Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File:                     SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier:          NOa4d6sQaYl+Enp5ONvJD6FygC7Fs2IlyDEYMvkRAPw=
Subject key identifier:   A7:DA:36:75:B6:C6:3C:BE:5A:52:55:15:49:F1:EA:B6:18:8F:5F:42
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer:       /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial:       019EC4134BAEFC663E072D6517B4B5633143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number:          057F
Signing time:             Sun 14 Jun 2026 03:00:59 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:59 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:59 +0000
Files and hashes:         1: JJCCXVuKGJb9ue4yyF1fCtUPK9E.roa (hash: 9nwd4CsbVqKtlvKwPGpaOjb7a2D6lmLy6I2tj8BYZf4=)
                          2: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: gNZ5h+RnBj34eZN2FTqEWffTjGrxAyF7hV1XlrZ/i6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:4b:ae:fc:66:3e:07:2d:65:17:b4:b5:63:31:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
        Validity
            Not Before: Jun 14 03:00:59 2026 GMT
            Not After : Jun 15 03:00:59 2026 GMT
        Subject: CN=a7da3675b6c63cbe5a52551549f1eab6188f5f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:5d:b3:0f:f8:fc:3e:20:55:65:f8:08:53:
                    13:04:70:7e:60:26:bc:bd:30:6d:b1:c4:44:82:8a:
                    f5:4c:55:d3:5d:ce:4b:bb:f7:48:0f:5c:7a:79:82:
                    36:b2:7c:64:24:ee:b3:2d:64:45:67:81:7d:66:61:
                    84:ff:7c:3f:d9:2e:1a:6b:18:74:c0:e2:be:5d:9b:
                    d7:e1:42:da:5b:d5:64:7e:e8:b5:df:bd:b3:21:7e:
                    31:6c:83:44:b5:ab:a4:cc:2e:c4:57:32:46:3a:44:
                    62:6a:1f:01:38:50:22:42:ef:2c:97:d4:3c:c0:4e:
                    a3:67:6d:e8:f6:a1:7b:92:53:a0:30:30:01:4f:7f:
                    9c:19:6c:13:32:b2:90:c8:d4:b2:ef:af:63:71:91:
                    46:55:94:b7:ef:b7:ca:57:6d:92:9e:0c:b4:05:98:
                    cc:d6:f8:e5:7e:11:b2:4b:6b:95:89:f3:12:40:08:
                    54:d5:65:5b:48:70:0e:0e:39:9b:94:b6:95:cd:85:
                    c2:d5:7c:02:72:98:38:51:68:e3:58:6a:eb:05:27:
                    1b:cf:c9:f0:3b:a1:1a:f6:6b:52:43:4b:46:f6:00:
                    cb:23:5d:08:50:cb:d2:b9:92:72:35:98:b6:71:5b:
                    20:6e:b8:46:8e:e5:ad:11:7a:39:06:24:d3:32:43:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DA:36:75:B6:C6:3C:BE:5A:52:55:15:49:F1:EA:B6:18:8F:5F:42
            X509v3 Authority Key Identifier:
                keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:95:a5:7f:6a:2a:7e:c0:c8:1e:bf:86:4f:64:40:4e:b0:
         43:5f:f5:7f:d9:e7:1e:6c:2a:67:53:b1:28:17:4d:ba:15:3a:
         09:cf:83:a5:19:f5:22:21:29:01:02:4e:9e:e3:26:29:fc:cb:
         6f:e1:10:1f:9c:e2:2f:38:d3:f3:c8:22:81:07:5f:6d:97:67:
         c8:50:88:dd:f4:4c:d9:52:4c:3d:d2:e2:62:e9:7e:78:90:80:
         19:e9:68:de:f7:6a:39:1e:a6:76:fb:7f:2f:03:ee:56:65:fa:
         6c:39:f1:d7:52:de:9a:d1:d6:e8:50:d3:eb:d6:20:d4:6e:5d:
         02:e0:0c:42:eb:0d:79:e9:66:00:65:9a:06:40:92:38:56:0b:
         18:4b:41:5e:8b:9e:20:dc:3a:eb:23:6f:b4:b1:3e:e4:ef:50:
         8a:a8:cc:3f:fa:11:ce:c0:ae:a3:13:f8:cd:36:ea:69:36:c6:
         b4:80:98:c9:87:87:49:33:39:c3:64:75:54:56:b4:b5:1a:77:
         f1:31:ac:00:ca:e7:1b:0d:c8:96:85:10:7a:df:79:46:a8:b3:
         c8:bd:db:d8:bb:29:5c:1c:cb:35:00:fb:70:82:17:4b:b8:f0:
         2b:fe:29:cd:52:88:62:c9:e0:72:58:8a:82:86:63:23:eb:8e:
         f4:d1:46:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:38 2026 by rpki-client