Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
File:                     axnRvKx1IxLsTeb1vTmszjKra9Y.mft (raw, json)
Hash identifier:          lRr47pGWII8PTETDRShl2a1LgZbv3nGBU35ir9lWeLw=
Subject key identifier:   D3:44:CF:B5:19:BE:7B:7D:45:8A:BA:09:1A:DE:F9:FE:28:3B:56:F7
Authority key identifier: 6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6
Certificate issuer:       /CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
Certificate serial:       019EC149840F60A5CA0BEEC1287570959538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
Manifest number:          1750
Signing time:             Sat 13 Jun 2026 14:01:20 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:20 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:20 +0000
Files and hashes:         1: URIXovot20BpTLwGW5N6pOlLgy4.roa (hash: wvN6iNM+Z86YXZPPdosS4TWVox9d1Df0z+4sQXyWazA=)
                          2: axnRvKx1IxLsTeb1vTmszjKra9Y.crl (hash: ETEsIpdZxvUhHjFmHG7JRKaxIPjBSYaZ1MtjRe4DzTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:84:0f:60:a5:ca:0b:ee:c1:28:75:70:95:95:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b19d1bcac752312ec4de6f5bd39acce32ab6bd6
        Validity
            Not Before: Jun 13 14:01:20 2026 GMT
            Not After : Jun 14 14:01:20 2026 GMT
        Subject: CN=d344cfb519be7b7d458aba091adef9fe283b56f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:c0:07:0c:95:d6:d0:a2:c2:f0:b9:d4:5d:
                    46:a1:de:41:a7:8f:b8:3d:bb:fe:86:5b:b7:96:3a:
                    f3:1b:0c:de:fb:6c:88:57:d6:ad:b2:40:a5:e9:73:
                    30:cc:63:bf:ea:eb:c9:23:c9:ed:be:26:2f:35:ac:
                    88:a6:b5:58:52:bd:26:cd:c7:10:51:54:4c:07:76:
                    80:7d:46:22:15:30:5c:69:1f:c2:5c:be:97:b0:05:
                    09:2c:ab:0c:59:a8:dd:99:1d:ce:b9:b1:99:b3:aa:
                    ef:c9:4c:a7:7f:52:d8:3f:a2:8f:d0:33:62:42:a6:
                    8d:8c:bd:a5:16:38:d4:d5:8d:02:de:d4:49:91:1c:
                    4b:76:65:63:38:29:2f:5c:dd:42:65:aa:ad:d0:a3:
                    e5:c6:d1:ab:ee:64:45:25:6d:d9:3d:65:9c:da:b2:
                    32:81:53:44:b7:0a:0f:45:48:ba:fd:9e:7e:1f:2f:
                    c8:af:cb:04:89:bb:98:71:46:62:e6:d5:cc:a3:a7:
                    87:73:8c:42:1a:a1:8d:cc:2b:83:a5:18:80:bc:5f:
                    17:ea:74:65:aa:61:1b:0a:38:7a:00:48:0d:4d:6c:
                    62:36:30:68:7e:5c:0d:b8:3d:f1:90:1c:a7:5e:7b:
                    04:6a:22:49:ef:1f:3a:ee:4b:ac:cf:a9:97:4b:3d:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:CF:B5:19:BE:7B:7D:45:8A:BA:09:1A:DE:F9:FE:28:3B:56:F7
            X509v3 Authority Key Identifier:
                keyid:6B:19:D1:BC:AC:75:23:12:EC:4D:E6:F5:BD:39:AC:CE:32:AB:6B:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axnRvKx1IxLsTeb1vTmszjKra9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/777746-fbef-4e58-afdf-b551e49435a2/1/axnRvKx1IxLsTeb1vTmszjKra9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:97:52:d9:e1:21:db:5a:1b:9a:8f:d5:76:12:60:4b:d0:2a:
         1a:79:a4:42:61:a6:5b:fc:c2:cc:2a:f6:13:c7:cc:ae:d7:8b:
         6b:35:3b:09:aa:c2:b4:92:2c:86:7e:91:41:cc:08:c2:f2:34:
         17:21:70:13:2f:41:6b:23:6f:05:b4:11:e6:37:24:7c:67:07:
         76:a0:72:4c:fb:88:2d:69:e4:4c:69:61:27:ba:73:6a:42:fb:
         d7:55:23:ec:6b:c7:92:3e:66:9a:63:24:75:78:f9:81:20:87:
         18:88:f9:6c:d4:61:a9:6b:0a:a5:ea:dc:e6:82:01:c1:43:9b:
         11:b5:4d:36:54:58:6b:df:b7:d7:d8:0d:33:ac:10:42:52:18:
         4f:7b:15:c2:97:f5:72:dd:34:52:31:e2:1f:6c:eb:c7:9e:3b:
         dc:86:a8:92:bf:62:95:54:3e:72:c2:c3:71:9e:8c:c9:0d:db:
         01:5b:37:dc:1f:61:10:0e:7c:a5:d1:4a:92:07:46:a0:b8:0b:
         48:2c:65:00:dd:a3:d9:8d:a4:47:7d:5b:de:c1:f1:7b:94:75:
         2f:49:61:d5:08:64:46:ea:93:23:d0:63:70:49:77:2a:71:83:
         ce:8e:2b:ff:98:7b:28:99:af:88:e8:74:80:31:31:25:31:22:
         12:c3:59:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:11:00 2026 by rpki-client