Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File:                     aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier:          JrgrqsYSvIoaxbxAWd9R/i6pCf7DD3OgA0X9XJry9+w=
Subject key identifier:   FE:65:25:88:BE:F1:B6:99:3C:C5:3B:81:03:BD:75:75:AD:EA:21:94
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer:       /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial:       019EC0DAAB40464DB85C32688A537B1BD9C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 12:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:16 +0000
Files and hashes:         1: 8dtgaFANkeK8huuG3p8_JsPAwVY.roa (hash: hnOGO5yhOzCse60swZYvKqiyn0VjBoHkixTNWL2xNnI=)
                          2: Prdw3L1Fwkc8ytRFu-oUK_xAQuU.roa (hash: doY6BOzth/370lmaa2UkKcv45HRXOMVWu34UaSPlsc8=)
                          3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: G2wU60teYg2AC5nhVfORGvI8UdsnJHrp5ZGJsmhMzc8=)
                          4: mQRanHoIY0IoJuE4VcyHEcinjeo.roa (hash: fBz0EC50LChidWvY4MFa5hHhW36+s8IY+jpOw7hyIu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:ab:40:46:4d:b8:5c:32:68:8a:53:7b:1b:d9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
        Validity
            Not Before: Jun 13 12:00:16 2026 GMT
            Not After : Jun 14 12:00:16 2026 GMT
        Subject: CN=fe652588bef1b6993cc53b8103bd7575adea2194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:0f:ea:fa:5e:53:d9:44:c6:12:d7:9c:03:
                    09:3f:31:5d:0d:d3:8d:91:c3:0f:e1:93:26:5e:07:
                    a7:50:cc:2e:76:15:52:8e:11:46:52:02:52:5b:fe:
                    05:1b:b1:a7:28:0d:3e:c0:4f:71:cd:68:7c:95:e8:
                    ef:91:9f:2f:97:35:e8:22:69:c5:07:d3:20:e8:bd:
                    ca:81:37:08:ee:92:78:ef:22:f2:ad:4c:a7:01:b1:
                    12:51:d8:d3:59:24:ac:89:3e:85:5c:a6:9e:6c:15:
                    0a:e8:47:70:c1:88:63:7d:a4:0f:cf:9e:6e:cf:b2:
                    bc:11:9d:fd:1a:0f:37:64:20:13:77:7a:26:d2:5c:
                    f1:f3:fc:04:64:6a:8c:1b:7f:76:2f:67:9d:dc:00:
                    00:b8:d6:e0:2e:62:13:18:01:9f:b8:aa:3e:aa:96:
                    f2:77:f6:78:af:8d:a7:aa:de:e7:7d:0d:5f:8f:c9:
                    c9:2f:33:a9:ae:d6:af:73:2e:16:ff:2a:ef:03:e1:
                    03:9b:f1:35:45:bd:ce:2b:87:4f:2a:c1:95:1d:8c:
                    8a:f0:cd:08:f3:6a:45:8a:b7:9f:72:65:d8:a4:60:
                    af:2b:1b:d9:45:29:3d:fd:1f:9e:25:5c:77:a2:4d:
                    7e:55:f5:b4:c6:77:11:ab:c4:46:63:1d:18:4c:ef:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:65:25:88:BE:F1:B6:99:3C:C5:3B:81:03:BD:75:75:AD:EA:21:94
            X509v3 Authority Key Identifier:
                keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3a:a0:c2:03:87:2a:85:52:10:b5:82:4e:f8:4e:c0:71:0b:
         db:98:62:3f:ab:71:b6:bb:17:14:3d:69:ca:d7:d4:24:da:b0:
         58:17:c7:df:dc:a2:45:e2:be:ad:a2:b3:c1:50:bc:52:73:2d:
         17:82:5d:55:ea:e0:ee:37:dd:c0:7c:f1:de:6f:e8:81:bd:1a:
         b3:10:b9:95:28:58:34:39:f6:de:62:aa:fd:ec:54:ea:17:d3:
         94:ea:66:26:4f:2e:b4:b1:59:29:8c:1d:2f:ff:04:3c:e6:d6:
         fb:87:b4:5c:23:23:6c:ce:c7:0f:0b:c2:84:48:cc:94:f9:0c:
         b0:db:a0:61:f1:51:b6:a9:20:4e:f5:87:e4:4f:74:6a:59:22:
         a2:b3:74:83:d1:ef:e9:fc:df:8d:8a:16:3a:a7:94:68:9e:39:
         b2:25:ef:41:d7:cd:79:7c:51:25:ad:15:a0:2f:c6:8c:cd:2b:
         bd:72:da:d0:74:83:d0:db:a7:1e:eb:6b:0d:93:e9:b0:8f:fe:
         89:85:a7:87:87:94:96:6a:91:b2:a1:17:ed:bd:d0:c6:e1:47:
         b4:ac:aa:27:86:dd:0a:6a:3a:e4:41:8c:d0:4c:c1:66:9e:13:
         b2:1f:cf:83:57:3c:6e:81:28:a2:f3:01:6e:e2:91:a4:ec:9f:
         ab:8e:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:51 2026 by rpki-client