Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          DmmfaLA/UsyX/ahQ5M6lGn0ulyJbeih8i7huV4kGi3o=
Subject key identifier:   46:5A:1D:0B:2E:A8:00:0E:39:D7:44:37:D8:D7:13:80:6C:C2:35:8D
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       019EC1B6DB278C8F758F86B0FE8711AACA9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 16:00:46 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:46 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:46 +0000
Files and hashes:         1: BhiORD-UuUDBrhyIYI_DoUYPlI8.roa (hash: JTlV8Y8e4tmlDr8mHk2b5u6aD2TaQXFvARgJc495HDg=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: gscSKSQOLVMC6YMJa72ug/znvlOW6LKL8TqMRjRGblo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:db:27:8c:8f:75:8f:86:b0:fe:87:11:aa:ca:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: Jun 13 16:00:46 2026 GMT
            Not After : Jun 14 16:00:46 2026 GMT
        Subject: CN=465a1d0b2ea8000e39d74437d8d713806cc2358d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:cf:6f:8f:b4:b9:a5:b3:bf:10:60:5e:d3:
                    d7:30:3b:ed:eb:e9:a3:25:8c:4f:86:aa:b2:15:94:
                    c2:ed:cc:62:a5:96:34:06:2d:ce:aa:88:a1:82:b1:
                    6d:7c:7a:f8:ff:c2:2e:73:e7:24:dd:b5:47:9e:a9:
                    10:85:92:0c:89:7a:cf:40:02:7d:55:26:a2:41:6b:
                    16:4f:47:10:5d:e6:4e:af:25:80:3d:30:84:ae:6d:
                    85:6e:36:0e:0d:dd:69:9a:0e:3e:d7:89:0b:d7:05:
                    61:a9:80:c1:7a:be:7f:b1:bf:84:ab:a5:d5:48:de:
                    87:15:d9:24:ed:24:25:95:7f:75:4d:ae:be:f0:ea:
                    e1:96:8f:23:22:59:50:5c:77:92:e2:66:bc:e8:77:
                    f8:d6:dd:10:56:ac:f4:85:3e:04:68:bd:6c:87:c9:
                    9f:85:ec:40:2f:36:85:d3:9d:4d:90:83:57:82:3e:
                    88:71:ba:17:25:44:9b:12:6c:87:f0:1b:6d:66:57:
                    04:7f:cd:c5:ff:d8:f1:e7:93:43:41:58:6f:4c:4d:
                    89:b9:77:c2:fb:0c:17:e2:45:08:86:92:12:af:a9:
                    7b:94:74:f9:5b:d3:9f:f2:6d:96:8a:32:c3:51:50:
                    ce:07:b7:ed:00:c6:bd:2a:5d:66:4d:6f:db:5c:29:
                    26:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5A:1D:0B:2E:A8:00:0E:39:D7:44:37:D8:D7:13:80:6C:C2:35:8D
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:72:27:82:ed:63:1b:be:03:04:06:9c:69:66:8b:60:81:f7:
         6c:72:20:e7:74:2d:5f:a9:9d:79:97:90:e9:29:81:34:71:10:
         5f:9e:f6:b8:8c:6e:e8:76:62:7a:49:6e:f0:32:3d:f2:05:94:
         76:5b:b2:89:32:41:22:f6:d3:77:f6:6a:8c:95:0c:47:d1:cf:
         77:41:fe:60:66:03:a4:e1:c3:bd:5b:bf:f0:11:17:34:26:e3:
         90:67:d1:9a:89:8b:97:3f:24:89:90:74:72:b8:29:c5:79:de:
         1e:19:95:60:f1:15:40:88:16:27:99:9d:ff:e0:97:67:1a:b6:
         df:eb:e0:50:dd:cf:63:3b:6d:dc:3f:69:e4:7d:c6:65:88:6f:
         61:49:16:03:c1:56:d2:f8:d5:80:bb:46:ad:84:e9:36:60:3c:
         4e:78:49:5d:fe:18:37:75:02:b9:5c:cb:a8:45:80:e2:6d:56:
         41:90:7a:14:e3:cd:ca:3a:d6:31:34:36:dd:28:54:03:35:99:
         6f:75:cb:e6:95:e5:ef:f1:20:d3:e8:f2:a7:38:1b:ed:20:e2:
         35:0e:65:13:50:90:0f:ad:6b:74:13:24:b9:05:0f:7a:ed:f6:
         b0:fd:b1:4b:74:29:31:af:30:30:45:da:a9:bb:fd:86:a8:4d:
         c0:36:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:50 2026 by rpki-client