Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File:                     f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier:          oo8t0wm+Xma9GHTbBQCRKtbP1BwZKM7HWu6e4amw3MY=
Subject key identifier:   24:0D:AD:7C:D5:0B:9B:BF:DC:CE:90:41:88:68:9B:12:16:42:E8:7E
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer:       /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial:       019EC1121346015590C9914659277363E4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 13:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:47 +0000
Files and hashes:         1: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (hash: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ=)
                          2: 3kbw1gEBJPgdXB0IaWihDI9SnkY.roa (hash: wc+w33BWiYv9rEBwRELoelpcxbBZ5Kq+Pp0M0nU7gkg=)
                          3: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (hash: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k=)
                          4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: E/VUNZ8A3fjEYEbNPneUtYsTcrYAZADo3pZ6GTD3oQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:13:46:01:55:90:c9:91:46:59:27:73:63:e4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
        Validity
            Not Before: Jun 13 13:00:47 2026 GMT
            Not After : Jun 14 13:00:47 2026 GMT
        Subject: CN=240dad7cd50b9bbfdcce904188689b121642e87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:5f:8a:1d:d9:35:15:50:7d:f3:cf:0e:d9:
                    c1:2d:49:2c:9f:2f:6d:3d:65:8f:18:85:aa:77:9a:
                    7c:bc:62:10:52:7b:7d:24:04:c1:cd:ac:ff:7d:2e:
                    c0:8c:bc:78:14:cd:67:82:3e:25:0d:16:ae:66:8e:
                    af:83:6e:07:0f:36:15:ee:e6:ca:56:6e:50:5b:18:
                    e6:7c:ab:b7:e5:3a:3f:66:c1:e9:c1:4f:44:79:bd:
                    7f:61:1a:c6:4e:77:58:26:63:6c:9a:09:3c:a5:57:
                    a3:f4:b0:02:b1:9c:0e:7b:65:84:19:19:5e:c5:a3:
                    7f:43:0c:91:1f:7e:88:20:ee:d1:4e:25:7d:a8:7d:
                    69:52:92:f5:c9:e0:fd:70:de:cd:74:89:cc:4c:1f:
                    6f:7a:17:98:91:36:17:a0:6d:23:14:4d:57:64:fb:
                    f5:c2:81:e2:72:81:ee:7e:ea:9e:5f:5c:ba:cd:51:
                    26:fc:dd:a0:e7:9a:59:2b:0c:57:25:2c:6d:a8:54:
                    f2:4a:6a:9f:16:81:3c:87:91:5a:12:d4:5e:11:03:
                    52:54:c7:dd:60:48:16:dd:8b:49:79:e4:b1:46:fa:
                    4e:2a:ce:29:e1:f3:2a:20:6b:5e:0d:b3:82:02:92:
                    15:ed:92:7c:b1:b9:53:a7:95:20:4e:b2:e1:ad:78:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0D:AD:7C:D5:0B:9B:BF:DC:CE:90:41:88:68:9B:12:16:42:E8:7E
            X509v3 Authority Key Identifier:
                keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:41:57:4b:9b:ba:4d:a9:29:97:eb:52:15:6b:1c:d6:f4:49:
         43:df:b7:78:2b:7c:c1:69:cc:f4:7c:c4:fa:45:1b:fd:6c:e8:
         e4:4a:d4:0b:49:31:de:ef:ba:5e:41:4d:be:77:95:73:2b:76:
         33:e6:42:05:36:02:a4:99:d4:f7:75:50:fb:82:01:3a:e5:be:
         a0:56:4a:70:80:13:f7:5b:28:30:66:c2:af:e3:9a:25:33:ee:
         af:83:b0:61:93:b7:3d:a1:18:29:fd:00:82:a5:c4:c2:d8:36:
         c5:f5:cd:8e:0c:f3:60:b4:b4:6e:74:88:de:af:43:d2:ef:ab:
         be:9e:ff:03:06:a0:d6:4c:f4:d5:79:7a:f8:18:74:ec:f9:18:
         71:b0:ad:48:de:79:ae:84:d9:eb:ab:c7:33:30:2c:19:a3:5e:
         23:68:9c:62:4c:5c:24:7d:d7:98:c6:2c:03:06:9b:ba:2a:c0:
         07:42:cd:c7:ae:0c:28:e1:0b:4f:25:94:ef:40:fe:8c:d1:56:
         c2:7e:be:1c:87:43:db:3b:d7:cf:ce:82:06:55:41:9c:5f:cb:
         5f:27:21:23:a6:35:0b:65:d8:0b:19:96:b0:f7:62:69:2b:b4:
         0c:d4:a0:3c:58:0d:a9:82:e1:6c:a3:b4:ed:63:03:c5:24:c4:
         35:43:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:53:59 2026 by rpki-client