Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
File:                     564DMp48D3Pqg_tjfKIK7OFqjrQ.mft (raw, json)
Hash identifier:          0hFF1zeHAE4QPREER9s2gWsOoRh3d/s3G9/WWKV8bPM=
Subject key identifier:   6F:07:2E:A9:62:38:0B:1B:1C:82:34:40:E9:04:4D:0E:2B:29:A0:02
Authority key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Certificate issuer:       /CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Certificate serial:       019EBE11286C81EA4F916DDD7F2413D64D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 23:00:55 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:55 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:55 +0000
Files and hashes:         1: 564DMp48D3Pqg_tjfKIK7OFqjrQ.crl (hash: 0x8+cx+iv26itfzE1NEk5ioV7CVdP0jvkhlhVtsw5u0=)
                          2: MpJSn9TWRwhS5zTd8KOd_dUj3X8.roa (hash: 3l8Y3glur9khayrgDEUAxZoVQurQKRMAgC985VKxnJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:28:6c:81:ea:4f:91:6d:dd:7f:24:13:d6:4d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
        Validity
            Not Before: Jun 12 23:00:55 2026 GMT
            Not After : Jun 13 23:00:55 2026 GMT
        Subject: CN=6f072ea962380b1b1c823440e9044d0e2b29a002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:ef:6b:65:22:e4:ec:13:71:0f:83:b2:c1:
                    9a:7c:24:f3:7f:dc:4b:46:7d:8c:68:fb:02:8c:df:
                    ef:7b:c2:cd:93:c5:44:01:d0:d3:24:82:0b:23:71:
                    ef:06:9d:da:ae:12:2d:bf:3b:98:aa:9a:00:24:5d:
                    82:5d:90:8b:b7:a5:28:ab:c3:7f:1a:96:4b:49:01:
                    95:d5:99:5a:f3:96:3c:ae:d4:2a:bc:e0:8b:e9:e6:
                    51:6e:9d:bf:92:a9:34:d1:76:74:a6:b9:2d:8a:d4:
                    59:84:0d:cd:dd:99:7a:99:40:6d:d1:24:b2:60:43:
                    5d:21:c6:26:e4:6a:cb:59:a9:8c:96:46:49:c7:ec:
                    39:f0:38:d4:cc:02:52:d5:d3:e5:a2:7a:09:94:eb:
                    26:a0:28:fd:61:c6:9f:99:fe:cb:73:1f:82:93:bf:
                    4a:38:47:89:c5:22:97:d8:34:f0:b3:51:af:67:2c:
                    11:57:68:5b:69:3b:b4:a9:f7:10:fe:f9:8d:36:f1:
                    4c:a8:c4:a5:4b:85:dc:0b:e3:13:e0:84:83:e3:ba:
                    0b:1a:7f:1f:50:54:ae:eb:15:0c:4b:61:3a:78:14:
                    9c:1e:69:79:1d:cf:d6:c1:ab:51:49:8a:f0:95:4a:
                    5d:59:c4:50:ce:ad:c8:7f:fe:c5:cb:6c:2d:64:37:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:07:2E:A9:62:38:0B:1B:1C:82:34:40:E9:04:4D:0E:2B:29:A0:02
            X509v3 Authority Key Identifier:
                keyid:E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:7d:48:93:ca:94:08:82:5a:12:e1:c9:8a:39:88:9b:53:
         44:dd:71:f9:a0:33:ec:7b:f7:7e:84:c0:8c:17:11:5a:28:62:
         9d:a5:3b:90:6b:2f:14:b0:81:21:1e:a4:40:3b:87:60:92:ba:
         17:ca:e1:59:2d:be:e2:22:aa:ca:28:c2:d9:f3:1c:04:ac:8f:
         e6:13:a2:e1:ff:6b:4e:91:5a:db:1a:d2:e8:e0:62:23:18:66:
         d8:28:44:e8:97:aa:e3:98:7c:82:77:0a:3d:96:83:d7:0d:65:
         73:6e:0f:09:86:0e:58:52:44:70:9d:88:4f:12:9d:a0:e8:0b:
         67:bb:69:35:ef:57:1c:b9:75:a4:67:40:9b:cb:5f:a0:ad:24:
         15:87:8e:94:4a:1a:24:3b:9d:46:f1:98:d9:04:54:74:aa:85:
         a9:1a:de:91:76:6c:fb:f0:30:ff:10:c0:f2:42:4c:45:d1:b3:
         d1:9c:64:ca:28:6e:67:2a:b6:92:d5:3a:5b:64:d6:c9:e6:6b:
         7a:c8:f9:76:a6:0b:0b:96:97:4e:1c:6d:81:47:e0:34:fb:d3:
         27:2d:72:a9:39:06:c6:6c:eb:dd:88:84:46:ef:95:76:7d:27:
         af:a0:37:6c:0c:37:e0:61:69:6d:13:62:40:f2:1a:3c:74:24:
         08:82:cd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:07 2026 by rpki-client