Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
File:                     r22p1WtCwrgWsa5rGFElq_IVk-8.mft (raw, json)
Hash identifier:          EenCLhTAxU3oCfx05TB7kAwo3Z924QC6rYEAq6I8Utw=
Subject key identifier:   2F:65:43:1B:F9:31:B3:E9:E4:9D:7C:7A:2B:D1:7D:F3:31:EA:0B:A1
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Certificate issuer:       /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial:       019EC29240ADFBF00C26846A1B66FEBBCB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
Manifest number:          0412
Signing time:             Sat 13 Jun 2026 20:00:25 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:25 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:25 +0000
Files and hashes:         1: 3vsJC6fNuGN4-OcDnwBO6CepBDE.roa (hash: wGJI9xj8xX1LfIyL9p4tn79/tsV9eiEKpUNCD9TJPfk=)
                          2: F2aeFjJsEe0Ev-pYnuxbm8GUj-s.roa (hash: //RGqq5vbdwe1kcXBXm0ImZrQGGNEM4aNxYmS22uVKk=)
                          3: Ml1bL44N6RRHfCMhiwaHxYoFYqE.roa (hash: mv51AxdRu44rhiit2eu9uxAPSqaXVemKhG4H6GIdqJU=)
                          4: QZX4N0nFVU70Vj9ggeWrbayajWQ.roa (hash: fTLW/j3hk4V2QwQlXrG/uL9IIw5WAjCaWcGJ+gp3yXU=)
                          5: VoMhQ5y_uxLsu5nfRtG8bOviLlw.roa (hash: fnlgaHZDH37hg0Ckb563HOlkmEqGNqOIf1PdxlJVeTo=)
                          6: r22p1WtCwrgWsa5rGFElq_IVk-8.crl (hash: eZ8LYB4qkPyegB7mRbxSAdeOoETcbUE5jKtsaMmI1yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:40:ad:fb:f0:0c:26:84:6a:1b:66:fe:bb:cb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
        Validity
            Not Before: Jun 13 20:00:25 2026 GMT
            Not After : Jun 14 20:00:25 2026 GMT
        Subject: CN=2f65431bf931b3e9e49d7c7a2bd17df331ea0ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:7d:c7:02:98:28:d8:82:9f:33:68:94:15:
                    5e:d1:71:02:46:05:9a:c3:dd:02:ee:6e:3d:f3:5d:
                    48:30:6c:b9:69:a0:dd:b6:c7:b1:54:ca:85:93:36:
                    fb:89:9d:70:a2:0e:5e:11:47:b8:11:a9:70:da:d3:
                    00:9d:60:90:21:62:74:f0:c1:1d:33:aa:a4:4e:38:
                    6d:84:83:4d:e2:89:cd:cc:64:3d:8d:71:75:2e:a2:
                    9c:3b:2e:0b:47:a1:7e:8f:b7:db:ea:46:21:e0:e0:
                    54:73:d5:d7:1d:87:bd:b4:02:11:13:14:35:1b:3f:
                    51:5a:7c:b1:bd:72:69:5a:52:04:0c:f5:18:d0:cc:
                    07:b4:31:64:70:7a:71:28:d7:9d:ad:08:ca:9a:a6:
                    e3:b1:7f:d1:ba:1f:32:67:91:6c:90:5a:78:e0:37:
                    68:2d:59:53:ac:86:c2:6e:de:4c:bc:41:a0:c7:0e:
                    43:7e:19:19:37:ae:e2:d0:ca:4f:a5:a4:27:bc:df:
                    09:e8:a0:c6:e5:a5:71:b3:02:b6:ae:4f:ca:71:a6:
                    ce:40:24:a2:5c:ef:d3:b1:0d:37:32:b9:23:5e:c3:
                    ba:9e:68:2e:83:b1:64:fd:de:ec:b0:e7:5c:01:6c:
                    7b:30:4d:75:c8:89:ac:e5:3a:c7:9b:95:90:cc:0d:
                    af:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:43:1B:F9:31:B3:E9:E4:9D:7C:7A:2B:D1:7D:F3:31:EA:0B:A1
            X509v3 Authority Key Identifier:
                keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:73:94:6e:4e:6e:e7:15:47:5d:d5:96:05:7b:8d:75:73:
         23:32:93:6c:44:05:b7:9b:b1:80:5e:0b:a1:0a:c1:7c:93:86:
         43:b1:07:c2:06:00:84:2e:25:25:db:48:f3:5f:d4:46:be:22:
         f9:95:b5:33:7d:e5:48:c6:99:93:4e:7e:35:1c:65:89:2c:c0:
         35:06:eb:9d:e8:92:b5:32:fa:2a:93:0b:71:ea:60:35:17:a5:
         92:ed:21:c4:6e:2c:98:d4:9c:f4:59:64:87:a0:c6:eb:74:6f:
         b4:e2:c5:1c:01:bd:c8:b2:5c:00:d9:e4:cc:27:16:7a:9e:84:
         5c:a7:f3:dc:3b:8b:c2:38:32:04:fe:ba:71:08:6f:16:0a:44:
         1d:cd:37:8a:a7:f3:88:ae:92:55:ec:e0:79:73:d8:e2:ab:09:
         1b:d4:b4:cb:82:d1:9f:de:e5:09:86:72:98:d8:22:03:d9:41:
         49:1d:09:7a:e8:59:d5:5d:07:f4:62:70:a9:ad:de:32:c7:ee:
         9a:a5:4d:09:1c:f5:af:4e:eb:0e:8e:14:51:a4:f3:6d:d9:c9:
         5e:3c:ae:ff:a1:88:03:bd:e3:f6:c6:2e:a3:68:5a:99:72:2c:
         de:b8:ce:d1:3c:7c:38:b9:c1:f3:1f:1f:42:25:42:3d:90:e0:
         6d:00:15:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:40:10 2026 by rpki-client