Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
File:                     R2Bl1x8emPmnynjmFOz19G1aZDw.mft (raw, json)
Hash identifier:          NnhgX77urYzZjH/hmF69wiKxV4jdkFRsE+qhWQccjCQ=
Subject key identifier:   F8:59:2C:4B:43:6B:19:DF:7E:F9:85:FE:08:0C:19:9A:A3:48:27:37
Authority key identifier: 47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C
Certificate issuer:       /CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
Certificate serial:       019EC148B1DCB312745C8EB3C346CD85A088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
Manifest number:          03F9
Signing time:             Sat 13 Jun 2026 14:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:27 +0000
Files and hashes:         1: 3faqLvWKyRbHeIrogN3_fV0BvCI.roa (hash: UQfJ7cK1wnMDVZHxIQBIYMz3jz7zOHrQbZVbdTLcoWw=)
                          2: R2Bl1x8emPmnynjmFOz19G1aZDw.crl (hash: uZ4cPLuHmC8xugrdDUMNPLuUXsKasuFxH7EzkWeB3Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:b1:dc:b3:12:74:5c:8e:b3:c3:46:cd:85:a0:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476065d71f1e98f9a7ca78e614ecf5f46d5a643c
        Validity
            Not Before: Jun 13 14:00:27 2026 GMT
            Not After : Jun 14 14:00:27 2026 GMT
        Subject: CN=f8592c4b436b19df7ef985fe080c199aa3482737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:88:ef:c9:ef:7d:13:fe:91:12:36:ab:bf:
                    a3:a0:5c:7e:79:4f:f9:4e:25:c3:33:92:0c:8f:7a:
                    6a:94:74:ea:cc:ed:33:df:5d:a2:37:68:56:0b:d4:
                    d3:b6:df:81:50:b3:89:34:cc:03:9c:3e:81:60:ca:
                    21:d2:00:7b:88:62:d5:ce:83:a7:08:f4:1b:42:f3:
                    73:f2:39:3f:1c:a3:c1:1f:9e:3c:38:be:57:9c:b9:
                    12:01:8a:80:5c:37:41:b9:35:cd:19:97:4d:df:a0:
                    ac:b4:50:67:4f:8c:63:b0:45:4b:b1:69:08:80:a6:
                    b2:44:cb:bf:8e:35:11:a1:11:29:19:60:e7:25:c3:
                    e2:32:86:1f:c9:b4:d4:c3:34:dd:2f:ed:1c:a7:90:
                    74:f7:3d:45:4a:17:2c:75:20:a5:79:fd:5b:c1:d8:
                    6f:dd:24:a1:48:1d:92:d0:bb:c6:b3:39:79:48:09:
                    eb:42:be:89:2f:e4:d1:78:65:fc:e6:42:e4:6c:ba:
                    c7:83:b8:69:c7:91:a1:94:6e:a9:c9:53:15:66:16:
                    ee:2d:02:13:36:2a:4c:3b:2f:2a:df:da:82:30:e0:
                    d7:64:f6:75:3a:1f:23:3d:9f:44:1f:e1:b0:1a:3e:
                    52:62:02:fb:0b:92:bc:c6:81:a0:2e:98:62:1a:38:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:59:2C:4B:43:6B:19:DF:7E:F9:85:FE:08:0C:19:9A:A3:48:27:37
            X509v3 Authority Key Identifier:
                keyid:47:60:65:D7:1F:1E:98:F9:A7:CA:78:E6:14:EC:F5:F4:6D:5A:64:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2Bl1x8emPmnynjmFOz19G1aZDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/526f3e-8924-48bd-a772-b51953037993/1/R2Bl1x8emPmnynjmFOz19G1aZDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:c0:e8:cc:41:fe:d1:6b:95:a2:3d:f4:b2:d7:e3:bb:cf:
         7a:a0:00:cc:c8:a1:5e:d4:ad:dd:2d:c2:28:22:7e:3e:e0:b7:
         40:53:ba:c8:88:44:cc:34:35:8c:af:af:37:70:5e:3d:ec:8b:
         ed:71:b1:53:e8:ef:f0:5f:f2:6c:0f:23:9d:ca:b3:08:e8:30:
         f2:2a:eb:44:dc:96:4e:f5:9b:ca:42:4f:5c:a8:b9:0e:e3:b9:
         fa:e3:5a:49:a0:4a:56:85:8f:83:4e:17:25:a2:5c:85:50:d1:
         d2:22:b4:78:80:de:bf:d1:8b:a9:fb:72:4d:99:68:49:9b:20:
         55:d1:9c:c6:9b:5b:0d:41:c6:26:c0:33:8f:41:e6:cd:1b:33:
         ad:39:c3:48:0d:d3:fc:62:4a:f6:3d:86:55:9b:c6:78:42:1a:
         6b:af:db:2c:29:81:d0:be:65:01:ef:31:67:8b:ea:b6:aa:6f:
         ad:7c:9f:51:87:79:25:b6:e3:43:b8:67:c0:7e:ae:c5:bf:0a:
         28:2f:4d:07:c0:9e:5b:f5:53:50:10:17:7c:21:30:3d:84:95:
         cf:93:0a:b9:75:35:92:50:2b:95:15:af:0f:32:08:81:c7:87:
         d7:f6:4a:e1:a5:1e:6a:5b:20:cb:52:80:e0:f7:16:d6:0b:64:
         92:7c:8a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:39:21 2026 by rpki-client