Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
File:                     aYROE3TxxFgb-_etRjihEtMW--Q.mft (raw, json)
Hash identifier:          Hkxxh+Qhoc377oP0osWmZMtZCAyxKsmbq0eH4Ikx7x0=
Subject key identifier:   3D:8F:88:A8:9D:8B:E3:A9:50:8B:48:D2:D2:F1:F3:FD:CA:C3:72:8D
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Certificate issuer:       /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial:       019EC18024421EC43FDCD2FDC26424984348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
Manifest number:          01A7
Signing time:             Sat 13 Jun 2026 15:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 15:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 15:01:01 +0000
Files and hashes:         1: _YyM5Fz0fRt9WBEEudyzbZgfybs.roa (hash: 4qY+Fv3RexE/YICr0m64zJ0sFOUpiGhvhqq4dKDZLy4=)
                          2: aYROE3TxxFgb-_etRjihEtMW--Q.crl (hash: kVIJH7mJt3TU3xao0PrllnsE346GvmW2kSkdLpMtznM=)
                          3: rYhwjOOa4-7RvBsKuPyCuJ2kOac.roa (hash: EeI2oHDpvRTGlcgIn02601fBNayk3lM8V1SAStGUI1w=)
                          4: seE8MA1IAHQhkFxKO3DiabXwc2k.roa (hash: 3toCWdrJKeaWZ1jR0rxFlsqTNbw+YdEAy/zdrsfgu1c=)
                          5: zvV261hgmMdkR1G7Cy93JC-Zxsw.roa (hash: hneXIhVn6/jTbVYrQJSFmDE3v0R1YG1vWQx+UejdDSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:80:24:42:1e:c4:3f:dc:d2:fd:c2:64:24:98:43:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
        Validity
            Not Before: Jun 13 15:01:01 2026 GMT
            Not After : Jun 14 15:01:01 2026 GMT
        Subject: CN=3d8f88a89d8be3a9508b48d2d2f1f3fdcac3728d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8a:16:85:a0:63:19:60:e1:3a:37:a5:0d:16:
                    31:d5:f6:ca:7c:3e:f2:df:b2:6a:fc:37:ef:45:ff:
                    db:01:32:1b:ef:99:ed:7b:97:2e:bc:4b:01:44:21:
                    4a:7e:08:2e:f8:87:64:cf:e0:ed:6a:e8:e3:2e:ce:
                    f6:97:af:6e:86:40:b4:f3:6a:17:2a:96:22:4f:db:
                    35:db:a1:99:4e:7c:fc:e8:b5:19:c9:db:b6:cf:4e:
                    bb:6f:82:83:4e:4d:30:f4:5f:f3:59:a2:7a:1a:74:
                    4a:69:3f:f8:03:7b:20:43:0e:9a:d3:94:1c:50:fb:
                    4e:52:25:8a:3e:0c:4c:c3:4e:f7:04:6f:73:f4:1d:
                    5d:ef:e0:f6:06:ec:ac:8d:be:4f:2a:bf:55:2a:4a:
                    da:e6:c3:16:1f:0d:05:ad:af:33:83:32:02:88:22:
                    13:50:c3:b3:c6:cb:5c:b8:fa:73:54:e9:e0:b3:a1:
                    f5:d8:21:9e:c7:f4:b4:aa:51:1a:56:a6:d4:53:53:
                    22:57:13:84:7a:2c:8d:a0:e9:d5:48:90:c7:32:1b:
                    1d:5a:7b:89:ed:f5:1c:14:f3:a2:30:50:f9:f3:c1:
                    0e:a9:3e:9e:04:50:1c:1f:86:2d:a6:ec:d2:f7:ee:
                    23:da:6c:30:71:fe:12:f1:b6:c4:3a:16:d6:36:96:
                    0b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8F:88:A8:9D:8B:E3:A9:50:8B:48:D2:D2:F1:F3:FD:CA:C3:72:8D
            X509v3 Authority Key Identifier:
                keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:22:36:aa:24:6f:de:28:da:bf:7d:e5:60:7d:ba:cf:f6:1e:
         b3:3c:e6:f1:52:7c:b8:1d:03:93:d3:35:2c:22:43:05:12:21:
         f6:25:23:ce:8d:47:6f:31:60:05:11:7c:6b:dd:47:49:a7:55:
         88:a4:c3:de:59:4d:bf:c4:4e:c3:42:66:77:6e:e7:d3:38:35:
         62:1b:5d:eb:a6:4e:1b:fd:b9:20:8b:07:3a:f3:f6:b9:62:87:
         b1:9c:c7:4f:6d:34:0b:11:a3:b8:ee:86:47:f5:c6:6e:b4:9a:
         23:8a:64:60:13:e7:6f:5b:0e:ae:a2:a6:7b:30:cc:6f:1a:ec:
         2b:a8:4a:8d:89:7a:43:f0:8a:25:40:a5:88:1d:77:c1:1c:fc:
         c0:a2:fd:82:24:87:14:60:7f:63:63:39:eb:56:c3:be:11:8e:
         3b:ba:64:89:a4:67:14:7a:ec:35:30:d4:01:36:5e:3b:29:37:
         fc:31:e5:62:1d:60:da:be:16:8d:b2:2f:a9:8e:cd:8f:ed:d5:
         0e:21:53:ef:b8:a5:e0:04:b9:6d:43:9f:bb:ed:2f:c5:12:51:
         b0:cf:dc:d1:1a:a5:4a:e0:3c:d8:11:02:4d:68:87:de:44:d3:
         b9:de:4f:32:fb:b1:3c:b5:7c:72:24:f9:d5:ee:ca:9e:ae:a7:
         c3:5b:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:09:09 2026 by rpki-client