Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
File:                     legTEe8dNuzG0SXjbILCb5FbDfc.mft (raw, json)
Hash identifier:          uUKy7NCbi0fqhMWG12E6mwkyeC/zWZS1VASIpaLzPlc=
Subject key identifier:   69:4B:74:45:66:D7:F0:3E:47:72:09:C0:F9:EE:C5:2C:D7:1B:53:70
Authority key identifier: 95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7
Certificate issuer:       /CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
Certificate serial:       019EC1B68F00C8247C0BE4C923604DF42CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
Manifest number:          14BD
Signing time:             Sat 13 Jun 2026 16:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:26 +0000
Files and hashes:         1: _C6lyxoQMU5yOrfGf8iAi-Sl_ow.roa (hash: p2xyfl4wigqQ6in3fdRR4OWjfDysBXxdWoA57WsF6ho=)
                          2: legTEe8dNuzG0SXjbILCb5FbDfc.crl (hash: OX/VPDHTkPZduRHkE6QM27NvH1EYl4vMgtKBz1cPBrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:8f:00:c8:24:7c:0b:e4:c9:23:60:4d:f4:2c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e81311ef1d36ecc6d125e36c82c26f915b0df7
        Validity
            Not Before: Jun 13 16:00:26 2026 GMT
            Not After : Jun 14 16:00:26 2026 GMT
        Subject: CN=694b744566d7f03e477209c0f9eec52cd71b5370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7c:d6:c8:88:f4:aa:8b:fa:ba:b9:93:6e:02:
                    23:d4:c0:26:c1:2c:49:52:24:05:15:f2:db:fc:20:
                    02:cc:74:fe:5b:e5:ae:75:cb:35:53:60:e6:7a:db:
                    f2:64:ea:2e:32:e3:19:4a:12:ea:d9:89:42:51:e9:
                    fc:b4:78:f9:85:74:3d:c1:a1:e1:f7:db:c6:7d:97:
                    d6:67:07:e2:4a:71:de:e3:39:95:6c:a2:2d:c0:3a:
                    7d:fb:86:7e:40:cd:31:dd:2c:9b:31:0c:f0:5b:1c:
                    30:32:05:94:f4:df:0b:b9:44:a1:2e:c2:70:ba:b3:
                    aa:c8:30:a3:74:df:e4:62:51:c4:cd:ac:74:0f:ae:
                    be:05:a4:b2:36:29:b3:14:af:6a:fa:d0:78:c6:db:
                    01:f7:f8:13:c9:0b:c0:e2:bd:f4:d0:65:56:10:7f:
                    c5:07:a1:52:f7:31:ae:c6:3c:3b:59:03:65:c9:d0:
                    75:70:0b:7e:0d:ca:64:53:73:a3:1b:5a:59:43:b1:
                    18:d1:73:5f:df:d3:85:af:42:bc:13:e6:52:aa:9f:
                    61:a7:c2:b4:77:ba:ba:7e:46:75:de:ae:1b:56:7f:
                    fb:32:10:ac:bd:a5:23:12:8a:ed:31:e4:b7:8a:69:
                    fb:ca:c4:28:d0:f8:05:c2:91:64:49:5f:58:bd:44:
                    98:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4B:74:45:66:D7:F0:3E:47:72:09:C0:F9:EE:C5:2C:D7:1B:53:70
            X509v3 Authority Key Identifier:
                keyid:95:E8:13:11:EF:1D:36:EC:C6:D1:25:E3:6C:82:C2:6F:91:5B:0D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/legTEe8dNuzG0SXjbILCb5FbDfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c06bc-8ca1-4091-9418-734fab6fec6f/1/legTEe8dNuzG0SXjbILCb5FbDfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:10:81:ca:be:9c:30:4f:1e:32:40:27:12:7e:2a:46:92:b1:
         20:73:6a:89:b5:9b:02:93:94:63:91:2b:75:e2:5d:bb:7c:84:
         67:65:70:76:73:81:67:7c:06:c3:93:43:63:6c:8c:73:53:87:
         93:49:d2:db:76:39:13:bf:2f:09:3d:50:7d:49:d2:b4:bf:a8:
         75:12:2c:e6:38:94:d5:36:8c:45:72:99:22:f2:70:a1:75:49:
         f5:fb:5b:83:fa:18:01:43:26:bc:b9:6b:1d:90:42:f4:67:b5:
         13:fc:55:21:40:f0:4b:0a:43:04:b4:87:52:26:b6:bf:22:d8:
         c4:5e:ce:3d:98:09:cb:41:d6:6e:32:83:7f:23:d2:5c:99:39:
         15:70:80:0a:7b:46:00:03:a6:20:9f:38:de:cd:78:c0:d2:18:
         f3:27:8a:8a:79:a2:b8:4a:ef:25:b1:9f:08:d3:f7:45:03:9e:
         25:81:fb:73:8e:d4:e3:ee:70:b2:ea:1f:35:fd:d4:49:b1:e3:
         03:9f:60:58:a4:77:cd:bf:54:4d:22:dd:f5:e5:a8:b1:94:4c:
         30:44:5c:be:e6:24:50:a8:de:6b:49:48:92:80:cd:02:cc:40:
         c8:72:44:52:e7:52:21:fd:a7:cf:98:e2:17:e0:2f:85:71:56:
         ad:6d:30:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:18 2026 by rpki-client