Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
File:                     5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft (raw, json)
Hash identifier:          vGwM7/qZSWh0Rlu3dt0tNFNHhSTOX+wlhFognthpNJ8=
Subject key identifier:   A4:5A:88:97:2C:03:91:5C:4E:E7:D0:EC:9D:04:3B:E8:8D:2D:57:00
Authority key identifier: E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98
Certificate issuer:       /CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
Certificate serial:       019EBF2402F0A153CC96CC15B13C55D174EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
Manifest number:          1958
Signing time:             Sat 13 Jun 2026 04:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:08 +0000
Files and hashes:         1: 1-pJL_RqO1YmMrkb8oqu5jkasDqw.roa (hash: tXskn9qxJGgIuj8H/bglOap8ueKyjcb9VQBsaau/B14=)
                          2: 5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl (hash: fosg0boh9Y8mnYk0Uftq9LIDjSAsxYZdKE+nlI37U5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:24:02:f0:a1:53:cc:96:cc:15:b1:3c:55:d1:74:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60064dcf719ed8999da792f6fbfc3fe9bc70898
        Validity
            Not Before: Jun 13 04:01:08 2026 GMT
            Not After : Jun 14 04:01:08 2026 GMT
        Subject: CN=a45a88972c03915c4ee7d0ec9d043be88d2d5700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:d2:02:30:58:2a:4d:6f:53:f3:fe:67:da:
                    b5:e8:c9:83:1f:32:85:72:33:bf:f9:b9:58:2f:a1:
                    13:c5:bf:4a:d3:0e:ed:7a:05:bc:a5:70:eb:46:4d:
                    27:49:86:29:fa:2d:0e:e6:27:91:a1:b9:f5:38:5a:
                    ea:3c:7f:8d:40:08:5b:e7:65:e6:5f:ce:ea:44:92:
                    7d:c1:11:ff:0b:7d:d9:8a:fc:28:df:58:40:b4:5e:
                    08:aa:35:47:ce:14:3a:0f:b1:8d:08:47:ff:93:2c:
                    49:ac:09:dd:34:06:62:bb:92:e7:bc:d5:84:40:36:
                    74:70:c5:9e:c4:58:72:95:da:9a:ca:d5:b8:b9:f1:
                    e6:01:2c:23:f0:3f:77:ff:57:e6:30:36:ae:ca:98:
                    a4:b5:e2:14:1e:cc:c1:85:0e:f7:95:b1:81:66:7f:
                    76:e4:83:8b:85:4b:e0:1d:89:fb:b1:79:22:48:f0:
                    d5:c9:49:b4:13:57:04:88:c9:45:52:15:fd:a8:bf:
                    60:4b:a5:40:b8:a6:41:06:34:15:7a:cf:0b:a7:61:
                    33:0b:6e:ab:40:e3:88:67:16:9b:59:18:59:44:06:
                    35:14:62:6d:11:2d:ad:57:76:73:a1:72:63:b8:a7:
                    62:03:d5:b5:ce:c6:f4:13:56:e8:28:88:1d:89:a5:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5A:88:97:2C:03:91:5C:4E:E7:D0:EC:9D:04:3B:E8:8D:2D:57:00
            X509v3 Authority Key Identifier:
                keyid:E6:00:64:DC:F7:19:ED:89:99:DA:79:2F:6F:BF:C3:FE:9B:C7:08:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/734e0c-786e-4631-a923-e8b8fcc41e85/1/5gBk3PcZ7YmZ2nkvb7_D_pvHCJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e3:ce:53:c8:47:20:ca:41:26:ae:b1:50:fb:53:93:8c:b3:
         3c:91:63:fc:4b:04:9f:cf:e5:76:a8:8e:d5:f2:63:f5:d7:5a:
         70:c3:e6:5f:ab:70:01:96:6f:00:c6:08:2b:96:d4:06:24:4d:
         f5:06:0a:42:38:66:57:50:f7:d2:2d:0d:71:40:c6:ce:13:fd:
         7d:25:0b:99:fe:23:8b:7f:b4:db:74:17:4f:4f:cc:0e:94:4e:
         38:d8:b7:2d:f8:a6:a8:5a:8d:92:95:9e:44:76:f5:2f:da:04:
         0c:b6:68:2c:0a:bb:bc:b8:98:ff:e3:8e:0d:9c:74:67:bf:bb:
         81:2a:70:88:4e:f6:d5:0e:ba:1b:07:fb:4d:75:77:27:02:26:
         da:87:73:f7:6c:e3:b9:e3:f0:1f:29:7d:8e:19:d2:ff:97:0a:
         13:79:18:04:d3:27:e7:c5:6d:9e:ec:c7:6a:ae:0a:a0:4f:88:
         7b:c5:ac:d8:8d:01:b8:63:92:9d:33:52:e6:90:28:39:e2:af:
         47:ba:8f:ac:f9:76:50:7b:b6:8e:02:6c:68:c4:60:df:4f:e0:
         8d:8a:ce:9d:7d:fb:1f:ec:b8:a3:6b:62:ac:9e:3a:05:4c:d9:
         dc:e9:52:ab:47:1a:8c:00:76:9c:14:ba:59:69:de:7d:b5:c6:
         1e:6b:5a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:00:30 2026 by rpki-client