Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
File:                     fiax73QQByzpboLXWBvkNuY5p8Q.mft (raw, json)
Hash identifier:          u4VgYYS97vsIaqGvhJSFbq7FR7IPMAc9sMDd4wmCLzk=
Subject key identifier:   E1:BF:C5:89:71:95:A0:9F:60:71:90:8C:35:31:F4:83:CA:2B:01:9E
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Certificate issuer:       /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial:       019EC25BE0F2EC771E566FEA3D2C56B46F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
Manifest number:          1933
Signing time:             Sat 13 Jun 2026 19:01:01 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:01 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:01 +0000
Files and hashes:         1: 7S2s5NvMEWjMmdP4tHVPuR44TrM.roa (hash: tQYbzfuvYbUtsAHpJGcR8MOd0wYit8Udr+nLe5FW+kY=)
                          2: N_rd1-iO2Zco7czWxcygCkfPMco.roa (hash: fNgSQr1pcqvcbsbdFSVdiphe05QVeyRTAnd6yBvX/h0=)
                          3: fiax73QQByzpboLXWBvkNuY5p8Q.crl (hash: RjUeaVvZDnu7/+Wo3yEK0pyZaQUa2bdknVooaudZp7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:e0:f2:ec:77:1e:56:6f:ea:3d:2c:56:b4:6f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
        Validity
            Not Before: Jun 13 19:01:01 2026 GMT
            Not After : Jun 14 19:01:01 2026 GMT
        Subject: CN=e1bfc5897195a09f6071908c3531f483ca2b019e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:53:03:14:20:29:e3:11:a4:6f:70:3c:84:14:
                    ac:17:fe:6e:84:e3:d8:ea:ef:24:6e:eb:4e:f9:99:
                    c0:fd:af:3b:6e:1b:39:f4:f1:49:ab:e2:fa:24:32:
                    e2:09:52:cb:bf:f6:1c:bd:bd:18:f0:20:d4:a9:cd:
                    95:2b:2b:13:a5:76:e1:3c:82:74:80:a5:75:6c:12:
                    14:f6:62:df:93:de:02:9f:b3:00:1b:b5:95:c8:52:
                    4a:c5:63:0c:93:22:19:0c:fb:e1:f5:c3:00:55:02:
                    97:5b:a6:75:6f:9f:6b:50:95:2c:d8:c7:c6:b9:27:
                    6b:ac:29:67:d3:86:93:68:79:f8:23:f2:b4:3b:b9:
                    b6:c4:8f:7f:06:97:64:97:dc:72:a4:43:2a:c8:3c:
                    4a:6a:c0:62:db:c5:08:43:d4:d3:9a:7f:d2:e3:2d:
                    8b:ce:11:b7:d3:19:2b:71:f6:63:5e:e2:48:7a:c1:
                    0c:93:62:af:ef:e4:28:e1:10:6e:76:c7:1b:a0:8a:
                    c4:6d:f7:20:51:c9:7f:7c:1a:88:ce:d7:d0:78:22:
                    8f:45:c2:99:87:53:e0:a2:ec:fa:66:9f:07:58:3f:
                    78:af:76:e2:51:51:37:49:7d:93:e5:f6:e9:0d:08:
                    56:99:8f:05:db:9b:50:08:03:15:83:d4:29:96:79:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BF:C5:89:71:95:A0:9F:60:71:90:8C:35:31:F4:83:CA:2B:01:9E
            X509v3 Authority Key Identifier:
                keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3d:4c:5b:13:b0:3e:41:b7:cd:40:f5:39:15:3f:61:e7:d2:
         fc:66:39:b6:dd:f8:8e:df:5e:fa:97:17:9f:a8:72:af:b4:b5:
         4f:4d:8f:a7:f6:8b:a7:b0:63:2a:b4:15:f1:80:74:04:6d:1a:
         ea:75:71:bf:77:b8:e9:4c:66:75:30:ee:37:9d:b7:25:55:b6:
         8c:e8:a3:45:8f:c0:9e:15:6e:41:33:c8:1e:92:dd:5b:e3:ae:
         90:cf:a3:88:5b:25:b0:3a:b9:53:ef:f1:34:a5:2b:d1:46:d5:
         67:c5:60:1a:ed:a7:33:51:83:28:52:4d:8b:29:d5:d8:9c:71:
         86:e5:77:27:0d:4e:f4:a3:a1:fe:7f:75:be:2d:37:82:4e:be:
         f7:45:eb:29:c9:c4:9b:01:51:99:f2:66:d5:bf:af:bd:cc:0c:
         89:35:01:90:1b:76:ab:a8:11:eb:a0:98:cc:03:23:ad:d0:93:
         93:30:bb:c8:37:7f:01:84:f5:d9:70:b2:86:0e:2b:0d:da:bb:
         fc:19:10:c6:26:1f:c7:03:9f:2a:5c:56:bc:05:cc:a0:9a:9d:
         8c:ec:52:80:01:ba:4b:31:23:9d:fa:b3:3d:04:a1:32:aa:9c:
         ac:1d:4b:64:f1:f8:30:20:10:4f:33:93:88:f9:b6:f4:16:7d:
         fd:3a:ad:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:53:33 2026 by rpki-client