Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File:                     fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier:          lj5F9xE8mja0XF9aia53kaidZQTqANAD9BaPlcJjgBg=
Subject key identifier:   F3:F2:62:37:F2:F6:7F:DE:5E:33:06:68:DD:FD:2A:AA:BF:59:8C:E2
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer:       /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial:       019EC412F6082B71485EF6C865A346811233
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number:          1235
Signing time:             Sun 14 Jun 2026 03:00:37 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:37 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:37 +0000
Files and hashes:         1: MSIj_pvmmWV611TPzznzhVyMajg.roa (hash: lcZd6Vsmhq0WpZpZ2lk/ey8tKSzoVTxP11Cj84fNRNQ=)
                          2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: Oc6czQrFLI4vHjmDj0PS3uBrSKhhGEJNg+kOH0axFuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:12:f6:08:2b:71:48:5e:f6:c8:65:a3:46:81:12:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
        Validity
            Not Before: Jun 14 03:00:37 2026 GMT
            Not After : Jun 15 03:00:37 2026 GMT
        Subject: CN=f3f26237f2f67fde5e330668ddfd2aaabf598ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:00:2e:23:80:ae:ba:11:08:3e:dc:27:c2:a0:
                    ab:f4:aa:84:69:a2:be:6c:21:5b:26:07:85:1a:39:
                    cc:12:03:5e:26:5f:c4:8d:c2:8c:56:7c:6c:76:64:
                    d4:c5:6d:a3:a8:97:33:5f:70:20:32:46:e4:b5:17:
                    1c:4f:80:4c:66:b5:16:8f:53:92:cb:ba:6f:52:10:
                    2f:bd:c3:d6:7c:02:b7:4b:af:f3:6c:b4:21:7b:3f:
                    8c:81:0a:25:5a:91:30:f5:a2:f6:f6:69:f1:71:7a:
                    28:a6:f9:75:be:97:42:b2:06:b9:fc:8b:e3:42:fe:
                    45:aa:8f:0c:0a:16:d2:b2:84:b7:3a:64:13:3f:bc:
                    6e:2b:a7:6f:ed:f3:aa:2c:22:cc:93:30:fa:8b:0c:
                    97:ff:f6:90:9e:c6:70:61:fe:ac:c3:28:08:ed:d1:
                    22:70:f3:5e:c7:84:c1:24:0f:ac:9f:db:4e:9a:5b:
                    85:22:aa:3e:ff:ec:1b:cb:22:51:e4:4c:6d:92:4c:
                    f3:b3:86:26:32:57:d8:f0:5e:68:b7:47:aa:45:24:
                    fb:e3:79:83:ea:1a:5e:ce:4e:e5:82:7d:41:70:9e:
                    48:9d:ec:35:95:9b:20:bb:1f:ec:4e:3d:f3:7e:aa:
                    22:38:8c:55:47:87:72:be:13:60:23:cb:33:e2:74:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F2:62:37:F2:F6:7F:DE:5E:33:06:68:DD:FD:2A:AA:BF:59:8C:E2
            X509v3 Authority Key Identifier:
                keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:46:49:48:bc:cd:aa:30:47:d4:96:49:66:e2:9a:14:ce:93:
         6d:6d:a5:80:7a:57:18:d5:f6:ce:79:11:71:65:b2:dd:04:30:
         f8:84:0c:f2:15:11:a1:05:8a:4a:52:e5:31:59:39:1c:75:d4:
         a5:28:94:e1:84:f3:4e:ad:10:7d:b3:b1:53:c6:43:9c:b7:75:
         8c:8b:8a:4e:8f:e0:34:21:6c:59:a8:ac:7a:aa:1e:e5:66:e0:
         38:53:4f:31:4a:0f:c2:94:0d:43:ff:7d:a2:28:c2:6b:a9:f2:
         cd:b5:da:19:d9:2c:99:9c:49:16:5c:8e:6d:2e:4b:58:69:88:
         fb:33:25:10:56:e4:8c:fc:d5:b2:d9:36:ad:4a:73:e7:89:c0:
         c2:53:31:d4:a0:88:2a:98:c0:a6:94:3b:ea:05:44:34:bb:62:
         e2:da:94:6a:0d:25:70:82:3c:2d:b7:ce:c3:37:41:4c:2e:9e:
         3f:71:75:6b:fb:cc:5a:9b:73:e5:a6:dd:17:e7:22:4b:00:ce:
         c5:ad:62:4a:b1:e4:35:a2:1d:b5:aa:32:69:4d:09:42:2f:b0:
         54:1b:5f:c1:14:c9:1e:54:da:6c:03:98:8d:f1:68:43:d2:d5:
         05:cc:c3:84:49:a1:13:98:d2:9b:82:06:8a:16:77:8e:74:23:
         9a:97:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:00 2026 by rpki-client