Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File:                     1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier:          u591ygxufRKFMxXEiYzO4TbHHS5rQv4z7VL+8Hrwt6E=
Subject key identifier:   8B:D3:7E:55:E7:1C:F5:78:41:DD:09:D8:02:DF:CC:D3:37:27:FB:AE
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       019EC2250613113921068A098E508517CF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number:          1968
Signing time:             Sat 13 Jun 2026 18:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 18:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 18:01:06 +0000
Files and hashes:         1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
                          2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: lpFIRuPm3obGQ2fP1zTjG5Ik8hSIRnNo+cm8SiGrF6w=)
                          3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
                          4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
                          5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
                          6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
                          7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
                          8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
                          9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
                          10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
                          11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
                          12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
                          13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
                          14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
                          15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
                          16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
                          17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
                          18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
                          19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:25:06:13:11:39:21:06:8a:09:8e:50:85:17:cf:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Jun 13 18:01:06 2026 GMT
            Not After : Jun 14 18:01:06 2026 GMT
        Subject: CN=8bd37e55e71cf57841dd09d802dfccd33727fbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c8:5f:e4:10:5f:d2:1f:d1:53:48:1b:9b:86:
                    36:8d:12:c0:51:37:c2:7d:52:0d:aa:09:ac:ac:20:
                    a1:f6:a5:3c:18:ce:39:27:cf:aa:6f:0b:1e:7c:53:
                    c1:6b:49:bb:b9:d0:81:4f:1a:29:d0:70:d1:23:b8:
                    5b:03:89:84:10:d8:f4:a5:e4:49:20:44:ff:55:31:
                    25:8e:88:7a:83:12:d0:22:88:03:b9:11:32:7a:2c:
                    c3:5e:90:61:f9:9c:cb:70:88:27:6b:38:ba:4a:dd:
                    9a:3d:48:42:cb:93:d3:57:48:46:b4:c8:3a:31:76:
                    6c:de:c3:b8:0f:a9:1d:3d:f4:3b:94:3f:9e:a2:dd:
                    39:0d:d5:dc:e9:08:df:4c:01:a8:9e:15:a1:9c:52:
                    56:0d:18:e9:f6:c7:44:00:35:dd:b9:cd:bb:dd:a2:
                    bf:95:c2:bb:8c:ee:91:4f:c2:82:3b:0d:68:80:80:
                    ba:90:a3:cf:ef:e8:80:a9:09:73:2a:7f:d7:2c:ad:
                    e0:7a:b0:b2:05:e3:ca:ad:6f:44:4d:96:f5:c0:7c:
                    bc:14:ad:a4:6f:c3:03:60:02:a4:7f:07:47:de:d8:
                    51:17:dc:27:92:9b:64:95:7d:24:17:d1:be:3e:d3:
                    9c:8c:23:a7:5e:4a:01:17:cb:ad:4f:6d:10:ac:08:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D3:7E:55:E7:1C:F5:78:41:DD:09:D8:02:DF:CC:D3:37:27:FB:AE
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d6:ff:e8:3d:d3:1b:af:93:0d:0e:85:98:97:8b:72:3b:26:
         6d:db:cf:87:4e:62:be:c8:2b:fe:a2:80:a2:f9:54:43:51:95:
         ac:72:0d:af:27:89:f3:36:4e:70:f3:32:c5:9e:56:5b:1a:27:
         be:17:e0:2e:ad:05:c1:fc:ef:29:75:43:9f:69:c9:2b:2a:00:
         25:dc:7e:2d:62:ae:15:9a:93:4e:b8:26:b5:f0:56:8e:7d:71:
         de:4d:96:39:34:4a:0a:b8:b3:63:c6:e4:09:79:d0:da:ef:62:
         7c:d7:75:2f:e9:d9:29:28:bb:a2:87:46:85:99:65:59:ad:33:
         72:d1:32:25:b1:e9:d8:27:1e:25:ec:17:95:f6:b2:a1:4b:65:
         64:54:c2:df:39:69:7c:44:e2:3c:61:c1:5b:ef:33:94:10:a6:
         61:bf:09:df:42:ed:b6:51:14:80:13:a0:64:77:9f:47:e2:f0:
         e1:70:0b:1b:35:df:6f:21:00:65:6a:7b:3f:a1:6f:48:21:d2:
         c5:72:48:20:92:c2:c1:a9:aa:a5:6f:79:07:a5:5d:67:85:f5:
         63:a4:f5:1a:09:09:7d:57:7c:db:c2:35:2f:36:30:3f:cd:94:
         9a:d9:48:08:1b:ad:af:f1:39:58:c7:30:52:9b:de:61:32:ac:
         46:f6:4c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:01:57 2026 by rpki-client