Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File:                     Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier:          l2eGfsn1mkvHnJgKjaFKeEd8n1A7Xpiw0CLIw+diE8Y=
Subject key identifier:   AD:58:52:E7:97:CC:66:97:86:17:C0:55:CB:EF:50:9F:C6:57:E5:24
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer:       /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial:       019EC300671B3E177A04D4602CE68C401D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number:          1040
Signing time:             Sat 13 Jun 2026 22:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:43 +0000
Files and hashes:         1: 62TElGWuqEvmUBYUDm2rqBVV3SI.roa (hash: ++jh63cRE49FQOgqKwdj8ZqTaSpiNnUmGEZfxLXUxs8=)
                          2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: /PQLTL6O5P2JCKy2A7tw9WaLvBJ7SikHjR3Vk49w1VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:67:1b:3e:17:7a:04:d4:60:2c:e6:8c:40:1d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
        Validity
            Not Before: Jun 13 22:00:43 2026 GMT
            Not After : Jun 14 22:00:43 2026 GMT
        Subject: CN=ad5852e797cc66978617c055cbef509fc657e524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:c8:6f:9b:1b:23:97:67:88:fb:2b:66:7f:
                    b0:fd:25:f6:ef:58:b2:c3:33:ec:81:68:1f:94:68:
                    e7:1d:27:f3:c9:49:7b:0e:48:47:01:90:bb:62:4b:
                    56:8d:06:d0:69:0f:9b:19:35:5d:31:bf:4a:03:e5:
                    bb:4c:05:4b:f5:af:ca:aa:90:c1:2f:ec:c1:9c:14:
                    ef:82:93:a4:4e:b7:27:a5:de:36:aa:79:80:4f:0b:
                    b5:53:5a:f7:41:51:eb:df:11:75:6e:bc:f0:65:d5:
                    5b:d3:27:10:35:66:e6:1c:2f:a5:a6:aa:02:f6:3e:
                    4c:6c:b5:1d:44:89:a7:ae:33:27:74:1d:f9:b1:18:
                    a5:db:20:c8:a5:1a:5c:87:f8:a2:d9:85:ce:02:c4:
                    22:dd:22:16:06:1f:42:43:d7:94:93:06:14:2e:55:
                    23:54:c8:88:08:97:e9:ea:d2:82:ef:df:e0:1e:cc:
                    a5:d8:d7:62:bd:15:b5:8e:e6:ca:ca:1b:bd:9e:9b:
                    8d:15:da:b0:43:10:a7:dd:c8:3f:c3:f9:88:6c:d3:
                    4d:1c:16:8c:15:6d:a3:27:ed:a1:c7:e1:53:f9:e6:
                    91:11:0d:53:b6:6e:03:c5:aa:cb:1f:db:ca:a0:89:
                    50:88:20:b8:eb:bf:3a:44:7f:c5:ae:c5:81:8c:cd:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:58:52:E7:97:CC:66:97:86:17:C0:55:CB:EF:50:9F:C6:57:E5:24
            X509v3 Authority Key Identifier:
                keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:61:91:b3:47:71:8e:b5:34:94:67:b9:88:49:9c:de:93:11:
         92:1b:dc:c0:91:b2:c5:4e:19:cc:ea:74:50:e2:a0:7a:1b:53:
         69:de:ce:e1:5d:b8:ce:d2:c6:a5:b1:e2:60:91:7b:bf:4e:97:
         76:76:27:94:78:77:86:7a:27:6c:e0:37:5c:b1:6b:1d:2d:e8:
         58:26:d8:1c:e9:d6:38:06:53:7f:3c:91:a2:09:7a:89:52:00:
         3d:5e:ad:47:e2:50:c8:0c:e0:33:93:b5:43:7a:d1:d9:68:e4:
         3a:f8:61:57:ad:e4:5b:ac:2b:fb:17:5e:b9:fd:7a:a2:e0:68:
         3a:2b:0b:e8:49:53:24:1e:a4:0e:6b:da:cf:5d:43:90:b0:37:
         5c:9b:7b:59:4a:87:74:13:e6:2c:81:67:07:02:56:61:88:3a:
         bf:cd:01:28:36:ba:6e:a6:9f:1e:fa:e7:a7:bf:58:9e:ab:b3:
         98:94:56:7f:59:a0:a6:1f:98:4d:e7:75:8a:9c:06:3f:e6:64:
         07:54:ae:d6:24:98:fb:a3:50:42:01:34:af:88:f4:dd:3a:f4:
         ed:65:55:f3:91:e0:a9:3f:22:90:4f:a1:2d:c8:7c:08:aa:d2:
         58:53:af:0a:30:15:d9:69:42:9d:17:50:cb:25:a0:a4:eb:d6:
         bc:9d:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:21:54 2026 by rpki-client