Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          WriB/zsA5cVT8ER9EA3EJK0OfxHg2wgNZ+fsdlcdiuE=
Subject key identifier:   DC:9D:95:11:01:C1:85:03:5D:BE:F9:BE:BC:D5:1A:F6:82:7F:50:AD
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       019EC035E75F916DF1E822C04BA90D293AD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          1962
Signing time:             Sat 13 Jun 2026 09:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:18 +0000
Files and hashes:         1: 2WzfG0V96raprl5tsrksiHfaCdM.roa (hash: cj3zFnBwwSp9dR2SjduOa1CA7OqZ5tws9MqCW7cLVIs=)
                          2: GwGQYsMzCM-acyFwRTD_V6RJb1M.roa (hash: yUvTGQ5x8/a8Em1WiCW5G1UcimmI7vXu3ljW5sL9lrQ=)
                          3: ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa (hash: 3u1jyhcVn10YQbx/gEpZqXx9qUydqj7K6pIwggoaC9c=)
                          4: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: Iq/jA/giDzesUHTeIVv1TFmKucl4EhPWOx1P2cTbOkA=)
                          5: rjeQuso8QDTQv-e8DadgkyEpULg.roa (hash: 4fHbwtCeYsUoufkC59D0UmTlBIXmN4qyj78Mnr4mr2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:35:e7:5f:91:6d:f1:e8:22:c0:4b:a9:0d:29:3a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Jun 13 09:00:18 2026 GMT
            Not After : Jun 14 09:00:18 2026 GMT
        Subject: CN=dc9d951101c185035dbef9bebcd51af6827f50ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:e2:fb:9d:38:d6:16:f3:94:87:7a:55:1c:
                    60:a7:b6:c7:4b:94:a7:ba:33:59:da:7b:85:cc:78:
                    b6:8a:c6:96:06:5b:62:86:f7:b7:40:6d:0e:21:dc:
                    25:3f:82:51:f4:1e:2c:7c:a1:9b:c4:d0:25:82:9c:
                    e6:6e:17:8d:b9:f1:c5:98:45:f6:c7:66:0b:13:88:
                    20:ab:1f:07:e0:6f:7a:d2:ab:fc:19:81:5d:96:de:
                    4b:5a:dd:02:03:b7:92:3c:88:d4:a1:b0:e3:ee:bc:
                    bd:be:fb:7c:53:a2:78:f8:cb:81:d7:04:f9:74:94:
                    3c:8e:82:6c:ce:fc:be:72:e3:24:3a:96:44:d6:c8:
                    98:fb:5a:41:67:6c:48:73:c2:f9:0a:5e:1f:08:b7:
                    09:61:dc:9a:ec:dc:a4:e3:d8:bb:40:bd:8a:f8:de:
                    39:74:b4:fb:07:00:ac:96:00:4c:30:1f:78:f1:6b:
                    25:7b:d9:49:93:0a:b2:68:b3:9c:ae:1d:9b:bd:2a:
                    0d:b4:bb:bb:50:1e:b7:d1:4a:66:76:20:07:23:02:
                    14:28:72:12:54:67:4a:0b:73:1d:d4:ed:8a:65:d3:
                    8b:43:09:8e:0a:81:3d:e8:82:ac:1d:c3:39:48:19:
                    b4:61:15:52:0f:96:3b:b9:c4:69:b0:05:dc:ab:e4:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9D:95:11:01:C1:85:03:5D:BE:F9:BE:BC:D5:1A:F6:82:7F:50:AD
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:21:c6:c7:6c:3c:64:3b:05:81:d2:76:f6:6d:00:1c:68:47:
         f8:b9:ce:2d:ea:8a:b0:8b:c7:e8:93:79:ea:50:66:4b:65:de:
         34:44:14:d0:2d:58:1f:4a:70:d9:3c:76:47:d5:43:40:44:8c:
         33:2d:b0:3d:d7:98:92:e4:b1:9c:96:e9:9f:db:26:b8:8d:93:
         2f:1a:41:56:27:fe:dd:e0:7b:a7:71:23:5c:85:25:a8:4e:99:
         6c:97:55:86:58:26:fe:6f:64:ca:06:c8:6d:2f:20:25:d5:29:
         87:32:5f:b9:cf:98:ef:1f:d7:02:cf:14:a6:4e:2b:6a:6c:8e:
         3f:3f:28:44:61:58:f9:90:68:3f:17:59:2c:79:74:eb:db:c5:
         d2:63:42:bf:e5:f1:3f:58:82:67:04:af:95:24:f6:6d:7c:ff:
         91:8b:5c:89:70:de:45:90:0d:6f:0b:4c:af:91:68:fe:89:55:
         5b:65:b7:5d:a7:62:cb:07:12:de:b7:a0:c9:ba:5d:fc:ff:b6:
         8a:e7:98:1b:42:eb:f0:a9:18:41:e9:94:a2:fd:37:39:b0:d6:
         0b:f3:08:67:c9:95:08:cb:7f:c1:2c:84:dd:e3:26:6c:02:4f:
         8a:81:fa:9c:70:a6:c3:70:cd:e1:96:30:35:a4:67:96:79:78:
         2b:2c:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:20:57 2026 by rpki-client