Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          N/TtGk5eDtrAl4OBsO4KdKQ/tL9RcN39YWxMUCwssws=
Subject key identifier:   68:72:6B:3F:83:4D:5F:1C:D0:DD:2D:8C:E4:C7:00:30:7B:F0:32:45
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       019EBF23D209B478174C99549EE6F383B2FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          13C5
Signing time:             Sat 13 Jun 2026 04:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:56 +0000
Files and hashes:         1: 1PeK2rVaekZNVC3o3pyzwNQgzhE.roa (hash: bT8T+lq1jJgvGdCk3qnNPwcbcmXO99rl74JJHuWU1R4=)
                          2: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: aHrQWvSvEf/G3L0r2PLpWmDO6JiZUpCjMl99gQaDedI=)
                          3: FUAG3jq8oW-DG-4OVip2j9_K6zM.roa (hash: X1mjWztgnVQSSGLyPzOsDPZqwti1AiSyexfKdPbUPdM=)
                          4: U0tl-UVjdgoquFk_RP8dvu9_bzA.roa (hash: fvBK5Ool8MKV1KD0bY966e8iK9zhJNvA5b6LpcKGcn8=)
                          5: WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa (hash: ToxcyUtODIjk+vfIoE2fDiyxO6Xp7CGXZG+vHQsn3hA=)
                          6: i8DSsz1zrzQenpw3T2bP8cFRsq8.roa (hash: oEuQy5j/C31ArjuLYoalrrQGCWj0f7zf2ngtaCvBjYo=)
                          7: sUrIEpm5C4rBhagjdZq3jf6wqrY.roa (hash: jRLTkZKX0jd/Ii5LEPQsVlaAGfAK0xdao7SE2gBfvAA=)
                          8: zMUHewOkNECVYz7ml1umISWZOVE.roa (hash: G455vMmTjZpLOZTw+9pAQhVOSHGfalAl4TZYjQHUmAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:d2:09:b4:78:17:4c:99:54:9e:e6:f3:83:b2:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Jun 13 04:00:56 2026 GMT
            Not After : Jun 14 04:00:56 2026 GMT
        Subject: CN=68726b3f834d5f1cd0dd2d8ce4c700307bf03245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:34:6d:8a:f9:99:bd:4f:cc:94:cd:08:9a:
                    f2:a1:ab:bc:80:d4:ae:68:f7:5d:b2:75:c0:ad:6f:
                    88:7d:8b:a6:9d:42:9b:2a:f0:35:b0:fc:88:be:bd:
                    67:a5:c5:61:fa:27:75:4c:74:86:a4:b1:37:f1:b2:
                    53:8c:b4:ab:7e:a0:83:4d:ac:91:26:8f:f4:b3:83:
                    80:b1:cb:f9:2d:da:97:11:ca:cf:15:8a:d2:4a:f6:
                    9b:c3:2c:73:13:ea:53:fc:19:4a:74:18:2f:ff:22:
                    6b:d6:9e:fe:cc:b8:fc:fa:b5:6e:00:8c:b0:f0:71:
                    50:5d:63:7f:ed:b0:95:05:6a:35:0d:91:2d:7d:45:
                    58:a2:73:5b:24:8a:05:fa:6d:28:05:ea:c5:7e:91:
                    dc:6a:6c:bf:1a:62:3a:5f:ad:8a:96:72:7d:ce:d5:
                    cc:d2:24:96:65:66:80:bf:7e:09:b4:f6:4d:40:98:
                    d4:5e:5e:54:14:e3:f2:39:ba:46:65:c9:79:7d:61:
                    17:e3:49:17:b4:5b:db:c5:b2:69:6e:ac:15:55:d5:
                    e1:69:20:db:19:61:97:99:a8:1a:db:b8:9c:ec:94:
                    ff:72:c9:11:79:e4:6e:c2:96:64:8f:a9:ae:c7:d5:
                    33:a4:c9:4c:07:25:ea:b7:1e:17:9d:08:3c:2f:f7:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:72:6B:3F:83:4D:5F:1C:D0:DD:2D:8C:E4:C7:00:30:7B:F0:32:45
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:b5:d0:6e:e7:48:7a:9b:41:73:95:0e:5e:8f:71:84:bd:
         13:d5:6a:17:2e:c5:62:27:da:c3:02:d7:0c:7d:9f:19:50:a7:
         a0:f8:be:39:d8:ca:49:16:e7:bc:15:d2:a8:1b:33:10:b3:2e:
         c5:fc:8a:17:98:a9:19:8a:ba:b2:b8:6b:59:93:f2:60:2f:9e:
         15:1a:8c:21:8a:32:69:8c:82:2e:79:d0:1d:ce:52:26:09:b4:
         f8:86:55:0b:29:ab:65:4d:7e:a7:ce:9d:21:8a:74:97:dd:83:
         4f:4c:e9:fa:73:28:8e:56:c4:b7:0f:bd:8a:dc:d0:9f:0a:38:
         29:f0:6e:14:83:b6:b4:99:9c:92:e9:da:75:a6:15:51:04:c1:
         58:d4:3c:82:5d:91:6a:aa:88:0d:e0:7a:5b:2e:d7:47:7a:cd:
         73:01:ae:f4:5f:3c:5d:5c:42:bf:71:70:17:8b:92:00:94:10:
         ce:b2:d2:08:cb:31:ca:2f:46:5b:96:24:af:61:c3:a0:fd:f8:
         78:aa:d8:2c:55:f1:55:a5:bd:69:82:fa:34:3c:ac:ee:8a:ea:
         99:46:8b:f5:27:a0:e4:55:9d:86:7b:34:e4:36:91:21:88:cf:
         c4:02:d2:4a:76:55:0f:b7:ae:d2:64:6d:92:b0:d8:97:cf:78:
         22:f7:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:08 2026 by rpki-client