Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File:                     rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier:          1/avZ/4oX2+4xP+16Sjfak87QudTWwsflSa0i/jysqo=
Subject key identifier:   41:A2:28:08:15:9E:F5:CD:03:8E:82:3D:30:1D:4D:16:FD:5A:1C:BC
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       019ED4CFB8C5847C5B9575ACD21F1DF52A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number:          0D26
Signing time:             Wed 17 Jun 2026 09:00:43 +0000
Manifest this update:     Wed 17 Jun 2026 09:00:43 +0000
Manifest next update:     Thu 18 Jun 2026 09:00:43 +0000
Files and hashes:         1: CXD8wfMhKiKiO997lKcwfqvgnd4.roa (hash: GXzecNWlAWU/oBfDZ4cMgGfToo/UFOLMCS/xikLLiZA=)
                          2: Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa (hash: rf5S758DEbKW96IfUMXXqn9C0gkyLzbP4cr3lVYPPio=)
                          3: p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa (hash: hdqNSuQrQNGkaTv7LpPhrSIwMr6CxzgGsrUQLxZoMvg=)
                          4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: +v1wBy8L/TsKEpO7Z3U/jDmL6vCYwI1j21QArZ3HRg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:cf:b8:c5:84:7c:5b:95:75:ac:d2:1f:1d:f5:2a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Jun 17 09:00:43 2026 GMT
            Not After : Jun 18 09:00:43 2026 GMT
        Subject: CN=41a22808159ef5cd038e823d301d4d16fd5a1cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:34:fd:52:1b:cf:07:95:ba:ea:61:83:82:
                    7e:4d:4c:a4:83:21:79:6f:15:0e:3b:07:d4:ac:13:
                    ae:ef:03:c9:6e:3a:ba:6a:8d:5a:e6:f0:82:20:b0:
                    5a:fb:1b:3d:f8:77:70:58:40:b2:eb:6c:5a:f5:21:
                    2a:07:f8:53:97:9b:20:21:5b:f6:ac:81:84:98:d0:
                    fe:5a:4f:9a:b6:39:14:df:b7:35:6d:de:a8:50:83:
                    23:36:e9:4e:26:7d:58:a2:d7:64:32:13:6b:7a:1d:
                    8f:32:70:17:dd:5f:d0:37:75:ce:e4:69:91:24:c7:
                    c0:84:8e:92:3a:55:58:1e:f6:ab:9f:e9:f0:65:75:
                    cf:fd:80:08:8f:a1:d2:b9:5b:97:88:2f:e4:63:9e:
                    de:08:78:f0:30:6b:81:58:bf:15:86:56:e7:6f:0e:
                    58:6e:23:fa:c4:ee:c7:7d:41:23:39:ad:b6:28:4c:
                    fb:a3:78:f0:8a:15:12:43:96:b7:98:a9:9f:8c:f1:
                    93:32:8d:eb:d7:df:92:40:f6:cd:d3:7c:2c:4e:f4:
                    f0:7e:76:d0:b9:0c:a6:ef:0c:fd:f5:46:81:96:7f:
                    75:86:12:8f:2c:fa:46:fd:98:36:c9:10:a2:20:3b:
                    31:8a:18:77:5b:33:d3:d2:7d:30:36:e8:af:5b:66:
                    43:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A2:28:08:15:9E:F5:CD:03:8E:82:3D:30:1D:4D:16:FD:5A:1C:BC
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ce:96:b7:e7:69:05:ef:6a:a6:70:bb:2f:7c:c2:f3:a3:62:
         59:fc:88:13:13:76:f6:a2:80:56:7b:eb:e7:b3:97:42:da:99:
         7d:cb:7a:1a:4e:a3:ab:b0:47:ea:e8:96:89:80:10:f7:dd:99:
         1b:f6:ea:bc:48:00:e7:e7:37:8e:39:33:a9:5a:63:1d:22:9b:
         1b:60:32:44:ab:a8:b4:03:26:7e:19:c6:07:c5:56:a3:b6:e4:
         13:64:39:c0:3d:df:95:39:07:88:f1:0b:1d:8e:5f:25:bf:4c:
         09:8e:5d:01:24:5a:5d:99:78:b7:20:ef:a7:1e:09:fa:bb:81:
         be:2d:0d:c8:94:b6:0f:a2:92:5e:17:fb:67:a0:9f:f4:44:90:
         eb:f3:e6:8f:25:7b:07:97:e4:63:fd:65:71:37:cb:1b:e0:12:
         6e:d6:0d:f4:d6:0e:bc:4b:0b:de:73:5e:e5:0c:c4:db:b6:21:
         5f:18:d6:45:b9:4c:b4:f1:5b:62:52:2e:3f:bd:fb:b8:b0:d5:
         4e:1e:3e:ac:66:4f:65:c8:72:1a:40:04:c1:f0:28:ca:02:b7:
         ba:47:15:57:65:2d:6d:de:e9:c9:fc:82:aa:b2:54:21:86:7f:
         b7:d0:c1:ee:41:88:dd:15:31:c3:c8:81:2d:62:e2:8c:cb:61:
         d0:0e:71:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:41:12 2026 by rpki-client