Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File:                     l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier:          g8RnES6K4w78YKVEoCW1HJEZMWGdFBepIg3uzEn+k6w=
Subject key identifier:   7D:46:A1:AC:61:3F:D3:A3:B8:76:19:8B:8D:67:20:EC:D6:0C:77:30
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer:       /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial:       019EC0DB60E0F7F1BE76862B0AA530D33227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 12:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:03 +0000
Files and hashes:         1: Gj73oXbGGECiTvgDwrqpczdzK-A.roa (hash: Q8jWR9HfNKu/Ar669TZqmeK+l7VIycvfZkDQooqE+6w=)
                          2: I046pgaea8_r2iLhOnesthR7bkg.roa (hash: iebhEzWUa7YFnPFB2Lfdh61nET2vxCQ1mscDyFpKnFs=)
                          3: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: hciMfjicgPVK8Sc39S4fWNWc0BfUrBrH5nq5txXEtTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:60:e0:f7:f1:be:76:86:2b:0a:a5:30:d3:32:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
        Validity
            Not Before: Jun 13 12:01:03 2026 GMT
            Not After : Jun 14 12:01:03 2026 GMT
        Subject: CN=7d46a1ac613fd3a3b876198b8d6720ecd60c7730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e3:3a:1f:ea:24:26:72:6d:3e:d8:8d:8e:9b:
                    a5:46:97:d5:ec:4a:f6:b9:d1:e0:4b:5f:7f:c9:43:
                    66:a0:55:8e:46:0e:2a:de:2f:93:d7:e4:62:10:75:
                    57:3e:24:c9:a0:9c:cd:81:58:1f:6d:d1:dd:b6:9e:
                    c1:5b:27:60:86:a1:57:38:49:bc:6f:c8:b8:81:51:
                    a4:46:c2:72:ad:69:ff:c9:f1:82:c9:f9:1b:e1:5c:
                    2c:e1:4c:d8:9d:64:3c:77:a5:7e:c5:04:22:9a:57:
                    df:1e:0d:13:b0:11:64:3d:3e:50:9a:17:ba:b8:35:
                    f6:9e:2b:01:60:d8:55:0e:4a:f4:e1:6d:ab:79:1b:
                    c5:9e:06:6a:c6:19:34:41:c7:e5:29:44:44:dd:4c:
                    b9:03:c2:1e:dc:5f:27:e3:a1:8c:08:27:15:3b:0e:
                    f6:06:94:bb:da:f6:7f:15:7a:35:96:ca:ef:1a:8f:
                    9c:0f:75:bf:95:42:03:d5:6a:a8:ed:e4:ef:3a:3b:
                    a3:14:f5:79:6f:d3:3a:37:65:dd:31:2c:37:ae:38:
                    f1:07:e0:7c:79:f8:29:84:0e:59:e8:ce:f4:9f:37:
                    62:c4:27:f5:b0:d2:51:89:22:ce:18:59:fa:3a:16:
                    18:28:58:60:a4:36:72:4a:31:7f:91:bd:07:96:49:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:46:A1:AC:61:3F:D3:A3:B8:76:19:8B:8D:67:20:EC:D6:0C:77:30
            X509v3 Authority Key Identifier:
                keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:78:34:0d:23:66:30:81:91:80:4e:9e:1f:4d:6f:e1:dc:f4:
         68:38:47:59:9e:6f:06:fa:99:f1:f8:8f:1c:55:68:9f:cf:b9:
         23:5c:c1:a4:55:55:d1:0c:5c:92:7d:ae:a5:42:3a:bb:3a:cd:
         c2:bf:8a:ab:16:9c:9b:6d:f2:40:43:39:cb:13:7d:97:6d:f7:
         af:68:36:ad:91:5b:5f:85:80:b9:93:44:22:21:d1:34:df:56:
         27:fb:46:62:e2:d1:9c:09:60:3d:22:00:29:21:af:02:6e:c4:
         bf:02:be:2e:c4:86:76:84:06:83:d7:a2:18:70:a8:bc:db:37:
         bc:7a:93:87:4f:8a:53:18:1f:99:c9:b9:ad:3b:14:0e:b6:23:
         c5:e5:9c:e3:89:ab:2c:d9:d6:8a:3c:5e:fa:b3:cd:5b:71:50:
         2d:94:93:36:ad:8f:4f:ad:f5:c0:2f:11:2b:6d:e4:11:72:c8:
         c3:e7:37:af:42:82:64:ed:8f:f0:18:af:fb:cd:b4:e0:3d:df:
         bc:b6:38:2e:27:41:71:9d:f4:c0:b5:c8:da:c6:02:0e:b0:96:
         86:dc:a1:e6:07:93:f9:76:d1:84:ae:29:27:92:72:27:d1:02:
         72:27:9c:b6:46:1e:db:d4:95:0d:10:4f:73:f3:c6:fd:cd:3f:
         57:28:da:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:42:49 2026 by rpki-client