Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File:                     ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier:          spyYqtOwfOlk+KPjsaA+BYM7fL2731iCzqSBozV90p8=
Subject key identifier:   88:CA:BC:3D:6A:29:24:07:BE:47:4B:6A:A7:18:76:20:BC:3F:9C:E6
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer:       /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial:       019EC06E3B64906A0CC51497F0051CA2C3E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number:          1568
Signing time:             Sat 13 Jun 2026 10:01:50 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:50 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:50 +0000
Files and hashes:         1: 189oV8GncXIuUHjeoI_E8INYiQs.roa (hash: 0A49Lxa8+HmOmnCCbU77IrfpJ/mis7ETSIxuX6hEu0Q=)
                          2: T_XFNeZT8y3cvlmC-FDGyTbQPEQ.roa (hash: yPf4MjNnJsPVmh5cf0exZFQpxpGLZw774YP/hVrhXHU=)
                          3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: Yr+T+OSDqfuYlXQudQSqknKwJlZuN9PB0HeT1O/r9wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:3b:64:90:6a:0c:c5:14:97:f0:05:1c:a2:c3:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
        Validity
            Not Before: Jun 13 10:01:50 2026 GMT
            Not After : Jun 14 10:01:50 2026 GMT
        Subject: CN=88cabc3d6a292407be474b6aa7187620bc3f9ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:5a:37:cb:b4:d1:3a:d5:19:9a:49:4e:7d:
                    be:a4:62:4c:2b:35:6d:d1:23:1b:01:da:be:c2:f4:
                    f0:88:f7:c3:fe:68:72:fe:6e:40:15:44:68:8e:69:
                    4a:98:9f:e3:a1:99:be:0a:32:3f:16:1a:20:9a:e3:
                    e5:9c:ae:d6:59:5c:aa:ef:4a:48:82:d6:6d:a1:ee:
                    d0:c2:54:b5:0e:3f:ff:5f:9e:de:b8:1b:2c:cc:0c:
                    8c:14:2e:03:37:39:59:02:1f:e4:d8:be:38:5f:75:
                    a4:f3:d2:80:c1:3a:cc:c5:f8:c6:43:69:ee:6d:3a:
                    ef:84:a0:29:00:b5:df:ab:da:ab:7f:df:b2:e7:78:
                    8d:da:af:61:db:aa:51:ce:73:85:df:bc:f2:56:ca:
                    a7:8f:d1:6d:11:3e:d7:fb:d2:9e:8a:bc:9b:3f:c1:
                    5c:99:6d:53:63:56:72:ce:e3:13:2e:c2:9d:6a:f6:
                    44:cc:90:f4:ee:99:47:03:e0:af:08:12:15:3d:21:
                    46:00:4b:d3:c2:03:67:aa:a1:f7:7d:1b:d3:81:5b:
                    8e:23:9a:53:e7:fe:8a:da:4a:17:f4:54:72:72:50:
                    08:e5:59:d0:61:22:7f:3a:eb:18:39:da:85:d2:bb:
                    4e:3e:24:cb:c8:dc:c4:51:5e:57:d5:23:0b:48:f4:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CA:BC:3D:6A:29:24:07:BE:47:4B:6A:A7:18:76:20:BC:3F:9C:E6
            X509v3 Authority Key Identifier:
                keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b7:64:67:40:be:6f:32:cc:6f:40:60:64:db:29:c2:52:ce:
         de:f4:6b:8e:67:e5:ca:66:77:98:e6:14:c5:dc:f8:13:70:15:
         aa:44:d2:de:47:50:71:95:46:af:57:ce:58:fd:9f:74:e6:a4:
         93:bb:e1:74:34:41:b1:26:c1:61:18:0e:5a:c6:b2:ae:a7:99:
         68:60:7f:55:c4:08:3b:fd:b5:1a:84:25:68:27:09:2d:2e:4e:
         20:c0:3e:ca:92:a4:8e:ff:68:69:11:3f:cc:8d:a6:f0:5c:41:
         94:09:9b:c3:64:76:34:3e:25:ac:07:01:8b:2b:d8:d9:60:5c:
         d1:be:34:65:c9:42:5a:39:20:15:d1:58:a4:a3:e3:24:33:4a:
         55:a5:69:f9:b1:25:6e:8f:4f:b0:b4:38:1b:1b:af:c5:ae:f8:
         0b:e8:38:be:6a:48:ad:49:b4:e6:a0:a1:b9:e0:3b:f4:31:69:
         3a:0c:31:77:eb:ee:7b:89:9c:10:55:26:0a:7b:a7:00:63:4c:
         5d:be:7e:f3:8e:75:87:4f:54:35:31:0c:43:c7:2d:24:59:76:
         3f:3d:d3:6e:b4:2d:c9:bc:79:6d:97:c9:0b:23:e3:56:6c:cb:
         1d:9f:4d:68:d1:53:1d:86:85:66:30:ff:a6:e6:ad:8c:6a:e5:
         14:fb:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:37:44 2026 by rpki-client