Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
File:                     1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft (raw, json)
Hash identifier:          Dyj5qAsEmNUEfqyrDTQVWmkehwFa9j0JIn0VaPLDo+U=
Subject key identifier:   FF:E4:BC:E2:6B:E1:0A:35:C7:9D:DD:91:BB:17:60:FA:DA:3E:A1:C0
Authority key identifier: FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24
Certificate issuer:       /CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
Certificate serial:       019EC224304A6E80C0B8EBB5902689A66AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
Manifest number:          1994
Signing time:             Sat 13 Jun 2026 18:00:11 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:11 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:11 +0000
Files and hashes:         1: 1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl (hash: wqcFqr9XmVy4WElyN4T21Ai3V89QGRmZLrWeD9e7CZo=)
                          2: 9DQTs2wKqScndspLuFL690S9C10.roa (hash: srpl4qi7sPv0BZnzMRCi4rqUA6OuywpyeD8PiEQVVPo=)
                          3: Uznpkkv0JYkSUm9kbpD4n2vwDL4.roa (hash: 88Ax8PWskGYROIxixKAI4HTq+EJ3yI4/MFKViDiNQbE=)
                          4: fRcV96iXGKdoyjVRdPHrGAownRM.roa (hash: IKkVCoYycSpKuhTwuB1p341N4mBMfqOr4DjrshXk01c=)
                          5: q-8noEh6b2f7clZvsd5WphsHq0A.roa (hash: Pn5ZPx0J/yGGt821PM9wYpMm6lTxTXU+s7PYclcgTP8=)
                          6: r3EiLYHevbO0Th1WEvhzW1gW05s.roa (hash: 003jzFHjDPB1TeNPUDTQBfy40dYt4zSE44vlLncCqQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:30:4a:6e:80:c0:b8:eb:b5:90:26:89:a6:6a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa3d0bc11b29da44ad57304c3f8568870a019c24
        Validity
            Not Before: Jun 13 18:00:11 2026 GMT
            Not After : Jun 14 18:00:11 2026 GMT
        Subject: CN=ffe4bce26be10a35c79ddd91bb1760fada3ea1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:7e:8a:c3:f7:c4:a7:62:8e:2e:78:97:62:
                    94:37:e5:22:2e:b8:b0:b3:e4:05:90:e1:97:3c:ba:
                    0d:1f:25:05:89:e6:e8:14:dc:6a:63:07:4e:7d:49:
                    f5:e6:44:0f:e9:71:05:7a:bd:da:a9:17:0f:56:40:
                    11:85:0a:82:f2:0d:7a:95:0f:bc:68:a7:5a:2e:75:
                    9e:42:c7:31:bf:1b:16:4d:e0:fa:0e:92:58:e7:89:
                    75:74:15:31:2f:6e:4f:05:1b:67:72:33:e0:f8:67:
                    23:15:de:8f:94:46:5f:46:6b:f1:b4:60:bf:0f:2d:
                    aa:c2:28:02:83:40:15:39:52:1e:0d:38:92:30:b1:
                    9c:7e:3f:3b:5c:07:d2:94:35:98:3a:d7:1a:10:c7:
                    b3:08:9f:d3:21:75:fc:90:a9:86:cc:c8:bd:77:eb:
                    39:c1:e2:bc:ad:78:03:19:de:15:0d:51:a9:91:7e:
                    78:c8:b6:c0:41:74:8e:84:99:84:ff:1e:0d:d2:69:
                    52:db:60:30:2a:24:82:f7:bb:03:eb:7c:2e:a5:b4:
                    54:02:1d:e9:53:b6:7e:05:a3:1f:02:9e:1d:26:66:
                    eb:c0:5b:ab:96:2c:ce:50:97:0d:9e:80:8f:e1:6c:
                    9f:e2:70:cc:1e:f5:75:68:a1:c1:ce:45:bc:33:41:
                    1e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E4:BC:E2:6B:E1:0A:35:C7:9D:DD:91:BB:17:60:FA:DA:3E:A1:C0
            X509v3 Authority Key Identifier:
                keyid:FA:3D:0B:C1:1B:29:DA:44:AD:57:30:4C:3F:85:68:87:0A:01:9C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-j0LwRsp2kStVzBMP4VohwoBnCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa6629-d149-4197-a315-d21071ef735b/1/1-j0LwRsp2kStVzBMP4VohwoBnCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:73:27:d6:b3:1a:99:f8:5b:b2:ea:0f:bf:1a:2d:66:05:db:
         8c:7b:00:1f:d5:e6:05:07:85:fe:94:dc:57:31:1c:3c:be:b8:
         79:0f:84:ec:52:68:d2:f1:46:ae:eb:61:59:95:f4:7b:22:f3:
         84:af:70:58:f7:52:3a:a0:2b:8d:81:dc:85:82:28:d8:62:37:
         5e:a2:2e:f4:03:e6:dc:80:27:1f:0c:2e:7e:b8:54:d5:1b:b5:
         0e:76:1e:c6:b8:02:06:8b:d7:a6:2c:f7:b0:61:6f:9c:92:64:
         8d:e3:ed:68:17:0a:e8:15:c9:2f:b7:b9:b2:e0:39:24:2f:fd:
         60:02:fd:d8:73:e4:03:c7:6e:f9:31:81:67:9e:b4:78:a8:e5:
         9b:0c:27:8a:58:81:82:c7:f5:00:05:b3:f9:0e:84:61:49:f6:
         55:7a:ae:74:07:6d:23:2f:5b:1b:88:de:95:25:b4:6b:9a:5e:
         d7:f3:f5:e3:62:78:44:5b:64:6f:17:5d:5e:4e:e2:48:aa:c4:
         1d:27:27:9e:7c:3b:dc:e8:01:b6:43:7d:b7:ac:c1:83:ff:f6:
         e7:0c:91:9d:22:89:f3:2c:e1:af:48:2e:16:8a:12:a6:12:1c:
         2b:5f:87:81:a1:c8:d3:6e:e9:fa:3c:06:dc:48:83:29:df:3d:
         da:da:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:11:09 2026 by rpki-client