Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File:                     7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier:          4uSQEYq98eiJe7KgqKIxyRbCURzd5QX2mtVtqIq6Tl8=
Subject key identifier:   C5:38:89:2D:A3:64:04:87:0C:34:C1:C8:02:FB:C1:33:BC:46:39:3C
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer:       /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial:       019EC2C9FE0E9233643D826B5BE86098CA67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number:          16DC
Signing time:             Sat 13 Jun 2026 21:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:18 +0000
Files and hashes:         1: 3wC4iAYIU6RjN3EGUKVhlIp3rko.roa (hash: r6BtCtLIRGTbjhqdmmeh1e+4MWSh7VLtqxWzoKISutU=)
                          2: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: oAoL98PV+nRpg54y2s9doUWSh3BMq6IVZGkJeTkskPs=)
                          3: H6GA7joAUfNPurokrgS1LJjNtfY.roa (hash: FKRThdMjAtwcwfUfR10ZtwzWVg2CFJr5Omg8dgAq7bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:fe:0e:92:33:64:3d:82:6b:5b:e8:60:98:ca:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
        Validity
            Not Before: Jun 13 21:01:18 2026 GMT
            Not After : Jun 14 21:01:18 2026 GMT
        Subject: CN=c538892da36404870c34c1c802fbc133bc46393c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:88:7a:bf:01:51:35:07:46:a3:56:eb:d4:de:
                    3b:97:bd:46:c9:58:11:e2:2e:fd:5b:75:e3:d9:90:
                    d1:f4:73:c8:3c:94:21:de:f9:43:6b:b1:d8:85:53:
                    52:aa:51:a1:7f:c0:bc:4b:a4:c7:2c:3d:e2:5b:3f:
                    a3:75:8d:15:92:51:db:8b:07:ab:39:5e:f1:ff:89:
                    0c:95:b9:11:29:d1:f3:5a:35:a9:8e:fc:86:87:87:
                    61:0d:9d:d5:a3:fb:f8:2b:d4:65:43:88:76:72:9b:
                    3c:30:05:95:12:40:a0:85:f1:f9:ef:2d:51:68:3e:
                    0d:73:c3:f7:6e:fe:98:77:9c:60:13:95:ec:56:5f:
                    6c:a2:f7:c3:6b:bf:16:23:a8:85:7d:bf:19:d6:6e:
                    e4:ed:cf:22:63:7c:21:5d:90:dc:d6:34:6e:c7:9c:
                    84:cb:25:80:c4:4e:8c:a8:ac:4c:93:4d:03:39:f4:
                    05:92:fb:46:49:ba:a9:78:dd:a2:67:77:43:22:7e:
                    36:b4:8d:3b:07:d2:ff:95:8e:1c:80:9d:8f:f3:91:
                    70:01:47:8a:a3:d7:d1:f4:96:e3:9e:c9:b9:b1:55:
                    20:9c:da:c8:31:f4:90:91:52:01:f7:5c:35:8e:75:
                    d9:f1:61:76:f5:40:85:e7:1a:14:b5:a7:45:c7:7c:
                    eb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:38:89:2D:A3:64:04:87:0C:34:C1:C8:02:FB:C1:33:BC:46:39:3C
            X509v3 Authority Key Identifier:
                keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ad:87:57:c3:c8:e2:23:ca:ff:c0:75:c5:92:07:2b:fe:c7:
         b4:41:0a:98:f3:41:6d:ed:93:a6:0b:6e:82:0e:77:c9:96:a6:
         c8:1e:0c:76:41:b4:76:15:a4:f6:83:dc:5e:ae:de:86:dd:a5:
         f6:93:d8:f7:06:41:78:a4:3b:6e:fc:c8:09:8c:b7:bf:41:5c:
         2c:fd:81:76:01:54:03:0f:1c:1c:e3:a5:94:68:04:96:83:27:
         7f:8a:f0:60:28:c7:97:83:60:03:17:62:46:96:1c:8e:27:f0:
         e5:da:a6:61:03:94:17:48:1c:0b:6f:38:99:94:13:1a:f5:b9:
         03:da:82:14:f3:bc:50:a1:b4:7c:ac:37:cb:76:95:2e:ef:03:
         1b:13:cc:30:21:da:0c:27:ab:87:3a:cf:bd:34:16:bf:26:36:
         25:18:62:54:a8:0e:3d:de:99:23:6f:95:f5:cf:ac:59:b3:3d:
         0f:d9:f9:2e:4b:33:3d:a5:68:75:eb:e5:35:bc:e7:3e:2e:f9:
         94:6b:bf:ba:6d:d8:c6:0e:17:6f:c7:38:92:47:21:7d:e8:5b:
         16:17:24:2c:92:71:e7:b8:29:44:61:cc:29:15:e4:bb:7d:e1:
         4f:0a:f8:6b:2d:ba:f4:db:16:37:ff:d4:36:b6:8f:1b:66:df:
         e4:18:b8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:26:32 2026 by rpki-client