Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File:                     cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier:          BAuU2p5bOa89CoGBj/xwgo/7hUZzZmX4crwzcYj5wkA=
Subject key identifier:   08:B0:F7:94:39:B6:3A:88:83:82:C4:F1:45:24:2C:C6:7D:6C:9A:92
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       019EC036303F4CB429BE912D1EB774E2874B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number:          1574
Signing time:             Sat 13 Jun 2026 09:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:37 +0000
Files and hashes:         1: 9Ek2AgPG-IuKRn4Ap7Q4taz5tIs.roa (hash: US5wluLOurNHGWpdK09uPzxIy4dNtgDg+FM3oRliWV8=)
                          2: J6BzaoEADEU3mnLpaeWB28tTH_I.roa (hash: LmZ8HNRZsz6o3yc1qdlURwkpFlRv54OEGoGiLtspLgg=)
                          3: KvGvnsUPTXn11jrE2Q3HUL3nJnY.roa (hash: GZr/8STpN+spxS7hr5Mqyl5f4Xkr+OLbAhQcRXrsj/I=)
                          4: PDRXvo0P_0NveIGADmK4mqe815M.roa (hash: Rt8tDT1Yhhc7JTO2euWnUSC2nUqLohrFpJ3t3YB6850=)
                          5: VxDIXA6mTGbD5-82yK7aUruPsa0.roa (hash: 6ywkNg1zwWV8B8t2RNAXo9ZBmG+pbw7ReG5CtVK2wj0=)
                          6: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: mxJaFhMZuBr8EiiupUwA+aIFb3Gdtx4TDkIg1FliTws=)
                          7: uct3FriMmJ2dsZBkcrXJVXsGDFw.roa (hash: YxoLUypivPWxn2AjW2R+K6r0FePAjOs61fBGsFzRkR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:30:3f:4c:b4:29:be:91:2d:1e:b7:74:e2:87:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: Jun 13 09:00:37 2026 GMT
            Not After : Jun 14 09:00:37 2026 GMT
        Subject: CN=08b0f79439b63a888382c4f145242cc67d6c9a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:57:d8:90:34:0f:df:4f:db:04:8c:d7:2e:
                    9c:6f:1e:7e:94:db:48:85:d3:7d:b8:73:73:19:bc:
                    f9:91:a1:3b:34:16:5e:2e:0d:8b:6b:4c:e8:98:ce:
                    3f:b7:49:eb:d3:ad:c0:ef:3a:bd:3c:11:a5:71:dc:
                    6d:37:19:cf:22:bd:fe:78:3e:1f:4e:e8:3c:46:1a:
                    d8:12:49:42:e4:dc:58:12:b9:e7:e7:f2:8e:86:c8:
                    88:17:15:e4:c0:dd:3e:1d:23:a3:9a:c3:32:cb:c5:
                    0f:ef:18:75:ba:d7:4f:ed:cb:c9:5b:9c:a3:bb:39:
                    b3:b7:ea:66:f7:74:94:b5:fe:f9:d4:bd:8a:13:dd:
                    96:3f:fa:4a:d0:7c:c4:89:6b:97:15:1c:be:f2:ae:
                    ef:45:3a:a9:e2:50:ac:b7:56:7f:2b:1f:82:4e:02:
                    2a:35:0a:04:e9:90:4d:10:89:d3:c6:79:4a:08:a4:
                    36:21:c7:62:5a:75:a9:ed:60:92:3e:ca:54:54:2d:
                    3e:03:cb:e8:4b:6e:5f:ac:32:8e:6a:be:d5:a6:76:
                    3d:0b:1f:ab:9e:45:bc:1d:a5:7a:2d:77:31:60:49:
                    c6:7d:4a:83:89:2d:ed:76:2e:4b:ac:b0:09:c9:00:
                    01:c5:0a:0d:07:3e:bd:6a:fa:1c:ba:58:17:04:95:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B0:F7:94:39:B6:3A:88:83:82:C4:F1:45:24:2C:C6:7D:6C:9A:92
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:37:31:84:c5:df:9d:90:b0:9e:ba:22:7d:57:97:88:2a:d3:
         d9:7c:0f:9a:23:b9:bc:79:61:87:1e:33:38:77:13:cf:ec:62:
         2b:a7:3b:f2:29:a1:5c:17:3a:de:56:e6:43:45:ac:b3:9c:2d:
         35:61:65:9c:90:5a:d0:6a:03:b2:f1:0f:2b:ba:b0:d7:27:10:
         6d:aa:95:85:88:6c:b5:a6:86:e8:2d:a8:5b:79:79:19:44:23:
         89:d6:69:c7:e1:a4:05:5f:f3:ef:94:ba:2d:f7:b0:d6:e7:36:
         26:a3:d2:f6:2f:7c:46:87:08:3a:6d:66:fe:5f:a9:45:3b:e7:
         f4:0b:7f:bd:a3:48:cb:d7:49:23:e3:e2:e4:09:cc:b5:54:22:
         1d:11:52:47:8b:4a:f4:3d:19:63:9f:6a:14:0e:21:60:97:70:
         d0:27:b1:ae:ab:78:d2:06:6f:a7:7a:2b:1c:e1:46:c9:88:dd:
         1a:b4:ed:c5:8c:15:d1:3a:69:8f:d6:c2:37:4f:fa:40:89:dc:
         6d:1a:04:d2:14:90:53:e6:46:fb:8f:94:d6:e3:3f:14:91:76:
         4a:2f:1b:e1:68:fa:de:97:7e:37:80:14:04:e6:9e:47:26:41:
         d8:9b:27:66:77:d2:05:bc:66:65:94:2b:98:f2:bb:c5:92:19:
         67:69:7c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:58:54 2026 by rpki-client