Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File:                     SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier:          n2VY4NaDMHAmMdHgWoiQbmr4t2+LAaEwsLoWmjwq3Do=
Subject key identifier:   1A:52:5A:EB:C0:5A:51:7A:8A:E3:E4:67:AD:A1:29:5B:42:60:DE:40
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer:       /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial:       019EC225357F93642FD07B17C41F7E9C1699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number:          1354
Signing time:             Sat 13 Jun 2026 18:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:18 +0000
Files and hashes:         1: Oya_7CTNloqoLGAwE4lej4v0gVU.roa (hash: pi6Tio3aUQA0JE16nMLeotjfbha9a+YODpOnjWqpmKM=)
                          2: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: K9S29WhtAO3vWWa5pWBD4Zi+j/guIjG2Yt0FUsrq63k=)
                          3: VMZQ9NDd56nkh5RyTCLwouklkcA.roa (hash: uqsQckCvVpROGzhWbi/+xNcAtRw003GCNfZZ7Nd36Js=)
                          4: bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa (hash: uKcVytuQYuouml3wIVfkbst8oBdAm0iOGlIFW2AnouI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:25:35:7f:93:64:2f:d0:7b:17:c4:1f:7e:9c:16:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
        Validity
            Not Before: Jun 13 18:01:18 2026 GMT
            Not After : Jun 14 18:01:18 2026 GMT
        Subject: CN=1a525aebc05a517a8ae3e467ada1295b4260de40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:65:0f:4d:99:b7:5d:95:86:2b:59:34:73:
                    bb:1f:7b:79:2f:9c:b0:69:f4:69:56:0b:68:a9:ae:
                    cb:2a:14:ce:e5:95:81:bf:94:02:a8:5d:cc:4f:b1:
                    62:7c:eb:01:60:f1:37:64:68:ca:a8:6a:14:91:0b:
                    4a:1b:51:be:57:36:fa:b1:52:ac:b8:c8:b6:90:1d:
                    29:51:cc:9f:43:ce:2e:50:66:50:8c:b5:ba:33:95:
                    ba:c1:9b:3a:b0:05:c7:b7:a2:4f:aa:1c:cb:e2:f4:
                    3d:92:00:3d:a3:24:50:83:49:6d:af:23:8a:e3:7e:
                    af:24:35:65:e5:41:d9:07:95:3c:b1:e8:db:e4:c5:
                    eb:af:6e:c9:b5:73:00:e2:43:94:41:3a:34:c0:83:
                    df:e0:2b:6d:34:2c:27:2c:c1:45:db:eb:b3:b0:73:
                    c7:b1:74:0e:4c:c6:ca:6d:3d:c7:4f:84:e1:83:25:
                    4b:67:4e:de:cc:ef:eb:01:ea:d6:31:b1:78:9c:7e:
                    51:0a:a4:1c:ae:10:05:75:9a:11:71:4d:0e:47:57:
                    68:66:70:5a:41:eb:31:1c:3c:6b:f0:98:df:00:23:
                    dc:16:71:68:91:d3:26:bb:19:4e:f4:3b:63:19:df:
                    61:52:00:1e:36:47:fc:70:90:ad:65:92:ad:5a:ef:
                    10:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:52:5A:EB:C0:5A:51:7A:8A:E3:E4:67:AD:A1:29:5B:42:60:DE:40
            X509v3 Authority Key Identifier:
                keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fc:fc:49:ac:26:c0:f8:f1:70:2b:43:e7:59:78:d2:b7:79:
         44:cc:91:88:a8:b9:80:71:b6:6d:fd:66:84:6b:37:71:43:b2:
         22:3f:b0:60:4c:ec:1f:61:d2:e2:20:06:94:5d:d9:8f:88:a6:
         5b:93:5a:29:f5:c8:04:a7:f5:67:f8:4b:b6:08:1f:b4:f1:78:
         b8:c2:ee:5b:62:e1:0f:09:69:56:d8:f0:93:5a:39:2c:59:a3:
         a1:a9:8e:f9:3d:0b:a6:79:34:1d:df:4b:0c:5a:8b:62:ab:4a:
         4f:1a:84:7a:3a:04:49:11:63:97:a9:b2:14:d8:aa:86:ff:6a:
         f4:bb:d0:fe:f3:3e:27:2c:7b:70:9f:1f:f9:59:d1:12:cf:d1:
         16:1e:cc:80:0e:24:02:27:16:34:9e:78:fa:e3:25:bd:6b:f2:
         86:0d:c2:1a:07:a1:d5:83:b1:fb:76:64:c5:ea:01:9b:d2:b1:
         51:62:a2:82:c2:ff:c5:c8:2a:3a:25:78:7a:48:cd:94:41:f3:
         6d:16:2d:bf:fd:cc:b9:de:40:29:a4:a0:a6:81:4c:ab:6c:1b:
         23:dd:79:f4:af:31:75:7f:bc:6e:06:4d:f0:11:68:0f:c3:70:
         f6:73:ff:0c:b0:8f:63:30:13:88:7e:eb:18:4a:20:b0:65:55:
         13:0e:0b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:57:26 2026 by rpki-client