Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
File:                     H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json)
Hash identifier:          A+KqCioyo39HBXZYvmMSfMb2+Hh6q/U+0IaeFOFUVGQ=
Subject key identifier:   87:A6:1C:55:4E:32:DE:A7:10:70:4D:38:63:DA:19:FF:CC:A0:74:FE
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Certificate issuer:       /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial:       019EBFC8E07F0A08CA509F4927CC928539E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
Manifest number:          1984
Signing time:             Sat 13 Jun 2026 07:01:13 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:13 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:13 +0000
Files and hashes:         1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=)
                          2: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=)
                          3: EpKlZvm1sQunk4TyUL8-X4yYT-s.roa (hash: tOu5I+gySB5LV5V4nchtnSTJlY0KTUc/ZBP+vEiIXg8=)
                          4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: J+cORA9dLGtn/AFoaSquhcktpCcCoENeVTKj5/DZirE=)
                          5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=)
                          6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=)
                          7: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=)
                          8: ajchcB005SwdhHOonkg_FPYCObk.roa (hash: iRaNo1hXeWmGHavpqJaMPyQrwMjNl6Bwb7CatuzhcAo=)
                          9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=)
                          10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=)
                          11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=)
                          12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:e0:7f:0a:08:ca:50:9f:49:27:cc:92:85:39:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
        Validity
            Not Before: Jun 13 07:01:13 2026 GMT
            Not After : Jun 14 07:01:13 2026 GMT
        Subject: CN=87a61c554e32dea710704d3863da19ffcca074fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:92:d9:bf:f2:54:d7:9e:f5:86:f6:66:b1:
                    86:af:69:35:ae:a9:c4:96:15:38:1d:3d:55:3b:5b:
                    71:1f:8b:c0:7a:6f:08:8d:96:5c:5f:9c:ba:8f:a5:
                    15:a1:ed:c0:59:b4:84:a8:10:ec:0b:05:73:a5:b3:
                    58:92:e1:03:0d:6a:19:28:ed:80:6f:00:22:04:c0:
                    61:e1:b3:64:e1:3d:33:3b:44:a8:8b:d1:78:a4:0a:
                    68:b7:ea:3d:32:19:62:6f:fc:b0:89:40:f3:c6:d0:
                    74:81:a2:4e:1b:aa:13:0e:c4:15:a0:df:d5:51:a8:
                    c5:00:78:0f:cc:a7:89:55:21:9b:f2:6f:83:fa:e6:
                    e5:78:d1:86:73:d0:6c:e2:85:66:50:01:f4:da:2e:
                    9c:b0:25:2d:91:e2:d7:95:8f:3d:d5:74:bd:f5:95:
                    98:39:99:ec:8a:82:c5:6e:2c:ab:17:a5:40:a4:a5:
                    28:f5:ce:9d:af:2c:43:23:28:da:4b:59:cb:61:a6:
                    04:96:d1:65:9d:bc:29:35:f6:22:dd:9f:ff:6c:f7:
                    bb:7e:f3:ab:80:fa:89:39:a3:49:ed:cc:56:2e:c1:
                    d0:4b:49:89:80:93:0e:50:42:c5:69:23:3a:66:7f:
                    0a:11:03:e7:07:9a:90:29:86:aa:6b:6d:8e:0b:f2:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A6:1C:55:4E:32:DE:A7:10:70:4D:38:63:DA:19:FF:CC:A0:74:FE
            X509v3 Authority Key Identifier:
                keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:4a:59:09:d5:25:a2:d0:9a:97:53:16:02:d5:aa:e1:42:
         40:5e:47:38:49:57:73:dc:c1:3e:32:cd:c9:91:4f:ab:f4:c3:
         e6:7a:fc:73:7b:8c:a9:71:20:d3:12:f8:6a:03:c1:eb:ef:a0:
         9c:9a:82:a7:57:08:54:1e:d5:c8:a2:e4:ff:e0:52:62:d8:a4:
         b8:d3:8f:bf:21:e8:ab:aa:88:32:2c:a9:f1:5c:f7:fe:79:69:
         fd:e4:98:95:6d:9f:4e:aa:4d:e1:d2:0b:ef:e5:5c:db:5a:64:
         f6:73:e0:06:22:2d:86:b5:ed:48:f5:f7:ae:19:cd:5c:5d:61:
         4f:78:33:56:0f:28:19:72:b1:62:e5:49:13:65:aa:68:6f:08:
         af:75:1e:41:9e:13:0b:b9:9a:90:15:bf:b1:9b:57:1f:96:3e:
         86:fa:a1:58:a1:38:8b:5c:c5:6e:97:65:4d:eb:aa:fc:c3:2f:
         ca:d7:09:3e:93:d3:0a:70:fb:51:b8:f7:95:c7:e1:99:b2:cc:
         df:1e:f0:5c:33:aa:98:0a:64:7c:2d:0b:f2:fe:2e:f8:30:78:
         94:37:b7:29:f9:05:67:ea:cc:08:59:95:9f:1b:87:ac:41:25:
         ed:1b:9e:18:4c:b7:18:8e:31:bb:b6:11:52:be:d1:ab:d0:0f:
         30:2c:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:37:50 2026 by rpki-client