Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          FU3a/3IxHZYzjro7TN/ylWGWpWquense+o01p3dfa8Q=
Subject key identifier:   84:53:26:7F:2E:D2:25:F4:EF:31:C6:4A:DE:5F:42:AA:CD:3D:C1:F8
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       019EBFFEDF7C9CA4D70EB284616A170D5B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 08:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:12 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: I/q7SoHYVAhBXkaXLD53eCmtGvuRYz5f1BvU2uaHKws=)
                          2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
                          3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
                          4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
                          5: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:fe:df:7c:9c:a4:d7:0e:b2:84:61:6a:17:0d:5b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: Jun 13 08:00:12 2026 GMT
            Not After : Jun 14 08:00:12 2026 GMT
        Subject: CN=8453267f2ed225f4ef31c64ade5f42aacd3dc1f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:dd:1e:a6:78:a1:e3:3c:54:65:fa:40:68:
                    4c:fd:64:87:64:3e:95:e4:74:9a:94:cd:b9:6b:5d:
                    c3:a9:9d:b4:b5:2a:44:4c:49:65:0e:83:3a:9a:5c:
                    62:87:dc:f9:aa:95:5c:c7:78:ff:aa:8b:4d:8b:63:
                    5d:80:61:28:83:01:7e:48:62:54:0c:36:87:e5:73:
                    c5:ef:a6:d1:00:39:2f:7f:6d:4e:a3:4a:ee:bc:7f:
                    45:65:34:f8:b3:0e:9c:8d:db:57:4d:c8:c4:af:84:
                    dc:74:08:b5:09:95:cf:e1:76:de:c5:bb:05:c5:5b:
                    1b:fe:98:4b:9e:5d:22:4d:84:dc:f2:89:d2:76:5a:
                    7a:7d:50:c5:ee:35:87:0b:34:9c:a1:0a:0c:d2:17:
                    7c:a0:2f:68:05:c4:a5:85:c9:f2:e9:89:a7:fe:d3:
                    32:7d:f3:a4:85:58:91:74:49:30:33:27:c2:1c:95:
                    d5:13:4e:37:4b:ae:69:3c:64:4b:35:e6:bc:dd:ed:
                    dd:a9:ec:ad:34:10:da:3d:84:86:d0:03:ad:53:1d:
                    86:5c:2a:59:f6:3c:7c:4c:9b:e8:ba:f5:24:58:aa:
                    56:0d:94:dd:92:0c:bb:86:d8:3d:d1:2c:8f:0d:26:
                    8e:64:0a:e9:c7:eb:ac:e7:c1:5a:a9:89:d5:68:37:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:53:26:7F:2E:D2:25:F4:EF:31:C6:4A:DE:5F:42:AA:CD:3D:C1:F8
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d0:0a:30:cb:1c:4d:2c:0a:26:76:b3:1a:02:d2:ea:aa:a4:
         e4:ab:13:cc:3c:43:be:dd:f8:80:ee:fc:99:57:6a:b4:44:cd:
         95:eb:3e:0b:81:53:92:c3:4a:1c:90:25:9b:0b:b9:17:d4:8c:
         f1:f0:33:f4:89:c3:09:d3:94:98:f8:52:dd:4e:b4:3e:e6:b7:
         ac:27:17:2f:54:5a:b9:5d:cb:5d:8b:df:ba:f2:bd:dd:46:9f:
         5d:14:52:4a:d7:41:ed:ad:3e:47:f1:75:85:0f:91:54:38:b3:
         82:68:46:d2:5b:a3:f9:dd:a5:0f:a1:8d:6f:0b:b1:12:b7:a4:
         54:1b:bd:14:99:3d:1f:48:4e:e4:f7:f1:fe:cc:2b:7d:b1:5d:
         d3:7b:73:ed:6b:de:d7:f5:36:83:3c:19:04:b1:5c:cc:1e:32:
         dd:f0:23:bb:78:d6:b0:94:22:95:da:09:d6:bb:00:e7:4c:a4:
         1f:bb:ac:0d:8e:22:d9:ba:84:4c:6c:4a:d4:eb:f9:5a:f4:e7:
         8c:ee:74:12:70:cc:dd:08:20:28:e4:66:3f:38:76:8b:18:fc:
         af:16:bf:81:98:88:dc:a4:b5:6a:20:c3:30:1d:f5:39:0e:f8:
         97:e6:35:47:7b:f4:b3:63:30:01:e6:f7:15:0f:35:2f:42:81:
         a2:5d:69:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:20 2026 by rpki-client