Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          qzOagL5RPeNXEBoErrWOx+dZUNBnvhgVo4WYtSyTuYI=
Subject key identifier:   24:7A:06:73:F4:EE:4E:2F:DB:C7:8F:CD:0D:0A:13:4C:22:56:7F:57
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       019EBF23A8EBAC26B75AB5CE52F019C3E662
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          07BE
Signing time:             Sat 13 Jun 2026 04:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:45 +0000
Files and hashes:         1: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: AM4vLyVTmuZE+hJTxp3DkO26EAkk9huvdw13Tu3dbd8=)
                          2: dksbh_tx3bU5Ok0WztbuReiYrpU.roa (hash: NSSCxFWQG/xHAi2bn2Rv8MYwRip8Bj4kZ82RJfLw3As=)
                          3: gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa (hash: D7tJT81Ih/7yE0Ex5L+2xy+fHBPkeGvPOLXrDK+WOqg=)
                          4: miAb-8PhHCi43bUCI_hLnwDESQM.roa (hash: R+HHUuhd28D1d5kF4bYGuzan7r+ujmUekbJUkPeHQ9U=)
                          5: vrN1ckiG11RIjmLBs3NUdn3vLXw.roa (hash: r1+gve8otRlqQvYmhKMUDpHufcQSUz4Vi42HDaDr78E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:a8:eb:ac:26:b7:5a:b5:ce:52:f0:19:c3:e6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: Jun 13 04:00:45 2026 GMT
            Not After : Jun 14 04:00:45 2026 GMT
        Subject: CN=247a0673f4ee4e2fdbc78fcd0d0a134c22567f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b1:45:8e:c9:e9:c7:e6:35:ab:84:47:88:3f:
                    38:2c:41:cc:68:16:ec:c7:f9:13:43:71:a6:ab:4f:
                    e0:37:49:04:34:aa:b3:6b:c0:3e:e7:61:92:95:08:
                    84:ee:d4:a2:ff:8d:df:47:66:13:e0:21:54:a7:43:
                    b5:27:e5:14:a2:11:52:41:a8:a0:08:46:a0:69:53:
                    66:8c:d1:dc:3f:86:15:29:a3:3c:e2:4b:98:58:ee:
                    73:bc:91:b1:fe:6d:f7:d2:38:4e:0a:db:ea:66:6f:
                    d0:d1:ca:84:71:90:bb:77:62:20:6c:88:1f:4a:a4:
                    0b:b4:02:c1:34:ce:6e:31:7b:ae:ef:04:f3:05:15:
                    4b:83:bd:11:7c:4d:40:f6:f4:1c:6d:6f:fa:b2:b3:
                    58:98:86:ff:6f:c5:3b:b6:bd:00:64:1e:3a:31:82:
                    ca:d6:16:1f:ce:18:5c:ed:a9:74:68:0e:3f:e0:e8:
                    c4:83:0f:31:5c:81:ee:27:c9:be:ca:f6:2a:5f:c5:
                    b3:ff:13:64:a8:02:fd:66:e4:db:50:23:f6:34:ec:
                    01:bb:21:e7:73:67:98:bf:38:a3:11:6f:5f:91:49:
                    f4:a3:39:ba:f3:97:82:e9:d3:74:dc:4e:f9:7e:18:
                    3d:25:81:c1:04:50:7d:04:b6:5a:92:64:a3:ce:27:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7A:06:73:F4:EE:4E:2F:DB:C7:8F:CD:0D:0A:13:4C:22:56:7F:57
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:41:b1:42:8b:9c:58:08:30:4d:f1:cf:27:13:b7:04:d7:2b:
         11:7d:bf:16:43:d1:f1:ca:0d:f7:6a:5f:c0:5b:4f:cf:a3:ee:
         22:39:f0:d4:3e:04:25:f0:20:b0:09:dd:2e:a7:70:ae:49:75:
         e8:19:1a:8c:3b:cc:5b:a5:fb:eb:ab:31:69:25:5c:08:17:6c:
         93:d3:3a:25:f0:28:32:c2:c3:46:c7:25:1d:4e:61:a0:b5:61:
         ad:21:1d:98:b4:42:b1:2f:21:cf:b5:af:4e:7c:42:69:a4:be:
         23:df:69:57:5e:30:24:b6:c2:5d:70:a0:a2:e0:a8:58:0e:bc:
         98:db:28:7d:eb:66:4f:06:da:6d:52:8e:be:38:e3:a2:9f:ea:
         08:5b:ae:84:c9:81:b7:ce:0f:15:9e:f9:12:18:5e:27:22:4c:
         f3:9d:51:c6:73:c5:4a:64:a8:55:d8:69:4b:75:fe:0f:9a:43:
         ce:89:15:2f:6a:ad:d9:5b:40:2f:37:99:78:aa:90:91:bb:12:
         07:ef:0c:56:24:83:be:7d:b3:c3:f8:24:b3:ae:7c:0e:df:db:
         a4:1c:70:4b:3b:68:7b:60:ad:dc:74:3d:b8:a2:89:68:b3:45:
         2f:08:38:12:73:28:a6:9d:71:43:58:72:82:8c:4c:e5:f0:b2:
         65:6b:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:15:30 2026 by rpki-client