Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
File:                     71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json)
Hash identifier:          5BmN59eJfiD4O11A08N6t90ci/lLAdY7EsEh19WJ8+w=
Subject key identifier:   33:1A:51:BB:8A:4C:29:D5:52:C5:A4:8A:84:FF:30:9E:3B:37:CD:D9
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Certificate issuer:       /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial:       019EC1123C2283DD0B73973E17C6B873DD92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
Manifest number:          15A7
Signing time:             Sat 13 Jun 2026 13:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:58 +0000
Files and hashes:         1: 2CUChmUOOT29mGMWY66DWvJh2WQ.roa (hash: zU1VWPSaWCzOeazo96kB3sWhetiBsHBnhrLCkL6ZTdA=)
                          2: 2ngTJwoTyX1Nz5fKPJKsViXxDHk.roa (hash: Ir7bv4VELFAPGwsqBM/ur+v9Fopro+iM13JltIh4cX4=)
                          3: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (hash: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU=)
                          4: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: gVCXdNProlyEDx3A3LV0u2zyEFXpFwxPGGfuw71ejYc=)
                          5: 7G49o5z8bi7Lcd53h1h0bVLCJZ4.roa (hash: xDGbGchiaLKjcl8d608rUMISo9V9+y1tYFZNtiJzodk=)
                          6: DcHyP-EvL5JB0AR6TgnEamGEyXw.roa (hash: 2EXmDj8EeuQdqWCdMyXvAF2OldfFdCBOuc9rEPVXwD8=)
                          7: OoWh-cPJxIo9-JnYWW14PlGkMmw.roa (hash: cwPQ8D+hZiBjw4HTvZt5RVfnCwIHlW6ts6eZs3ca5ro=)
                          8: SFT1d23h5s56wOshvucHEdfHMus.roa (hash: VF+VBV1f8xNTi+BzW8c6Ab0X5I99oWpbTy8oGRDDLo4=)
                          9: UkgHwb4aR-vfEVW_chFXeZM7ufs.roa (hash: EApidgvlTKfdDWwQPs4AF7dQdfTiN6dGaqCve1W5gyA=)
                          10: WGjiujLOuuOMzeq5qZIClszPW1M.roa (hash: O/EAhkWdzhGmiMAnV0b4Fh9oCWFKJcMW6EgTymaPAQY=)
                          11: Y6USBv7EsN_hgdgW0uW5KbpmRN4.roa (hash: tv5XftYxR3URBlazOVai0U6SyL0OPoC8TTkoFI5KZuM=)
                          12: cC6SDRV9V0p2_NMV4sw_ptq5Hlo.roa (hash: jEMYUPIGrPy+Y+xLvCOsQ36XF8oj9iEL636o4Kzme40=)
                          13: cJiubHQvHYR5Esd1XVcnoAH7nVc.roa (hash: FMFv+8H/z6shQKfY24LWmw315shSovkbNLpCdkTVVts=)
                          14: fhJaK5hMEBAZXRLS4-0O4aZwl2I.roa (hash: xuK8/Y3oUhvmHKsVhHkSHzhFTE1WF3HRAMrbL0YDdBA=)
                          15: fxFIclzOclkDebowO2HCdBIp7JU.roa (hash: kKrwCtFqATS4Q0FX0wGNL2DdvolnBDZchK0yi2jbTGw=)
                          16: hOLoSAjKi_Ysduv-PJ2ejNql5Ok.roa (hash: lHppC78Yz/GWXK8KxKeoOvZZKZRlVzNZc6B6F5euHEc=)
                          17: jj2LNW8T8GKo9pph6SxqykixHUc.roa (hash: OfHZuuc0mZSA8QR6HTehCLqajIIAp9QjksfzeYwDYvY=)
                          18: lfuF0jCiq554Dy69uuASsTOPZ58.roa (hash: 6OAF0vEeoAJWYtA3vCDPsWGl38QU6NBLN+OCMZmyOUQ=)
                          19: x5SrbAjZFbdB6w5M55a69sLosmk.roa (hash: FE67bVwUc7lNEUOq+r18u7T3FenYnKpS+bSln89Joz0=)
                          20: xgcIl72OMRsTXzMLl7PIGrHb2sQ.roa (hash: 2SWmpy8UdVqECkthus0V0cF6NslAcNvMaIDq36UHafw=)
                          21: yJInE-fPhdu-ABKOdKIoShinhzo.roa (hash: skD34yjii/PhcEF3U0syiUJjraUYJpJM6Jt4QrA1zs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:12:3c:22:83:dd:0b:73:97:3e:17:c6:b8:73:dd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
        Validity
            Not Before: Jun 13 13:00:58 2026 GMT
            Not After : Jun 14 13:00:58 2026 GMT
        Subject: CN=331a51bb8a4c29d552c5a48a84ff309e3b37cdd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:f4:59:00:07:f5:fe:51:38:1a:a4:51:22:
                    9c:ad:f7:01:9b:9d:92:bf:13:19:f9:cc:50:4c:35:
                    ba:96:65:64:64:ce:05:7e:2b:d5:a6:9c:d7:b2:60:
                    cf:cb:07:0c:27:cc:36:92:2c:b4:c4:a9:2f:c7:58:
                    58:d0:b1:c8:5d:4d:e3:e7:b6:01:23:a6:48:c7:1c:
                    79:74:8a:b6:65:f1:4b:f0:d4:e2:3c:cc:03:87:55:
                    82:fa:16:62:d7:cc:d1:83:85:e6:34:5d:74:b8:0f:
                    95:aa:0b:53:cc:e4:00:7f:c3:5f:ae:a3:c5:e6:8c:
                    76:0f:69:7d:25:fa:55:b9:41:cf:84:31:c1:e3:15:
                    f3:5a:21:b8:31:a1:60:e6:23:b4:14:1d:c0:97:bb:
                    5b:dd:97:af:38:99:28:63:af:63:96:09:05:2c:03:
                    18:98:99:fa:b9:72:1e:51:b2:e9:aa:76:7e:cc:dc:
                    88:20:b4:24:74:ce:45:9f:00:ec:ba:33:30:f9:a0:
                    df:ba:de:31:5c:51:e2:c4:d4:14:7e:21:12:6d:5e:
                    2a:dd:d5:7e:ad:6a:57:fc:5f:87:81:59:13:1d:e4:
                    f1:c3:c0:4a:c7:ca:90:a5:40:6f:9d:4e:55:ca:ba:
                    66:7a:92:48:46:89:89:7f:30:52:60:d3:9d:da:e4:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1A:51:BB:8A:4C:29:D5:52:C5:A4:8A:84:FF:30:9E:3B:37:CD:D9
            X509v3 Authority Key Identifier:
                keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a5:28:36:19:27:ea:fc:22:76:fd:0c:12:c9:6b:3a:86:79:
         ee:85:10:87:9d:cd:bf:0b:53:cf:5c:70:ef:d0:33:69:6d:e3:
         02:f2:1d:1d:c5:b3:90:e9:a3:91:ad:e0:18:5e:4e:a2:ac:bd:
         b6:e9:d2:ba:d7:61:7f:35:31:db:74:5c:76:22:57:b4:cb:a8:
         4a:5f:0d:42:bf:34:0c:1e:15:ac:73:93:bf:19:48:7b:d9:4d:
         cd:e9:20:5e:08:b5:73:70:56:67:b6:3f:a4:2f:f1:78:d9:5b:
         a0:c2:81:22:6c:68:99:96:0f:11:93:bd:f8:2f:8f:65:6d:53:
         b9:6a:0f:a0:87:6f:8d:b6:ad:87:50:82:c8:d7:23:0d:75:43:
         22:50:13:9c:76:16:40:16:fd:f6:a7:53:d2:3f:b7:20:ba:62:
         ba:d7:4b:13:93:af:df:5a:23:df:af:95:ef:22:1d:93:48:09:
         d0:86:b3:e6:ae:1c:34:5d:61:7b:18:81:f5:60:9a:4c:21:1f:
         27:57:f8:e7:dc:45:9c:87:36:76:43:b2:6f:52:3a:5a:49:a9:
         ff:28:0a:fa:05:15:46:2e:89:06:24:4f:e0:4f:6c:d1:75:cc:
         ff:d7:62:43:4c:0a:b6:b8:7f:62:d4:8a:0f:64:05:1e:05:af:
         76:29:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:27:33 2026 by rpki-client