Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
File:                     7600TrX36x3uS4-ENftbnYdmPp0.mft (raw, json)
Hash identifier:          qTZ3FIAtNXMITRxyzB9ylehFlERqi6gT9LDKl3IM/Es=
Subject key identifier:   52:9B:20:ED:36:D4:83:4E:52:02:95:B3:24:81:A1:F3:40:1A:44:6A
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Certificate issuer:       /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial:       019EBEB5F0C8669B8DE9B34A7F952101164E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
Manifest number:          10AB
Signing time:             Sat 13 Jun 2026 02:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:55 +0000
Files and hashes:         1: 1VnFGcI4lMW95tGBTwDRFM5XOI8.roa (hash: vZ7lvQeLjFSaL958RDDyvWUa5I5ODsDBROTDuc6puQU=)
                          2: 7600TrX36x3uS4-ENftbnYdmPp0.crl (hash: 2LDrJI+xSs6lUayTqfFNsaGc3+iqMGR9EdlJxsMz5wY=)
                          3: 964LELy2stqCoYD99B0rvUPIxLE.roa (hash: cUgAR2ekMUeiHx5IYdH/7/0z9V4+c7ULEuUWIDkNY1I=)
                          4: NTOKxZSEQdmFFOX7bCsv4r0G0ew.roa (hash: rTzaWCrN7/PGI/tGitbdR8zCYLNID56tT4jNL15qESI=)
                          5: lQ47t4cinUX2Zd4lU-kVod80YBY.roa (hash: 9fN+vypDbYHdWtZGhrsCb1aCBdMbisC6WmQVwPJJbhg=)
                          6: vTbTYAIYT2eZUJb7TkwsnY2su-s.roa (hash: q1fiFZBvw+bZgutEKtCfyXhHllS8RfutEfOzQXScNMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:f0:c8:66:9b:8d:e9:b3:4a:7f:95:21:01:16:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
        Validity
            Not Before: Jun 13 02:00:55 2026 GMT
            Not After : Jun 14 02:00:55 2026 GMT
        Subject: CN=529b20ed36d4834e520295b32481a1f3401a446a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f3:1f:4d:20:b5:0d:3c:42:8d:69:96:64:f9:
                    a7:06:d5:69:0d:14:96:19:81:bd:83:cf:cb:d2:66:
                    b0:31:33:2b:bc:61:8b:aa:33:e6:fe:bf:17:48:2b:
                    c3:28:4f:43:bc:71:ec:04:6f:e5:c0:c1:ef:a3:fd:
                    b8:46:e3:b5:68:b5:08:84:e0:69:1f:70:c4:d6:4e:
                    37:5a:23:3c:20:55:f3:cd:86:fa:1c:b5:87:2f:d7:
                    45:26:84:94:23:a1:2e:4b:e8:1b:ef:52:b9:d3:c9:
                    12:38:5e:13:90:9b:71:02:6d:41:19:fc:75:c8:ad:
                    8d:12:fe:ad:e8:62:a6:47:26:ec:07:d7:93:b9:1b:
                    31:fa:00:7c:35:e7:d5:fb:ea:82:17:f9:d2:b5:9a:
                    d5:73:16:1a:84:6a:6a:ac:a2:03:e1:cd:3d:d0:45:
                    b9:a4:88:a5:5a:29:27:96:8f:db:4a:0b:7d:fe:3d:
                    6a:cf:0b:3f:53:82:46:95:51:cf:a5:ea:af:17:68:
                    8c:cb:dc:4a:f6:22:58:29:5f:b4:b1:59:d4:92:43:
                    62:cf:c7:79:14:d1:91:1a:16:95:cb:de:43:f5:99:
                    1b:5a:5d:09:7f:ec:f9:a1:e1:7f:da:6a:51:26:da:
                    df:19:7f:0f:4c:01:86:76:bf:30:4b:5c:5e:aa:f5:
                    d4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9B:20:ED:36:D4:83:4E:52:02:95:B3:24:81:A1:F3:40:1A:44:6A
            X509v3 Authority Key Identifier:
                keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:7c:01:ba:f9:d2:7d:63:7f:c4:36:96:85:93:68:1b:b7:a2:
         6f:0a:da:e1:17:f4:be:84:b7:39:36:47:1a:a6:b9:6e:7e:e5:
         75:30:eb:af:f0:c9:0f:ca:9f:23:8c:e6:7e:0d:4f:e0:26:70:
         d8:08:07:54:22:9c:58:24:39:35:86:87:db:a4:8f:da:15:59:
         9c:43:b5:43:e0:35:5d:68:a9:8b:6b:58:fb:96:73:18:02:84:
         29:6d:e6:0a:59:c1:49:6c:69:87:7f:83:63:9d:a5:4d:b3:01:
         0b:a0:1d:62:09:68:04:36:8f:e9:78:2f:b2:16:54:1b:89:17:
         4c:f5:27:46:7b:51:86:ab:65:38:11:70:b8:50:dd:01:8b:4e:
         2e:cb:3d:87:60:d5:57:74:c2:fc:1f:a9:7f:09:d3:cc:a3:a7:
         2e:d1:21:03:6d:e9:56:19:19:c5:98:40:a5:d9:a6:e5:a2:e8:
         0e:93:66:62:56:d3:09:4d:7d:01:62:72:c9:17:0d:15:3c:a9:
         b7:dc:05:76:14:86:56:04:66:85:1e:44:c4:cd:b3:e2:b8:79:
         1e:a9:dc:5c:fd:ec:c3:2a:15:88:0b:a2:30:fb:89:1d:62:ae:
         63:dc:b5:d0:36:5d:93:f0:63:10:62:1e:33:41:9f:08:47:e5:
         f3:a7:7e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:44 2026 by rpki-client