Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File:                     t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier:          EFiFkx8gEZYTNUCPbydIJu6nq9PBHykxwICdfzIK/48=
Subject key identifier:   7D:2D:2F:A1:F5:79:78:C8:0B:C2:89:7A:D0:39:1A:E2:38:31:BD:6C
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer:       /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial:       019EBEECE5BBC30B1C58B3CBE95DFE58A59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number:          1475
Signing time:             Sat 13 Jun 2026 03:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:56 +0000
Files and hashes:         1: 7yXVbkDIped5AlVJWBLhNwB93qU.roa (hash: U+X2A4hl4OztYccmnndX5mgP9l1pKYkV+aIE4TVtE9o=)
                          2: Lac9mI8_0GODDuYUWUFmqBSt9mc.roa (hash: CCm67OvIIp58ZZddyH8lbNoIHH7qksW59/3/CScmsJ8=)
                          3: g4mflD0Y4dFeWIYXrHeIdFF1Tzk.roa (hash: LWoE8PLWl9I6/87QZF5e3VTAa9OFMyf8LK0mAIwQhYU=)
                          4: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: hMrLExIlPyyUxCF5WhQuEocVLI4Y4RagzmfvwpLPKUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:e5:bb:c3:0b:1c:58:b3:cb:e9:5d:fe:58:a5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
        Validity
            Not Before: Jun 13 03:00:56 2026 GMT
            Not After : Jun 14 03:00:56 2026 GMT
        Subject: CN=7d2d2fa1f57978c80bc2897ad0391ae23831bd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:7a:2f:8b:6a:83:4c:5a:5d:09:23:9a:b8:
                    20:2d:56:3c:e4:48:e3:18:14:74:f4:3d:21:1f:51:
                    db:61:5c:28:ef:3c:40:3d:9a:97:b7:bd:7f:40:88:
                    bc:02:67:89:a7:94:68:04:94:da:9c:b9:02:fc:0e:
                    8f:76:71:1d:80:21:31:ee:7d:fc:6e:a4:3e:bf:19:
                    15:81:2b:4e:d8:31:94:73:76:c7:79:75:16:95:e0:
                    28:9b:d8:aa:a6:db:e8:9d:1d:30:bb:d6:9e:b1:d0:
                    4e:dc:93:24:1b:3c:83:2e:de:5c:cb:e4:8f:53:51:
                    f5:77:58:8d:14:f5:4b:8b:3d:54:e7:af:96:79:ac:
                    7b:e9:a2:7f:20:4d:57:36:ac:42:7d:77:56:c0:99:
                    cd:63:5d:1d:6e:c5:ff:46:f8:15:a0:49:c1:63:63:
                    71:19:9b:91:aa:22:46:ff:2e:67:9d:2d:c6:2c:23:
                    0a:43:78:5d:31:40:6b:f1:46:51:46:22:d5:3d:2d:
                    f3:cc:23:0c:a0:7a:51:17:16:c6:2b:69:7d:7f:56:
                    0a:69:ce:89:6b:38:70:e7:be:13:44:e7:aa:99:bd:
                    a4:7f:c1:e7:1d:16:e5:c3:c0:ce:2a:7e:86:d2:65:
                    03:77:70:a1:23:c5:df:7a:00:df:dc:77:05:91:00:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2D:2F:A1:F5:79:78:C8:0B:C2:89:7A:D0:39:1A:E2:38:31:BD:6C
            X509v3 Authority Key Identifier:
                keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:10:4d:4a:df:51:81:f8:75:82:94:28:a0:39:e5:c7:9a:27:
         42:af:43:85:7a:bf:80:29:e4:bd:e1:3b:ab:f3:a8:a7:75:8f:
         5f:be:50:eb:ab:b1:df:08:12:c6:3e:7f:17:b5:cd:9e:60:41:
         92:72:c8:47:7a:a0:67:fd:b9:3d:6e:bb:63:18:dd:37:ee:27:
         8b:42:cc:17:34:ba:db:3a:50:7c:8c:dc:31:0b:06:b7:91:07:
         d5:b8:4e:21:f8:b7:b9:ad:34:84:34:e9:73:31:99:69:ba:7f:
         4b:e8:f7:ce:73:bb:cf:fc:1c:97:c5:24:f4:e3:78:67:c3:23:
         b7:b2:f1:0b:18:98:00:bb:22:d4:18:72:df:26:35:26:bc:cd:
         e0:f1:2d:fc:81:d2:40:00:86:f9:9c:a1:a8:ee:2a:08:31:97:
         74:83:3f:0c:56:5b:f0:94:64:5e:e5:09:90:41:29:49:da:f1:
         ce:d1:69:b6:e6:82:de:d4:83:9b:80:dd:72:8c:e9:92:63:14:
         29:6f:55:81:7e:b4:53:57:1c:05:1e:ab:ae:08:9e:0b:aa:d7:
         b0:89:d3:29:64:c5:7c:38:44:9e:93:e1:21:20:bf:8e:f7:32:
         38:95:01:ba:a2:9e:90:fa:f4:d5:d2:3d:ed:e6:78:6d:a7:60:
         be:11:0b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:21 2026 by rpki-client