Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
File:                     39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json)
Hash identifier:          LW93VYqwv1eFmSFIzYPfAYWDbwAzdMAXLCANZwR8kQQ=
Subject key identifier:   CB:A4:E0:C6:1A:C2:FB:C5:2B:EE:9E:44:1B:52:CD:C9:5B:22:00:50
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Certificate issuer:       /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial:       019EC0DBB7928F0C55E5E0D03A4A93DAA34C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
Manifest number:          083D
Signing time:             Sat 13 Jun 2026 12:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:25 +0000
Files and hashes:         1: 1R8Nv6bwHGDwo2mOtPOF_3tZNSM.asa (hash: tt15uIuTQgd6Syibc3srDH+USXZ4ejIXqOAjH/FfWt0=)
                          2: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: czRYej0mGtKF0RMPP9/7oTmI2N7+SbQWvxPkz6+dAPE=)
                          3: QTUs2t29sOiO1bQndfZmKxNAYdQ.roa (hash: myzQSNEVPstuOfu5qsB9AEg4A9vQ4YhsK6/lq/QzmjU=)
                          4: V0dM0OGiOIRr_LANVdvcw5kopNw.roa (hash: LNRzC3fIfmhFsLHaDaO4AM9qxVQUMv8ErtHtGjlMGJw=)
                          5: YtUH2HDR3BMnJYA_6-3_zRl7jZU.roa (hash: mRR9x/8i4cOPBCC7EZm8Vzd5VETg0SnKsjvRtyU6XQ4=)
                          6: qi-GOyMBSjRbYkq7WgkeRycVlwQ.roa (hash: 43V/c1+hOszUxNWcQI07bQE0VxiRm591H0ynmrpSqL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:b7:92:8f:0c:55:e5:e0:d0:3a:4a:93:da:a3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
        Validity
            Not Before: Jun 13 12:01:25 2026 GMT
            Not After : Jun 14 12:01:25 2026 GMT
        Subject: CN=cba4e0c61ac2fbc52bee9e441b52cdc95b220050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c3:59:b9:04:84:d6:b9:d4:77:63:c4:a0:3d:
                    f6:da:f8:88:b6:c5:d9:45:a0:72:9e:7b:d5:6c:92:
                    c3:0d:68:f5:41:e1:21:a4:eb:23:4b:88:e8:f6:72:
                    91:0f:bf:17:59:f6:2a:58:3a:ba:ea:ef:19:ca:f8:
                    b5:17:9b:ef:1d:4f:4e:f6:51:49:2b:83:6b:9e:84:
                    4f:d2:ef:83:39:2e:39:11:20:d5:ce:e7:e8:2e:85:
                    b5:75:64:d3:36:d7:87:4b:8f:bc:5e:8a:e5:51:34:
                    0c:04:01:eb:67:b4:3e:f2:b1:0e:9f:b8:3d:0c:12:
                    3b:d0:bf:63:3c:7f:d6:09:69:71:0c:72:12:30:01:
                    e9:45:60:73:48:3d:b7:de:0a:36:43:c7:e2:71:d7:
                    ab:2a:5f:a6:b2:2f:b2:79:e1:4a:33:8a:8a:2a:30:
                    db:a9:40:15:26:da:f8:b5:0e:cf:e5:b3:b5:fb:6b:
                    d3:0b:ec:9e:35:dd:6a:be:51:18:2b:51:cf:10:9a:
                    90:ce:dd:de:29:31:c6:61:5f:c9:69:eb:65:a6:07:
                    c5:1f:13:fa:8a:7e:c6:b7:3e:0a:9f:d2:a5:69:57:
                    21:4d:77:ad:af:97:a2:24:da:a4:a4:6f:dd:ff:10:
                    42:40:36:0b:5f:20:16:69:b0:32:03:2b:26:45:e3:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:E0:C6:1A:C2:FB:C5:2B:EE:9E:44:1B:52:CD:C9:5B:22:00:50
            X509v3 Authority Key Identifier:
                keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:a9:b5:d8:3e:3d:ba:81:80:a4:b3:f4:3c:26:7b:38:e7:
         de:89:b3:84:71:3d:a6:e1:0b:e2:3b:ad:7f:f6:dc:c8:1b:08:
         22:19:73:bb:7e:b8:bb:88:03:70:42:9f:b6:a3:b9:33:43:6e:
         8e:e4:5f:3d:27:02:9b:1a:1e:70:7f:71:65:f4:6d:c4:c3:51:
         40:4a:25:57:84:b7:9d:44:e3:cc:b0:ce:aa:54:c8:f9:1b:24:
         c7:fd:b2:f1:04:45:c4:39:20:5a:c4:b4:fc:24:3c:6b:b9:d2:
         2d:0c:8f:3a:b1:4b:ae:a5:12:69:92:09:6e:f5:21:40:1a:59:
         7b:25:56:3e:2d:4e:c8:40:fc:b2:88:f5:e4:23:41:3e:b7:82:
         01:da:ab:16:c1:5f:13:6e:f6:1b:38:8b:d9:5c:c8:a8:f4:82:
         ed:50:ae:2c:68:ab:91:aa:b9:de:42:e9:f6:e3:59:e2:89:7c:
         4e:46:bb:f9:40:0f:03:00:cc:d4:4c:f0:5b:5e:d9:85:5e:c2:
         d8:39:4a:dd:58:7a:ae:06:b3:45:59:d3:05:0a:76:27:46:5d:
         3e:be:0f:82:c7:4f:24:10:77:75:af:3f:a7:ec:b6:b6:08:82:
         0b:5e:41:fe:40:cf:a5:bf:6f:0b:44:ac:90:87:37:de:28:70:
         b4:87:b5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:11:37 2026 by rpki-client