Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
File:                     preJsy4W6d0vcFExGdx36mH_Hgk.mft (raw, json)
Hash identifier:          gtmcrBBodjidrC5imlORsWGslppWS9/GvAfe3FziFdM=
Subject key identifier:   80:DB:1E:D4:C4:58:DD:E3:26:B6:F0:42:02:8D:19:E9:78:10:B8:34
Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09
Certificate issuer:       /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
Certificate serial:       019EC0A3F7BD303EDE8A01C0F9A57A050306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
Manifest number:          17E1
Signing time:             Sat 13 Jun 2026 11:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:31 +0000
Files and hashes:         1: 8P6X0x59C3VckILV8m4M69IldqE.roa (hash: QOXkZ9qVgfqH0XpMQGh9X+mEF5OYLP10GuMRHcWRTjE=)
                          2: QCuKQCl6KP2estrIaG6k5Uc81F4.roa (hash: cBmWMEy/zwB8Bt1wF3nlzEol1nOu9jM3rhWTCCMjNfY=)
                          3: YzkQZIuWtNFelhNpi4EnHDyBQJU.roa (hash: 7C0rYIhC0IdYSE2/clMiQQwJ66KGMZ1ByQiGiFH5l9s=)
                          4: _e5AZzGVltklRadfv-MK2ei60tQ.roa (hash: eZnnL/QqgvT71AWN7mEZ0+pU5MPgz24zK984iwP+gE8=)
                          5: preJsy4W6d0vcFExGdx36mH_Hgk.crl (hash: GUzKDF0igHXoxSwNthh1qaKi64vupctH59JqhuAELHg=)
                          6: zih4pEofMsc0PfEmVcpJbSHS8Vw.roa (hash: LBA2zilX1jjETkANtyysp3KbVjSb0vGJ+k7nTqc9Wjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:f7:bd:30:3e:de:8a:01:c0:f9:a5:7a:05:03:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09
        Validity
            Not Before: Jun 13 11:00:31 2026 GMT
            Not After : Jun 14 11:00:31 2026 GMT
        Subject: CN=80db1ed4c458dde326b6f042028d19e97810b834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:fd:0e:bb:3f:bd:e9:03:b6:b4:8f:ac:54:
                    86:e5:e2:18:94:17:11:d0:18:81:9c:93:f6:67:f9:
                    6d:49:31:e3:49:19:23:0f:2f:ab:12:b8:1c:7c:91:
                    6c:16:4a:9f:65:bd:77:c2:76:81:ba:47:8e:55:3a:
                    cd:05:2a:61:52:78:0d:97:91:dd:cb:9c:cc:98:7c:
                    69:58:07:36:38:da:93:3d:ae:3d:9a:2f:4f:c0:bb:
                    22:05:f4:8a:c6:b0:56:a5:18:ac:8d:6d:ab:9b:f2:
                    b3:cf:47:88:73:dd:2d:d1:5e:de:1a:0b:6b:c7:d4:
                    13:a5:32:23:de:21:2a:f1:e5:48:47:12:d4:08:fd:
                    4e:15:3f:63:12:66:c5:e2:ce:26:86:47:e6:40:5f:
                    88:d6:9b:bb:37:67:53:b6:ed:dc:65:71:bf:dd:fe:
                    3a:6c:a8:8e:43:45:19:38:09:a8:44:55:19:1d:08:
                    b2:a5:8f:73:3c:17:d5:45:84:06:6c:94:2e:49:c1:
                    fb:e8:59:70:12:e2:d1:7e:4d:2d:7a:a9:17:be:71:
                    fb:e0:de:fe:c6:42:41:e8:3a:45:6a:fb:18:89:cb:
                    c5:92:83:88:e7:00:1e:38:2c:1b:fb:fc:7c:8f:55:
                    6d:29:8d:92:03:26:ac:9d:2b:21:f9:42:7a:7a:d0:
                    4b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DB:1E:D4:C4:58:DD:E3:26:B6:F0:42:02:8D:19:E9:78:10:B8:34
            X509v3 Authority Key Identifier:
                keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e7:21:d9:16:1b:90:ef:41:94:0a:9f:a0:55:11:86:51:46:
         ad:a2:3e:53:c0:54:89:65:8b:ff:83:35:a0:7a:0d:0b:2d:07:
         ae:3f:78:52:47:5a:cc:f3:02:6f:11:c5:e4:4d:c8:67:c3:74:
         11:4f:c7:98:9a:84:aa:36:62:73:dc:dd:bd:aa:40:36:db:bd:
         e9:32:b0:63:0f:40:d9:ac:4e:4c:20:dd:5d:ad:ff:81:80:4a:
         8c:18:f3:c5:a6:c4:f2:de:0d:02:a5:d8:6c:ca:6c:26:5c:d6:
         c1:85:a9:95:ca:10:5f:2c:fb:4e:c4:2e:16:b0:02:88:aa:08:
         af:26:4f:97:36:ec:a1:d5:61:b7:d5:a0:b4:a7:1f:9f:ab:c0:
         b8:f6:81:47:a0:af:73:76:dd:42:c6:48:bf:9c:f5:32:e6:ec:
         a7:9b:65:5c:a2:28:ac:08:9c:d3:cd:66:03:38:3f:b9:14:25:
         c2:cd:19:87:0f:85:09:65:7b:fd:ca:5d:0a:46:ab:ed:fb:8e:
         04:be:2a:c3:e9:6d:72:85:05:42:ce:12:5f:09:a9:c9:e2:c3:
         7b:b0:97:aa:b0:76:65:3f:9c:e7:7a:af:11:01:b3:6f:55:45:
         b3:36:07:e1:ec:fe:80:d7:3b:d7:95:ee:3a:64:c0:a4:8f:bd:
         90:63:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:46:00 2026 by rpki-client