Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File:                     fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier:          KwSCpr3Sa7HK1gGjXLGe6HdTwnCqSzrjso9X7RTOuBo=
Subject key identifier:   5C:97:70:78:66:D2:79:C2:9D:CB:C0:AD:C3:92:33:58:79:EA:C7:46
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer:       /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial:       019ED499368A1C781E1F25A31EBA348EDA70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number:          130E
Signing time:             Wed 17 Jun 2026 08:01:11 +0000
Manifest this update:     Wed 17 Jun 2026 08:01:11 +0000
Manifest next update:     Thu 18 Jun 2026 08:01:11 +0000
Files and hashes:         1: OGNMh9luEfhWYSfkuTxUdvEw3T0.roa (hash: W+Y0DYRWsQtmVscqd/FelKkUl50HuhEP05K5AvhVU6w=)
                          2: _wcSqPRV5JgTozaPPAply-Zy5SI.roa (hash: kaddq5Zo4l9c0eBW6a1M05v2cAL5RJlZmJFBmkNxnmk=)
                          3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: AL2gvsIupjO4x75JMfWFnm4VfGzfH3KdwGKRLrvSz4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:99:36:8a:1c:78:1e:1f:25:a3:1e:ba:34:8e:da:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
        Validity
            Not Before: Jun 17 08:01:11 2026 GMT
            Not After : Jun 18 08:01:11 2026 GMT
        Subject: CN=5c97707866d279c29dcbc0adc392335879eac746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:86:22:c8:b9:4d:b2:5e:2f:9e:5b:4b:45:
                    71:d6:8d:84:32:a9:02:41:37:ca:77:f7:26:a9:9f:
                    a6:f1:0d:da:0b:9b:9b:11:31:29:50:82:9c:c2:77:
                    96:74:65:dc:e3:b3:a9:aa:3b:04:06:cf:37:22:60:
                    ac:98:6c:e0:e2:88:0f:e8:7d:cb:ba:3c:c0:08:00:
                    b2:5a:de:90:af:43:cd:5c:c4:ae:8a:99:70:3a:e9:
                    aa:fa:1f:01:a2:7f:1d:f0:e7:90:5d:e4:d1:75:4a:
                    3f:1e:78:e3:26:0a:78:63:09:da:46:6c:bb:57:44:
                    54:53:63:11:56:8c:86:a2:2a:84:0e:89:39:83:06:
                    6e:06:a1:94:30:e5:d9:02:b8:d3:51:9f:8f:8d:13:
                    8a:98:2e:c9:5d:0d:62:58:10:e4:fd:32:ae:03:28:
                    72:79:a3:0a:3e:4f:03:3f:84:1a:86:21:cf:34:b2:
                    b1:a0:84:cc:fa:0b:e6:ac:8d:cb:6a:4a:aa:60:5d:
                    9d:47:c4:f3:b6:05:0a:e7:dd:75:bf:ff:b0:31:0e:
                    41:5a:dc:4b:cc:1c:96:07:5a:0e:3a:00:f8:1d:85:
                    30:c5:64:db:8b:e4:7e:cc:65:15:be:79:cd:11:00:
                    4b:6d:b2:98:f3:b0:db:f0:f2:42:70:94:8d:11:fc:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:97:70:78:66:D2:79:C2:9D:CB:C0:AD:C3:92:33:58:79:EA:C7:46
            X509v3 Authority Key Identifier:
                keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:22:8a:43:61:22:3a:af:43:2b:d6:d9:fc:c0:1e:5a:b3:3a:
         89:92:d9:af:28:3b:c6:75:0d:28:ef:0f:c6:a7:ba:3c:92:bf:
         c9:81:55:6a:76:de:78:57:f0:77:ab:dd:0b:9e:64:fb:64:52:
         20:fe:28:22:9e:dc:ad:e1:2f:98:9c:e2:e0:b2:a9:e0:26:24:
         9b:9d:20:44:f3:7d:e3:8b:35:8f:63:d2:02:61:51:8c:8d:39:
         2a:2c:fe:d3:d3:6a:22:b2:a8:ba:dd:74:f2:39:ee:de:74:27:
         97:0b:72:27:c0:e5:5a:2a:29:7f:99:3a:14:95:2b:91:14:a7:
         47:7d:67:09:9f:a6:19:b2:5a:a1:df:7c:1a:9b:ab:dd:20:08:
         96:8d:ec:5d:f1:03:85:e7:a7:ad:d2:a5:90:ff:d9:b7:5c:53:
         83:82:f8:e6:47:00:8c:09:c0:0d:9b:dd:3d:00:f4:83:0f:eb:
         bb:0b:a6:db:e3:9a:bb:b1:47:aa:1b:dc:98:d1:a0:3f:9e:96:
         af:94:83:ea:00:53:8b:d0:d2:8f:b5:9d:1f:f4:ef:19:56:8c:
         ca:98:5d:1c:09:00:62:3e:8e:fd:7f:aa:1e:b5:18:81:a9:47:
         97:32:4c:1f:0e:51:50:74:26:8c:2b:20:30:ab:e6:de:91:e1:
         2e:94:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:09 2026 by rpki-client