:28:e6:2c:
         cb:77:fd:3f:7f:c9:20:96:63:fb:45:2e:22:27:3c:5b:35:a3:
         94:f3:a4:55:65:34:9d:3d:31:67:8b:fc:bc:ae:a5:9d:71:f1:
         83:2e:14:b1:c4:b3:5c:d1:c6:d3:e2:a7:f2:63:09:ce:0a:28:
         9e:bb:76:83:db:60:54:74:84:b5:37:41:5a:28:0e:70:10:d8:
         ac:37:d4:25:91:8d:ad:89:6b:de:65:e4:0e:8a:a8:a2:1d:ed:
         7f:c3:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:40:36 2026 by rpki-client