Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          7C23ONOJr4UlZ4DJ8SGqeYkhgw6nYEm9TlYCBqq74E8=
Subject key identifier:   70:30:AA:6F:CE:C6:A4:54:DE:6E:56:EE:76:C1:29:E1:B8:01:E7:6D
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       019EBFC81F433CF8DE92F0A06134F3D9E5B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          1998
Signing time:             Sat 13 Jun 2026 07:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:23 +0000
Files and hashes:         1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
                          2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
                          3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: K6qXwwrmqTa+NlCweg345f2lkELUZfHtrzQp5nacFqg=)
                          4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
                          5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
                          6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
                          7: kyJQs5we30dtkYez5Z5lc7nb1uk.roa (hash: QYkWAPu1QeZJ7qVGGJyIAFdYbqAhnaEmDRslgqPIGEg=)
                          8: vkSBou13YVLJcpm4RzlvkM2VmEA.roa (hash: Yt5SBPreKEhsGRzUNTyivVfBSSg7gYCaurShg3S49zg=)
                          9: w66ZldWus98F7FLtFE_HfwzAVOw.roa (hash: dMhZ2iCHZg0KsJ/1R4eui0OO1+pgGYsJE5mhqZ9ftyc=)
                          10: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:1f:43:3c:f8:de:92:f0:a0:61:34:f3:d9:e5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jun 13 07:00:23 2026 GMT
            Not After : Jun 14 07:00:23 2026 GMT
        Subject: CN=7030aa6fcec6a454de6e56ee76c129e1b801e76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:01:36:e1:e0:d1:1e:84:a7:20:38:be:89:
                    f0:41:d0:9e:4a:c3:8f:6d:dd:f2:8a:11:57:2c:e1:
                    7a:7e:2f:05:4b:15:93:13:b3:2a:88:70:fe:19:23:
                    bb:2c:80:40:fa:82:a5:2f:1b:bc:fd:63:ce:7d:ea:
                    fa:1d:42:33:fa:95:8b:f6:70:cb:16:75:b7:ae:2d:
                    f5:e6:5d:4b:71:f4:3b:85:b4:4c:8d:6e:e2:cc:04:
                    9c:2d:a9:45:0a:f9:3c:58:0e:ad:34:b2:73:d3:3b:
                    26:76:c0:a1:51:cd:9d:89:bd:4b:3a:fd:04:83:40:
                    1c:31:f8:f4:fa:d1:ca:32:f2:89:21:43:0b:de:4e:
                    5a:bb:3e:e3:cc:d4:da:6f:f1:f1:b2:91:af:bf:08:
                    b9:cf:b8:84:bc:92:75:b6:d7:92:f0:6c:d0:f7:a1:
                    26:4b:26:77:ed:2d:63:19:1b:c6:c6:e6:3f:43:90:
                    4c:19:d0:95:82:c0:9c:cd:d7:b8:29:7d:be:ec:e9:
                    f6:9c:fc:e6:01:16:ca:93:fc:9e:13:c8:4d:6e:40:
                    35:3a:e4:ec:9b:af:b8:fc:8c:0c:5f:ab:dd:5f:bc:
                    f3:0c:0f:6c:96:aa:8b:b7:0d:d5:ec:03:1a:2c:39:
                    e4:ea:aa:4e:53:fa:f1:28:75:45:d2:9f:2c:71:e1:
                    7e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:AA:6F:CE:C6:A4:54:DE:6E:56:EE:76:C1:29:E1:B8:01:E7:6D
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:32:a7:e4:20:ea:e9:82:dd:72:a3:6c:99:71:d2:3b:cc:a9:
         06:f1:d8:07:b4:93:39:3b:37:3b:4d:e0:18:27:9b:dc:5a:b9:
         f8:c7:15:64:9c:cb:cb:28:6f:b0:f6:a8:3d:99:a1:ac:d0:c8:
         20:f9:06:ea:d0:cb:77:5e:8c:6d:53:11:c1:c9:5b:ab:11:64:
         f0:1a:04:ea:f1:ca:00:6f:59:0b:a3:45:36:6a:68:87:00:27:
         13:8c:6e:41:8c:cd:f4:08:2d:5b:60:95:88:6c:28:85:51:d2:
         9d:20:6c:40:99:84:23:6c:4b:72:72:d3:8a:c7:ad:ca:55:3e:
         9a:9b:15:42:aa:96:26:91:16:80:e6:9d:90:c7:91:7f:ca:85:
         5b:41:d9:57:b9:d8:6e:0a:83:b2:01:5e:cc:a4:bb:07:a3:e4:
         0a:7e:be:0a:1f:8e:64:c4:4e:7f:74:e9:82:0d:95:b3:3e:09:
         d0:2f:44:1a:ff:69:5d:be:c7:23:bb:90:9a:e9:6f:d2:79:cb:
         ef:28:34:3c:45:4d:b6:96:0c:73:95:b2:32:af:de:21:38:16:
         a0:12:28:50:d9:b7:08:e2:88:d5:e9:ae:ab:0f:de:a6:36:e2:
         c6:5b:e8:a6:11:0d:5e:af:ad:2b:de:00:25:88:5d:f4:a2:ca:
         74:80:cf:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:39 2026 by rpki-client