Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          B0RArSnUMv7zYz39C8SDOZ3qFDjIuFGo07Ls+7N+QSg=
Subject key identifier:   73:3F:CC:44:24:D7:05:3E:B0:1F:0E:2E:33:54:61:77:A7:D1:19:10
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       019EC2C9D9894205D50842D9885AE65B1DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 21:01:08 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:08 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:08 +0000
Files and hashes:         1: H8wE76fNQ2hhIjxk4MuG2V875Nw.roa (hash: g7ehk1525yVD63XA8pRRR3E8IFSxP1Zjdo5zOoEU1Rs=)
                          2: KxaC0ruOG2YD5n1zBRmLQRsn3WI.roa (hash: TwtwT6AH74GOn9MuLfl6jj270NvdM2yc+udW6/G1LQc=)
                          3: QkMzWLk5sTK1UV1ynfE6svHoE8U.roa (hash: CorPpj4zU1bBCQT6Z2Gb1cpT/IwtfHvCiSJfVqus6RE=)
                          4: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: p+ABC1exQgrrgiBGTgTn4JvipliJK0omig3XDvGeXls=)
                          5: syri4gMUyb6a13KvMROJjwlBhZg.roa (hash: /QXVuiiMa3wjoFyt1XhRqNNgHTeCl2azKO31l+7RS+0=)
                          6: uyOFyGJDHMXG3t3pO277WLsoGqE.roa (hash: BzXP/08Zx0Wir6Qt4Wu5utPmmZQXa+TM9Drawn5Grls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:d9:89:42:05:d5:08:42:d9:88:5a:e6:5b:1d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Jun 13 21:01:08 2026 GMT
            Not After : Jun 14 21:01:08 2026 GMT
        Subject: CN=733fcc4424d7053eb01f0e2e33546177a7d11910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:58:3b:88:17:d2:d6:72:f6:99:1f:da:5f:
                    4b:9b:75:12:64:f2:a5:10:3f:50:58:69:40:80:80:
                    98:a7:f2:21:ab:b7:93:9f:34:00:9f:e2:cf:ba:2d:
                    21:5e:1e:b1:de:6d:61:61:57:0b:d0:7a:77:64:b8:
                    bb:68:0a:52:2d:f4:14:59:93:4b:a4:a0:00:ea:b8:
                    0c:22:46:48:0f:0b:2c:1a:dc:ee:79:69:3e:e9:bf:
                    20:7b:23:e0:a2:18:cf:b2:bd:ec:86:1b:0a:4c:54:
                    28:7d:d3:d0:37:23:03:73:29:f1:f5:31:df:e8:5e:
                    94:39:33:ee:38:e4:58:0a:a9:ea:5b:a0:13:36:72:
                    cd:43:0f:ff:ae:0d:c9:bd:a2:f5:ef:8a:7c:db:41:
                    6a:fc:09:9d:ad:8a:c4:5c:02:3c:da:f7:68:41:69:
                    29:0d:e2:ce:ea:f1:44:89:b6:14:34:3a:69:9a:d6:
                    84:9e:9e:9e:d0:11:24:0b:73:37:3f:d5:c5:bb:c6:
                    3f:08:ef:2c:0d:03:9f:bf:8d:15:38:74:c1:4a:c9:
                    7f:3e:18:20:27:44:cf:be:62:c7:6c:f5:92:10:77:
                    61:bf:a7:b3:a7:8f:ef:a0:d3:83:3b:02:86:ce:9f:
                    a5:66:d0:f4:e8:b3:3a:a6:ed:de:72:6f:30:45:35:
                    32:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3F:CC:44:24:D7:05:3E:B0:1F:0E:2E:33:54:61:77:A7:D1:19:10
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:71:cd:3f:45:b0:41:56:79:e4:7b:5a:25:5e:32:6c:76:7b:
         97:ef:d1:35:da:1f:eb:25:0f:1b:0f:a1:5e:e2:45:ff:05:33:
         a8:5d:48:a4:32:40:2a:c9:56:b0:a0:08:ed:43:13:13:8f:f8:
         24:fd:55:0d:20:91:a5:f8:1d:33:df:18:00:a6:e2:00:1a:b5:
         ed:0e:f1:13:aa:25:17:3d:16:0d:db:f3:8e:17:82:4b:27:0d:
         7a:42:c3:63:8b:e5:7b:36:42:63:69:da:05:7e:e8:3d:1b:c1:
         70:3d:42:7b:f4:4f:4c:72:b0:c9:eb:8b:62:c4:70:e4:ad:25:
         a9:18:d5:41:13:ba:bd:73:b3:85:b3:57:28:ae:82:d2:4f:4c:
         ff:d9:90:c2:da:57:fb:54:66:9b:74:d9:79:7a:54:7e:6e:1c:
         bc:04:79:a3:ef:76:9f:ff:7c:71:39:89:d2:11:3c:ca:1e:c7:
         73:a7:b0:12:56:fc:b9:ca:dd:2a:da:51:3a:b1:c0:14:c8:7e:
         b8:89:11:fc:be:57:31:e8:b9:88:23:9f:8c:76:4c:09:38:b8:
         65:06:95:c7:fb:96:1a:de:a7:5f:af:41:52:0a:a9:88:b6:b8:
         7d:b8:e6:4a:da:0d:ec:65:ee:13:5e:f8:7e:39:b9:ad:79:89:
         01:b6:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:04:42 2026 by rpki-client