Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File:                     5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier:          tv4TFP29aSxVODdwbg0NwdoErNYI5gBr9btwksTKNIk=
Subject key identifier:   39:C8:FA:BA:B1:96:4B:2C:85:FC:15:EA:4D:04:7F:4C:CA:43:D5:D3
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer:       /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial:       019EBFC8D19ABB1C8A891531990D3488D334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number:          1964
Signing time:             Sat 13 Jun 2026 07:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:09 +0000
Files and hashes:         1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: 6M9rTKYWgAkHF1/GBxy5B9vlwmCwDpY/G4yWQgUEh8U=)
                          2: Vp9zMJZ7cHH8T-q0YimFmb3cs6c.roa (hash: buD9UiHiGplAujptNaXrQomuCm+Wtm0wjSMGQqSvFks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:d1:9a:bb:1c:8a:89:15:31:99:0d:34:88:d3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
        Validity
            Not Before: Jun 13 07:01:09 2026 GMT
            Not After : Jun 14 07:01:09 2026 GMT
        Subject: CN=39c8fabab1964b2c85fc15ea4d047f4cca43d5d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:a2:5b:47:65:ad:ff:d9:f4:64:27:a4:92:
                    f5:58:ac:be:74:f2:e5:38:76:95:51:12:62:16:77:
                    4f:92:ac:96:20:a7:fe:f7:e4:70:c6:ab:9b:d4:7c:
                    8f:b1:c3:43:5e:81:3e:8c:8d:5c:5b:3a:7d:73:9d:
                    a4:d6:6a:d2:99:56:50:b2:84:2c:3e:cb:29:44:f5:
                    38:31:44:42:2a:86:52:b7:0a:5c:66:55:48:84:43:
                    47:ec:af:64:bf:0e:d8:d3:b8:84:0b:41:08:0f:30:
                    f1:64:b7:a9:10:fc:57:0f:37:32:61:05:9b:1a:75:
                    62:f8:91:be:7d:7e:81:a1:8e:64:59:bd:18:d1:b8:
                    60:50:28:9b:f0:a4:11:aa:49:b8:4c:30:88:bd:87:
                    6c:fb:6a:4a:cf:bb:f9:d5:d0:57:e6:bb:10:16:06:
                    c0:4f:39:34:c2:a5:3b:3f:33:94:8f:9b:f4:99:d2:
                    41:f4:61:1a:07:ce:56:a9:64:ec:d4:4c:78:31:7e:
                    8b:2d:41:e4:70:54:09:4d:56:19:3d:5b:40:7b:b5:
                    66:5b:9f:a6:60:94:f1:c1:14:9c:9c:16:ba:30:45:
                    aa:ee:24:17:00:7c:d0:6e:b1:0d:26:c9:18:03:e7:
                    43:b7:fa:2f:24:30:fa:e8:07:85:dd:aa:37:be:1c:
                    33:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C8:FA:BA:B1:96:4B:2C:85:FC:15:EA:4D:04:7F:4C:CA:43:D5:D3
            X509v3 Authority Key Identifier:
                keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:02:fc:7c:d3:82:83:d6:70:88:b2:57:d9:b1:74:c9:41:00:
         da:98:26:56:d7:06:e6:37:ad:de:c8:41:41:17:c2:a2:80:e1:
         8c:eb:fd:f8:22:ef:9f:e1:f7:94:b1:f8:92:66:f2:eb:38:9c:
         e6:67:5a:16:33:f5:90:cf:f5:f9:50:a9:af:ae:35:7d:4b:01:
         8b:89:7a:c5:46:dc:8a:d1:a8:93:b8:2d:52:9f:cf:32:d8:c7:
         c0:e3:bf:78:a8:ce:9e:ce:0e:db:56:1e:2a:c3:ca:82:87:27:
         ab:b2:9c:6d:02:fc:94:b7:c4:81:29:fb:29:de:29:df:b7:d3:
         7c:2a:fc:0d:4a:38:6f:a3:56:08:44:da:6f:9b:a8:cd:27:f2:
         65:64:ac:00:27:27:ec:4f:75:7a:65:a5:23:bb:21:de:21:35:
         e3:a1:a0:1d:9a:3b:c2:e3:ec:ae:e9:b9:f1:82:ca:9c:d1:dd:
         7a:9f:75:88:90:ea:ba:50:f8:df:ef:7e:22:4f:11:b5:f6:b1:
         c2:7a:4d:79:e2:d3:a7:5b:a6:18:2a:6f:11:17:57:16:0d:ee:
         60:8a:d5:24:29:80:6f:3e:2e:f4:e5:6a:e8:ba:24:e6:d7:4e:
         c3:b9:bc:93:28:e4:3a:85:39:b2:64:72:84:f9:6a:09:f3:e7:
         db:76:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:30:58 2026 by rpki-client