Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File:                     X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier:          XvYeFbrLUwyo3lC8cT+euCzccU21Pr2pwYUNQVjPw3Y=
Subject key identifier:   2A:46:7A:68:69:38:10:8C:D0:FA:CB:AF:85:CF:22:A9:18:49:E8:7F
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer:       /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial:       019EBF9105D96C1691DF03F9619955A83E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number:          0702
Signing time:             Sat 13 Jun 2026 06:00:12 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:12 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:12 +0000
Files and hashes:         1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
                          2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=)
                          3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=)
                          4: MHUiyig4q2dE9dcejzFeSdppyes.asa (hash: vsGXprjQpMNWSZX1y2syqnGE09eYObc2WoOHBWaktro=)
                          5: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: w41muWW8CkVhi3wiRLvv+tFRivyQCM9vGJfnbPd8qi4=)
                          6: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=)
                          7: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
                          8: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=)
                          9: r7okYEliiPaYGayWJrORm3iOHe0.roa (hash: Ry7pFD2VVeVJdZ2ogqW8WamtLwX0AlhiB6D7DLFsEGw=)
                          10: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:05:d9:6c:16:91:df:03:f9:61:99:55:a8:3e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
        Validity
            Not Before: Jun 13 06:00:12 2026 GMT
            Not After : Jun 14 06:00:12 2026 GMT
        Subject: CN=2a467a686938108cd0facbaf85cf22a91849e87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c5:2a:40:2d:6f:1d:ff:ca:db:cc:df:6a:2b:
                    5b:ba:72:96:19:e5:d4:aa:d2:6c:0b:14:6d:24:86:
                    1d:26:bf:83:ee:dc:82:e1:1c:5d:10:bf:25:13:d7:
                    35:6e:d6:4b:04:57:5e:54:bb:ec:29:9f:b1:92:13:
                    25:23:72:fa:04:db:9c:18:6d:78:21:4a:45:a7:c7:
                    d2:2c:42:20:42:55:fc:2d:ea:d8:6f:97:73:29:f5:
                    a2:37:0b:da:2d:3d:a3:bd:f8:bf:0e:6e:90:b2:ed:
                    12:ff:8f:b5:7e:6b:ce:aa:6e:63:43:6e:3c:98:47:
                    6b:cb:31:91:11:f9:f3:0d:d2:18:a0:86:82:fb:d1:
                    72:bd:c2:1a:20:c4:8a:a4:d9:62:c5:5d:6c:d5:13:
                    e4:22:a9:93:ae:bf:81:25:71:9e:c4:ca:87:44:2a:
                    3f:5d:79:a8:53:25:8f:25:6d:54:eb:ce:48:83:5d:
                    3b:58:ad:79:97:1f:c5:95:98:8a:58:7f:06:64:9e:
                    96:5c:5b:bf:97:93:77:19:f5:82:5c:fa:b7:44:f9:
                    76:c3:b4:1a:91:31:c2:4f:c3:91:e4:66:ae:6b:b3:
                    7d:52:d0:45:06:02:8f:41:2f:73:5a:6a:64:c1:98:
                    5a:1c:36:34:1a:a4:02:df:0b:46:22:6a:2f:4b:af:
                    3f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:46:7A:68:69:38:10:8C:D0:FA:CB:AF:85:CF:22:A9:18:49:E8:7F
            X509v3 Authority Key Identifier:
                keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:35:ef:98:c2:bc:0e:22:c3:1c:0c:c1:be:17:5c:a6:d9:
         c6:02:af:83:87:d2:a3:8d:bd:5b:43:f8:74:df:9b:44:5d:31:
         6f:31:3c:6a:63:ab:92:69:33:67:16:c2:86:a4:5e:76:98:e2:
         31:cf:71:87:e2:11:bf:7d:32:13:05:9e:52:43:d7:72:7d:24:
         a7:1a:d6:02:33:b8:61:ad:42:af:c1:0d:06:05:50:74:f9:af:
         d4:55:d0:96:26:ab:ac:88:1d:3b:88:9e:b1:45:3d:a7:ff:37:
         73:ef:69:02:f3:b0:7c:6f:e6:8f:20:55:68:d8:d3:b4:0e:74:
         72:27:5f:b2:16:21:a0:6d:99:6e:76:06:d8:c3:5f:a7:dd:8c:
         2f:c8:60:94:82:72:47:f7:2c:16:1b:bb:5c:9a:a8:05:e6:98:
         c5:5d:d0:bc:c3:2a:51:8c:40:ee:88:4a:61:c3:9b:e1:d6:2a:
         88:23:0e:48:94:7b:94:cb:3d:5c:e4:cb:1b:fe:5c:97:82:34:
         75:f3:b9:33:58:59:14:e6:6c:42:94:37:cd:5a:94:5f:fc:e7:
         93:db:0a:37:35:5b:4e:98:02:8e:b3:06:39:9a:61:73:af:31:
         38:a2:94:d2:1d:4b:cb:c0:b4:45:bf:aa:bd:37:33:96:17:42:
         5b:35:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:42:33 2026 by rpki-client