Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File:                     cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier:          08t6wTrLSkdfDEpIpIKikKJ+PtrH0icyJowKSVu8suM=
Subject key identifier:   CB:E3:27:4F:87:98:F6:1C:51:CF:4E:BD:81:BA:56:E7:25:13:9C:6A
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer:       /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial:       019EC22473DE7C79873E7F9A0C5381E85744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number:          12F1
Signing time:             Sat 13 Jun 2026 18:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:29 +0000
Files and hashes:         1: 5HKPTePj8fMVOPruXg3CGjpYfBI.roa (hash: wJlvHXRl4ES/+26PUI+1bZ8cgmanlQgp2ib+ElfT+Hk=)
                          2: StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa (hash: ByVhRdCqJLu1JdsaujozowtcN3r+tlHqhV772GdmWjU=)
                          3: WY6pvsgJR7LRmk_zcT_H6lPiyNM.roa (hash: s9khrceBdwiskxC2l1lsQTmPFSMRENlWQQ8ETb/4LxA=)
                          4: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: WF+/LuisIMYOQw56reIp34KIThrQfk2huPKH8x+N3LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:73:de:7c:79:87:3e:7f:9a:0c:53:81:e8:57:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
        Validity
            Not Before: Jun 13 18:00:29 2026 GMT
            Not After : Jun 14 18:00:29 2026 GMT
        Subject: CN=cbe3274f8798f61c51cf4ebd81ba56e725139c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:04:7c:27:6d:e4:f7:d6:e0:12:07:58:8c:
                    ac:4b:fb:da:b6:a8:27:a0:ce:a5:32:90:a7:ba:f8:
                    98:c2:85:b6:76:0c:04:ce:fe:2a:4b:f6:e8:e2:72:
                    2c:08:98:07:ad:36:14:ad:2e:fc:17:4c:f8:8a:9e:
                    ae:7a:b2:b8:93:ab:b5:21:d3:ed:4f:aa:b9:d6:2b:
                    34:5d:05:10:4a:7c:70:57:09:47:ed:7d:5a:fb:a0:
                    1a:24:ef:13:15:20:d6:a4:00:19:f7:df:ff:e4:4a:
                    6d:78:64:d4:55:c8:06:28:cb:d8:e2:b8:8b:3b:51:
                    48:d4:9d:e5:20:b9:c4:01:c4:50:a2:cd:2b:8b:90:
                    78:3d:dc:da:bd:70:d6:22:36:3c:65:ff:3a:6c:8a:
                    32:35:be:8f:0b:80:c5:54:41:1f:e4:1f:37:78:9c:
                    9f:18:c2:a4:4a:59:7e:91:14:33:4b:aa:4e:24:95:
                    7d:81:91:7d:33:15:c9:3a:0a:3d:07:5b:43:7a:d5:
                    39:12:03:bb:64:94:1e:a1:b3:e6:ac:fd:e2:7d:9f:
                    a4:56:be:59:80:ba:aa:48:6a:a4:94:1e:f4:61:60:
                    4e:fa:5c:72:20:89:b7:11:c0:66:9c:02:23:b7:44:
                    3e:03:06:27:12:d7:45:8e:29:95:03:2d:70:60:ff:
                    17:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E3:27:4F:87:98:F6:1C:51:CF:4E:BD:81:BA:56:E7:25:13:9C:6A
            X509v3 Authority Key Identifier:
                keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:52:21:cc:97:55:42:72:ce:f0:25:63:c4:04:cd:4f:f1:4a:
         92:67:d7:fd:18:db:e4:eb:aa:ab:8b:03:49:bd:c1:69:ad:a7:
         dd:cd:15:15:da:4a:20:b1:e6:0c:da:bb:4f:df:de:88:26:02:
         d1:de:55:91:d1:d8:62:9b:83:b5:e7:2a:0d:3d:60:e0:ed:60:
         6c:d1:1d:61:eb:93:58:1c:d6:b4:73:dd:34:bc:2e:c8:43:2f:
         30:1a:d4:02:06:3e:e8:00:2d:26:f2:10:a1:90:5b:6b:50:85:
         d5:07:02:e9:8d:49:32:d6:27:04:1d:74:9d:55:30:88:8b:42:
         0b:b6:04:ca:36:cb:32:8d:76:12:b6:8a:33:9d:12:9b:41:be:
         3c:d5:8c:50:43:ce:43:2f:a5:8b:de:cc:63:36:99:1b:30:da:
         22:db:85:02:29:90:3a:f0:db:40:65:3d:32:43:88:7e:d1:3a:
         5b:d8:63:09:b3:ad:63:87:91:69:e5:eb:7e:03:ad:a8:59:4e:
         fc:75:a7:8b:7d:60:84:97:c4:95:56:21:7c:e4:34:36:a9:27:
         c2:b0:09:95:a5:7e:08:e4:38:ce:86:27:9c:b7:84:2b:4d:94:
         37:71:1a:aa:0d:6e:51:ce:d7:de:cc:58:75:d6:61:5f:75:e6:
         22:95:54:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:07 2026 by rpki-client