Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File:                     RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier:          inpTKI3ZLWy4AtHeaAtXDz4PY8HmHDjBJaRnLdJytCc=
Subject key identifier:   A9:07:6C:76:C3:CE:8B:EF:39:77:DD:67:34:18:86:86:07:72:5E:6B
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer:       /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial:       019EC2244105BAAB80FA571C563BAA8A0803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 18:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:16 +0000
Files and hashes:         1: 1YcgvSymvxOWwOClUpJsxRVgsgw.roa (hash: sV7ICeqsuRRmvPB4Ud9P6m1LHMPN2hapMGG1EN+z2ws=)
                          2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: BMWzO/sB0dFjGi4v44Gwfe9I2EJjFnqgdGErDMoszG4=)
                          3: cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa (hash: 64u+n0vfU41PR2W4WUgYuL5mbl/6P/UD0NVgWR/oiEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 18:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:41:05:ba:ab:80:fa:57:1c:56:3b:aa:8a:08:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
        Validity
            Not Before: Jun 13 18:00:16 2026 GMT
            Not After : Jun 14 18:00:16 2026 GMT
        Subject: CN=a9076c76c3ce8bef3977dd673418868607725e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:7f:30:4c:a3:ac:f8:46:fd:bd:ac:5a:bb:
                    da:28:25:dd:34:26:ad:af:db:bf:6f:c3:2b:34:4f:
                    90:80:89:81:05:ea:d2:17:77:62:7c:28:7f:c4:58:
                    67:f8:8c:ad:8d:fe:d2:b4:12:e4:3a:6a:d7:d6:89:
                    c4:4e:6f:39:b7:0a:ea:cd:6e:24:d1:52:e7:f8:90:
                    cf:8c:8a:b2:85:de:32:db:22:42:b8:fb:65:0c:f6:
                    5c:2f:ba:3d:a0:b7:0d:f4:f8:68:69:e7:9a:b0:69:
                    b7:93:0e:63:68:e0:33:e2:15:d0:5f:6e:d5:c8:36:
                    79:81:5f:ca:f1:db:9b:50:a5:fc:ed:cb:f5:46:9e:
                    30:a9:a1:80:ee:44:6f:2f:8f:d8:0b:66:23:28:d6:
                    63:f2:8e:96:25:f0:d4:79:ec:aa:7b:8f:b1:44:c5:
                    3d:5d:f8:4f:ab:23:a7:71:7e:c2:bf:3a:54:e0:ea:
                    68:8a:2b:a8:dc:e8:78:2b:b4:2c:e9:a9:39:aa:3f:
                    d0:28:c5:ad:8d:8f:58:78:8e:37:59:0b:c2:39:02:
                    38:82:1e:79:8d:7d:0e:a0:21:78:57:d2:ec:67:7d:
                    8f:53:11:53:fc:d0:19:8d:69:6c:64:49:74:71:79:
                    b7:44:15:0b:85:60:2f:6e:15:70:e3:57:8f:3a:73:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:07:6C:76:C3:CE:8B:EF:39:77:DD:67:34:18:86:86:07:72:5E:6B
            X509v3 Authority Key Identifier:
                keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:66:1f:23:13:84:68:7b:56:0c:2b:fd:d5:36:bb:6d:fb:
         67:18:4f:21:04:e3:db:18:b4:4b:4b:4f:ea:a2:df:ae:3a:54:
         0f:bc:aa:87:d0:d9:ab:72:e5:ea:db:6f:d6:65:9d:67:cf:fe:
         ca:be:76:41:a5:3d:c7:72:1e:e3:01:73:46:51:ff:bd:c0:fd:
         86:6d:f4:38:07:07:0f:cf:aa:12:db:86:18:53:20:42:a7:64:
         85:ad:4c:9e:f5:e9:42:14:94:8f:8e:8a:78:c5:13:06:8d:d9:
         7a:01:8c:b6:50:44:d0:8e:0a:df:d6:bd:41:15:9b:6d:8c:c3:
         82:20:40:90:36:9a:52:18:97:f5:66:62:b4:e2:63:32:88:f9:
         38:06:2d:fd:dd:2d:9c:e7:a8:ac:cf:88:01:33:b9:9d:57:94:
         a8:e9:2b:f4:f5:f0:32:dc:f6:bc:63:91:cc:98:14:64:98:c2:
         90:15:5e:f1:fd:41:0d:c1:47:4e:23:d6:ec:19:fa:af:2a:f0:
         c8:24:c2:c3:d8:b1:f8:26:e2:17:14:bb:71:e8:91:42:52:10:
         b9:a1:07:b7:6d:45:f8:31:3c:c4:3f:90:6a:eb:1e:2b:57:d4:
         ec:06:a7:e7:c1:7f:b8:42:6a:1a:8f:1c:bb:12:b9:4f:cf:95:
         cd:5f:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:42:26 2026 by rpki-client