Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File:                     fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier:          RKNAOkscu5lXJ4PvDzY8T1BkZSCc39792G2gt3t1LDA=
Subject key identifier:   B6:56:18:20:F9:8D:10:F3:24:6C:C4:79:9E:BE:FB:5F:0D:20:AA:9A
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer:       /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial:       019ED34F704E78EA25B0EA33495C9E25870B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number:          1961
Signing time:             Wed 17 Jun 2026 02:00:59 +0000
Manifest this update:     Wed 17 Jun 2026 02:00:59 +0000
Manifest next update:     Thu 18 Jun 2026 02:00:59 +0000
Files and hashes:         1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
                          2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: vqtqfDT37pVKxTs/Jb/dxt0A72dp8Q73xy0xnEOaDUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:70:4e:78:ea:25:b0:ea:33:49:5c:9e:25:87:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
        Validity
            Not Before: Jun 17 02:00:59 2026 GMT
            Not After : Jun 18 02:00:59 2026 GMT
        Subject: CN=b6561820f98d10f3246cc4799ebefb5f0d20aa9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:94:d3:b2:d8:ec:72:70:25:1b:ba:af:ce:
                    0d:5b:b4:bd:c3:04:9a:e9:ad:7b:c4:2c:77:3b:36:
                    5b:22:10:6c:1b:a6:92:3c:76:39:e7:93:01:25:aa:
                    36:87:bc:fd:f6:a0:2e:7f:73:40:6c:36:68:0b:b2:
                    cb:a3:6d:00:25:88:1d:8c:24:37:df:ff:ea:48:73:
                    30:7a:3d:92:3c:17:ec:37:b3:6d:39:34:53:cf:69:
                    79:9d:21:29:39:00:aa:87:ad:4e:5d:d9:d7:15:a3:
                    26:eb:48:96:08:4f:a7:9c:56:9e:6d:2e:29:66:db:
                    ed:1f:ec:d4:98:67:43:86:cf:d9:ba:a2:44:47:95:
                    f6:b1:27:51:2e:fa:71:44:eb:56:f3:ee:5c:b5:e5:
                    f6:b4:b3:44:91:70:eb:12:cc:d7:bb:f7:24:05:52:
                    da:5e:a4:21:ea:0e:fa:6c:2b:ae:ae:81:bd:d2:af:
                    d3:53:a6:d0:be:50:4c:96:da:b1:72:5d:ee:ed:78:
                    9f:9f:ce:3a:fa:6b:8b:44:47:43:0e:90:49:ed:ed:
                    aa:23:04:b9:cf:a1:1e:c6:4e:36:59:12:01:18:41:
                    d7:4d:46:01:76:f2:8a:21:79:a6:0a:d6:44:6c:f7:
                    3d:67:ae:79:5f:ff:8b:f8:ec:3c:ae:71:b4:c7:58:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:56:18:20:F9:8D:10:F3:24:6C:C4:79:9E:BE:FB:5F:0D:20:AA:9A
            X509v3 Authority Key Identifier:
                keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:08:46:ff:e5:ca:35:55:cf:d0:80:37:f8:87:07:1a:de:d7:
         70:21:27:3b:23:73:b7:8c:4e:35:af:a0:c4:23:df:c9:79:cb:
         5b:0b:2d:ef:e5:c0:91:35:71:b1:41:e1:14:f6:24:de:65:dc:
         59:7c:db:e6:b0:f4:e8:6d:e1:19:33:9e:11:5c:19:cc:61:e5:
         70:8c:42:3f:7a:c7:82:dd:72:16:82:f2:13:94:51:cc:66:69:
         1f:a8:a0:d0:02:db:96:4f:eb:93:19:ad:02:cf:3e:55:20:ca:
         7a:22:1e:2b:0f:e4:3c:39:13:4c:0e:b4:bb:a1:03:42:7a:29:
         6a:19:6e:1d:21:14:a8:c0:3a:f2:83:27:71:b4:24:59:aa:8d:
         50:ab:be:3d:ca:fd:ea:d1:c6:4b:b2:18:aa:91:3a:ab:a5:6b:
         27:65:05:a5:83:47:4a:ce:86:a4:86:53:84:a8:24:07:2c:e0:
         f4:9a:c4:f3:5e:0b:c5:86:e9:a7:e2:aa:72:ef:48:f4:73:0a:
         d1:66:8b:a9:71:62:93:7f:6a:a1:07:f0:b8:02:5d:ae:5e:31:
         de:f3:a8:98:07:15:5e:cd:17:69:fd:b4:4b:81:45:0c:4d:be:
         ce:05:0d:93:71:3b:e2:94:02:5e:0f:5f:5d:c4:f7:89:c1:08:
         f7:01:eb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:48 2026 by rpki-client