Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File:                     s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier:          vIXTQh71z3qx/4ShxELrod1qrsKZkBjlL/nqG0XIjms=
Subject key identifier:   FB:D2:56:CC:17:88:BD:19:25:03:16:5A:2E:11:B4:35:C6:3F:EF:D3
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer:       /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial:       019EBE4836967C9C3CE178DF6968F374706D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number:          1964
Signing time:             Sat 13 Jun 2026 00:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:03 +0000
Files and hashes:         1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
                          2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
                          3: _VVNfxdA5_FHj05YYq547OSKmlQ.roa (hash: 13IEzG/o1pmkzrgbkejU8IZuzD7A6Ft+aR2tUe+BCq8=)
                          4: bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa (hash: jfuS4WANPOwG9IyimGe8aZrpP9Pv78GN//1LDqZ2n2k=)
                          5: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
                          6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: 9deAKyizpjjLxkxCqnqB96QdUpEpkwTY6xI7WuRMBJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:36:96:7c:9c:3c:e1:78:df:69:68:f3:74:70:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
        Validity
            Not Before: Jun 13 00:01:03 2026 GMT
            Not After : Jun 14 00:01:03 2026 GMT
        Subject: CN=fbd256cc1788bd192503165a2e11b435c63fefd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:f6:89:96:ad:b5:9e:02:9d:46:01:05:74:
                    23:aa:83:fd:ae:bb:aa:be:8d:1e:23:32:e6:88:43:
                    62:7f:26:38:fb:7a:2c:98:c5:62:02:ad:72:79:e5:
                    f4:e5:3f:15:86:a3:3b:6f:3a:66:f1:e4:ad:2c:16:
                    b9:08:12:61:af:03:ff:86:e9:8c:26:c7:66:18:50:
                    dc:94:fb:e1:81:29:49:a1:8b:c2:79:f4:7b:57:66:
                    0b:3c:db:0a:91:f6:69:26:b4:12:8f:0a:9a:ea:71:
                    06:ed:93:18:7b:eb:ea:2f:31:45:78:10:9a:58:4b:
                    3b:28:8c:b3:47:59:7d:95:af:e4:f4:09:35:94:f5:
                    40:94:bf:99:41:72:22:30:3f:59:7c:77:c1:6d:e8:
                    5a:72:18:2e:1c:07:69:38:2d:3d:97:ad:b0:e4:99:
                    68:e9:92:b0:d1:34:16:49:ab:bc:e5:1c:65:1e:62:
                    1a:9e:1c:df:e1:f1:3a:b5:2d:8c:62:6f:4b:43:6d:
                    54:5a:1a:18:45:26:0b:0c:4f:52:d8:e2:d1:91:69:
                    39:f9:d5:77:70:58:94:8d:cf:da:52:34:69:6f:c2:
                    9e:99:9f:16:3a:68:88:16:80:51:4b:61:42:77:a5:
                    b3:70:1b:f5:8b:ee:f8:8c:84:bb:49:5c:b0:af:12:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D2:56:CC:17:88:BD:19:25:03:16:5A:2E:11:B4:35:C6:3F:EF:D3
            X509v3 Authority Key Identifier:
                keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:32:c9:aa:36:40:4a:ce:2f:8b:85:28:2b:bb:b3:24:4f:11:
         db:6f:53:d6:1c:d0:1a:f9:bf:72:78:6b:13:49:e1:d6:31:35:
         87:a8:d2:e1:cd:50:d9:d2:ed:4c:1d:c2:55:fb:af:17:b2:fc:
         3d:8d:b7:23:44:48:4d:12:73:57:2c:05:b2:2c:c7:fc:91:2c:
         0a:15:ad:2e:c7:19:94:f8:8c:b4:e0:71:4d:d9:61:1a:64:97:
         70:f9:a5:31:87:01:a7:82:1d:06:44:a0:6a:ae:8a:89:98:8c:
         f0:72:86:ff:b1:08:01:3b:74:a9:e8:4a:2a:ce:8d:7c:66:d1:
         20:17:1a:9e:bf:7e:54:93:d6:8e:94:e7:d8:73:b4:c1:61:6d:
         73:6e:ce:a5:14:b9:85:ad:71:be:62:fc:61:79:eb:38:81:5f:
         f9:65:d0:3f:0b:bd:c4:ea:13:57:78:2c:90:95:37:2e:80:fb:
         b9:1c:9c:30:9d:9a:31:2d:6b:6d:bf:15:64:d3:a2:a4:49:16:
         14:fe:d1:58:d7:47:d4:f3:34:54:c3:a9:60:0d:cb:35:99:91:
         f4:1c:fe:f4:28:9c:4b:21:60:d7:7b:e6:d0:19:9b:9f:77:a2:
         22:e1:d9:b5:38:e8:9c:ad:2e:07:cb:ad:42:2b:b8:6e:0c:b0:
         4f:4d:0a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:30 2026 by rpki-client