Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File:                     tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier:          TC62ma8Bd5d7b/yamp3vnglg8l5xcDlhxWLy7rTo9Oo=
Subject key identifier:   EB:FE:56:BD:07:F2:33:D5:69:36:0E:D5:9C:51:74:6A:B8:E2:6E:DD
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer:       /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial:       019EC0DB0E748FFA61618299112C76FF7274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number:          03F8
Signing time:             Sat 13 Jun 2026 12:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:42 +0000
Files and hashes:         1: 0mP1ztpahebUSVqYXstfQVo6lU8.roa (hash: ROTZ3HoBIhGjMRa1VghM4xscpCElB4RFAaHFDBzcBcc=)
                          2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: 6B09MDvGYsAcMz4WaYXsadzknuuNnXwbxpQdYzRSYPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:0e:74:8f:fa:61:61:82:99:11:2c:76:ff:72:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
        Validity
            Not Before: Jun 13 12:00:42 2026 GMT
            Not After : Jun 14 12:00:42 2026 GMT
        Subject: CN=ebfe56bd07f233d569360ed59c51746ab8e26edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:c0:77:1d:73:dd:26:0f:0f:0e:0e:e6:a5:
                    71:87:af:3d:d9:74:bd:bb:e8:51:5d:4e:35:38:7d:
                    57:c6:e8:7d:0c:27:42:16:22:71:d6:6f:64:a0:f6:
                    88:9a:a2:5b:b0:4b:80:1e:ed:01:3a:b1:6b:da:3a:
                    11:30:3c:eb:5c:93:25:26:53:f2:b2:78:6c:61:f1:
                    eb:95:4d:23:1d:2f:cc:ae:88:b6:fe:fa:4d:e1:6e:
                    32:f4:d3:0c:2f:35:af:43:85:96:86:8e:8c:98:58:
                    6a:9e:50:42:6b:5b:2a:3f:0c:cb:a9:18:be:b5:d1:
                    96:df:7a:d0:15:5b:18:aa:73:81:6c:91:83:48:cc:
                    da:23:54:50:36:0d:5c:12:c2:d8:b8:24:1c:1f:a9:
                    74:cb:85:82:aa:c3:91:26:f4:8b:bc:05:33:21:ec:
                    e6:93:66:d3:4c:82:a0:b0:f8:ad:3c:70:64:9b:20:
                    a5:81:c0:d7:5a:92:2e:25:1d:ac:1d:62:01:e8:2a:
                    54:7a:55:88:d0:3b:d9:5a:77:17:2c:25:61:5f:8d:
                    f7:d4:aa:45:54:b1:e4:a8:ab:fd:9f:d1:a4:a9:5c:
                    a2:63:fd:7c:6a:4a:08:93:06:99:33:07:f1:0f:7e:
                    ab:25:18:bf:3a:52:ce:ea:eb:25:2b:46:9a:a6:f0:
                    c8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:56:BD:07:F2:33:D5:69:36:0E:D5:9C:51:74:6A:B8:E2:6E:DD
            X509v3 Authority Key Identifier:
                keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:64:36:49:df:13:7e:48:39:a6:b5:9d:0f:ae:9a:76:b1:5c:
         b1:44:da:1a:1f:a6:5a:d9:c0:b0:c1:01:36:fc:33:b7:91:e0:
         44:85:93:91:03:43:1b:76:fc:a2:69:e0:32:72:19:9a:90:bd:
         10:a7:8a:9b:73:21:23:4d:f4:dd:1b:4b:8b:f7:62:cb:c6:e8:
         9f:aa:b4:94:ad:8f:65:8c:2f:c3:0e:22:6c:39:2a:8c:09:c1:
         e0:3a:73:57:d4:de:cb:12:69:5c:19:f5:e7:8a:47:13:fd:7b:
         19:de:fa:f5:e6:37:45:1c:1d:59:30:34:ee:3b:1d:78:64:43:
         81:9e:fc:9b:09:38:2d:2c:9f:c7:77:59:40:e9:24:2c:d7:bf:
         2f:08:2a:00:1c:bb:48:f3:11:5d:5d:fe:69:4b:d8:3a:e2:69:
         55:bb:22:48:be:91:54:6d:4b:7c:10:92:eb:9c:14:06:66:46:
         67:bd:61:16:ac:63:22:97:a8:e5:48:e8:f3:dd:74:cf:3c:29:
         c1:0d:95:a0:a5:6a:15:23:79:5f:09:8f:e2:2e:e6:35:05:ef:
         58:a5:97:ab:6b:2f:bb:8f:5a:44:0f:d4:f2:0e:29:36:cb:4e:
         f5:85:4c:58:2e:ef:f8:a3:56:13:19:4b:f0:8d:00:f7:8c:c3:
         80:36:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:54 2026 by rpki-client