Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File:                     rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier:          AOrtb6GAm4Q8wG8YURseZmeNx8KWh0jAjm4Fp+v1kaY=
Subject key identifier:   D4:F7:BA:69:F3:2A:7F:E4:E7:11:7B:F1:43:F1:A7:A6:1C:63:72:8E
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer:       /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial:       019EC2C9B73D0DB4692BA7212BE52582779B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number:          057E
Signing time:             Sat 13 Jun 2026 21:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:59 +0000
Files and hashes:         1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=)
                          2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: m2B3B6pHJqi6+qm2MEoRl5GqA3fW2bjPZ0+VX3ck8ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:b7:3d:0d:b4:69:2b:a7:21:2b:e5:25:82:77:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
        Validity
            Not Before: Jun 13 21:00:59 2026 GMT
            Not After : Jun 14 21:00:59 2026 GMT
        Subject: CN=d4f7ba69f32a7fe4e7117bf143f1a7a61c63728e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:0d:9b:88:8f:36:73:84:88:6a:de:7a:67:
                    0b:46:58:f1:ae:0b:e2:ab:29:a5:e0:98:d8:7a:a2:
                    4e:0c:4a:b0:18:85:d3:3b:8a:19:b6:5d:88:9e:47:
                    ca:81:23:7c:8e:15:4a:6a:d8:0b:6d:3d:81:1b:cd:
                    64:b1:12:82:7c:c3:99:f9:6e:ef:b7:b8:59:19:18:
                    d4:7e:ef:d8:51:ea:a6:ce:56:29:1f:60:4e:13:b0:
                    e6:ae:2d:c8:6f:b5:ec:e8:1d:ea:ca:c5:c8:ce:bb:
                    e0:52:1e:c3:b9:c2:8e:90:c8:31:f7:55:36:fa:91:
                    53:51:fb:1a:1c:eb:11:25:14:8f:82:f6:14:fe:2d:
                    31:84:cf:ab:b0:da:a7:62:da:84:60:33:32:73:c4:
                    bd:ac:d9:10:70:a0:b2:84:2f:f1:d1:ce:7a:30:f8:
                    16:5a:72:72:05:47:18:36:d8:cc:55:4a:b7:d8:d3:
                    72:43:66:a8:da:10:e0:5a:98:bb:aa:cf:ac:2f:18:
                    7d:d7:c5:e9:9d:95:1f:6c:db:62:69:f5:e5:a2:52:
                    41:d6:d3:aa:8e:c9:64:00:aa:bc:d7:b3:8d:5b:1b:
                    13:6c:44:cc:0c:60:55:2d:a8:d5:76:d0:26:4b:cc:
                    23:58:01:3c:b3:66:55:bb:39:7c:83:5f:15:68:7b:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F7:BA:69:F3:2A:7F:E4:E7:11:7B:F1:43:F1:A7:A6:1C:63:72:8E
            X509v3 Authority Key Identifier:
                keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ef:1b:49:76:6c:89:6c:41:32:5c:0d:08:2c:12:ea:04:bf:
         e7:da:fb:35:1f:f0:d0:2d:bd:14:f7:15:1e:07:d4:f6:83:2a:
         02:fd:05:ba:d8:ce:6f:af:35:17:9c:e1:ff:b8:70:e0:17:c0:
         9a:a5:ec:dd:58:e9:92:ff:b2:26:82:63:74:56:02:26:5e:0c:
         3b:39:a7:b1:70:55:26:26:c8:dd:ac:e6:98:f7:e0:c9:28:e7:
         bd:6a:c5:ca:dd:5b:84:5f:c1:9c:38:69:a0:f8:58:60:de:b0:
         75:32:83:60:a3:22:a7:b1:c6:79:0b:dd:ed:c8:a8:23:4d:88:
         b9:b7:b1:9e:b9:86:a9:d6:bf:56:ca:77:dc:41:a6:77:93:c1:
         9e:9f:48:52:40:7c:f3:3c:79:73:fe:09:72:32:81:85:3d:1f:
         96:e9:e2:96:d2:05:54:35:d3:6a:08:04:3b:d6:b1:70:8e:f3:
         01:cd:72:c2:47:c5:ba:f5:3b:20:2e:c9:c0:da:3d:89:da:d2:
         10:35:b9:48:90:41:31:a1:a8:93:ff:d1:63:ce:63:99:48:d3:
         48:2b:be:03:5b:32:8a:22:20:9a:d4:5d:6a:92:ef:67:43:40:
         47:64:66:da:34:80:46:4a:3c:a9:03:77:26:6d:29:4b:3d:5b:
         7a:6e:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:04:57 2026 by rpki-client