Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File:                     p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier:          ZSq9ABr1PgVWXwVyvp22Jt+xiF8zbKzp+p7a61V39jg=
Subject key identifier:   C4:1E:17:1B:F1:79:9A:11:8A:E5:07:FF:CB:29:BA:4A:50:B8:DF:E3
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer:       /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial:       019EBFC899B2376460AFAF056A7BE1D5D8B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 07:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:55 +0000
Files and hashes:         1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=)
                          2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=)
                          3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=)
                          4: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=)
                          5: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=)
                          6: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=)
                          7: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=)
                          8: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: oZTrWL2npjkK9bzU9Fnw9c3AxBoQ0ENLllDnQhoNZb8=)
                          9: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:99:b2:37:64:60:af:af:05:6a:7b:e1:d5:d8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
        Validity
            Not Before: Jun 13 07:00:55 2026 GMT
            Not After : Jun 14 07:00:55 2026 GMT
        Subject: CN=c41e171bf1799a118ae507ffcb29ba4a50b8dfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:d4:62:67:d0:62:4d:4b:d9:30:d1:97:80:
                    3c:ee:b9:19:98:03:2e:72:47:45:aa:91:43:94:be:
                    19:68:57:40:a7:c3:ed:9a:51:26:c3:7e:af:0f:9a:
                    5e:33:4b:02:f2:c9:2e:90:9e:d2:9b:08:67:34:73:
                    4e:56:74:4d:f5:a7:9b:59:fe:aa:eb:43:74:8c:5e:
                    30:a9:51:b2:4b:43:84:eb:3a:59:f8:67:4c:b0:6f:
                    8c:02:a5:24:66:6e:f9:1d:d8:3e:80:e3:0a:ae:9f:
                    79:63:3e:fb:ce:62:a0:ce:03:ae:7d:d1:2e:5f:97:
                    90:86:29:43:2e:f5:ca:0b:6a:7a:42:e2:eb:38:9d:
                    7b:23:61:9c:4c:20:7c:eb:ab:7c:62:54:81:63:ef:
                    36:6d:5a:8f:f3:61:3f:27:66:e0:c7:14:f3:a4:63:
                    75:d6:b3:b1:fd:c4:41:ef:16:4c:0b:39:ca:d2:a5:
                    48:d9:00:4e:39:dd:e2:bc:c9:94:30:e4:58:5f:78:
                    d9:da:cc:ec:b4:2e:8d:4c:96:1f:16:c1:90:f2:5e:
                    dc:4d:84:ae:98:53:81:cf:02:19:52:ac:ae:27:2d:
                    03:e4:90:2f:3a:c7:ff:1d:08:7c:e1:17:03:c3:f6:
                    05:22:7f:00:e8:ab:66:eb:bb:3d:48:35:45:36:df:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1E:17:1B:F1:79:9A:11:8A:E5:07:FF:CB:29:BA:4A:50:B8:DF:E3
            X509v3 Authority Key Identifier:
                keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:75:f2:a5:97:97:91:01:6a:5e:43:cc:bf:1e:c8:85:53:
         22:65:a7:04:d5:cf:05:76:b4:4b:f1:c8:23:d6:bf:78:d0:17:
         16:c1:76:46:52:2e:1a:27:a8:55:1f:f8:b1:34:b6:53:bf:f1:
         4e:e0:47:1e:1a:80:1c:ea:78:1e:30:5e:04:c7:07:a0:d0:e6:
         09:72:db:df:93:6b:d1:82:81:47:25:45:cd:54:b3:67:a2:51:
         20:28:30:23:6d:c3:c2:30:4f:3a:55:11:3b:ef:27:a7:c4:ad:
         7c:96:6a:a3:06:61:15:11:31:0b:7e:ee:55:b1:50:17:fb:19:
         75:c0:70:bb:db:bd:16:df:4a:d7:79:a3:42:02:fb:01:2b:83:
         70:75:c6:9a:36:d8:e6:2a:e8:94:7f:88:ba:c3:b3:ec:3e:3f:
         24:c6:40:22:83:76:ff:f0:f1:6a:6f:bf:79:56:15:e1:c4:f5:
         61:11:ec:15:6a:fe:06:4b:f5:39:99:5b:40:b5:4a:86:ea:c5:
         8f:d2:bd:09:00:e3:c3:b5:c1:5c:8d:8b:82:a2:67:6b:50:d4:
         2e:c0:31:53:99:e0:47:6c:6c:b3:fb:5b:29:11:b9:4d:e0:42:
         a8:10:32:95:41:56:4e:3f:63:a8:62:51:08:e5:09:b5:8b:ec:
         ef:fb:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:39 2026 by rpki-client