Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          HYiwXZeojcX+A/ICvRqyBS453IxA7FzbiOm9qpU2EmA=
Subject key identifier:   04:FD:C8:15:60:D0:EB:82:DA:E6:C8:8B:6C:12:70:63:3D:C9:8B:CE
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       019EC0DAAB4171C043944865388284C9B823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          0913
Signing time:             Sat 13 Jun 2026 12:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:16 +0000
Files and hashes:         1: 1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa (hash: MZz9ZW2Zi0k4HU9dqfp0ig+8Gbo1pNfmpBwGUkNoQpg=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: 0qGLvQfdIF+wpASUhSWRZ/Duofp7bi39XXtshBgaeFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:ab:41:71:c0:43:94:48:65:38:82:84:c9:b8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Jun 13 12:00:16 2026 GMT
            Not After : Jun 14 12:00:16 2026 GMT
        Subject: CN=04fdc81560d0eb82dae6c88b6c1270633dc98bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:b6:5e:8f:24:ac:d3:6b:38:1c:37:e2:98:
                    15:47:7c:1d:89:86:a4:63:9b:9c:3d:3e:c2:1a:d0:
                    9a:2a:3f:3b:86:77:26:53:1c:30:d6:ce:20:d9:eb:
                    42:da:36:b6:96:9b:48:c6:84:31:87:ee:c5:e5:f6:
                    7a:92:8c:da:f5:00:d1:68:90:5b:ef:ef:e1:61:25:
                    8e:bc:40:de:1d:4c:b2:c5:4e:27:81:23:90:a2:49:
                    ac:83:55:76:1e:d4:58:7b:cf:92:49:c6:ce:3c:5e:
                    55:b2:cf:a5:60:9c:14:91:d2:3c:a1:48:62:40:13:
                    4d:b6:69:69:36:9e:b3:5b:6a:b7:96:a5:31:56:0d:
                    b2:d7:d8:d6:df:13:47:1d:e3:bb:da:0e:55:fc:11:
                    c3:3f:f5:30:05:9e:37:2d:18:49:59:e6:b0:61:4a:
                    00:b5:20:8a:a3:2d:91:d4:67:aa:f2:05:da:7b:d2:
                    b4:f8:90:18:56:42:77:f2:a9:c9:fe:ff:f8:ff:02:
                    d2:8c:c2:cc:7d:a9:de:4a:6a:49:e5:85:7c:36:81:
                    91:3d:eb:26:92:25:24:53:7b:ee:5d:3a:3c:22:bd:
                    eb:0d:b2:34:64:f9:cc:22:8e:99:15:05:50:4d:db:
                    05:3c:c9:d8:79:3c:49:6d:9f:48:e5:f5:4b:c8:55:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FD:C8:15:60:D0:EB:82:DA:E6:C8:8B:6C:12:70:63:3D:C9:8B:CE
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:c7:f8:0c:df:c1:53:5d:7c:48:0a:0d:7c:d7:5a:ad:6c:
         8e:bf:d2:bd:a0:d8:40:32:30:8a:e6:69:d1:32:0c:89:16:eb:
         f7:a5:ae:3d:98:60:a6:1d:5d:10:2e:81:e8:bf:b2:7d:01:88:
         78:de:ef:d0:8d:4b:08:aa:33:52:09:ec:b2:7f:c3:92:a9:40:
         fd:69:3a:6d:da:ec:35:73:ac:f0:bd:85:89:d1:a0:31:8c:9c:
         1b:a2:d4:06:c4:1a:63:6d:61:5a:3e:44:f1:a8:f8:46:51:fb:
         57:b5:f2:d4:56:89:88:3a:b6:ca:14:eb:18:da:a7:1f:40:f1:
         9d:60:0f:74:63:79:32:4b:b6:1a:a2:a8:b4:5c:12:5f:74:63:
         aa:6a:84:77:16:bc:2d:55:2d:33:ea:3e:c2:e9:dd:ab:a3:13:
         25:4a:b3:9e:f3:87:f1:15:af:a7:18:32:6f:2a:cb:45:d9:f5:
         81:81:4b:fa:bd:c9:df:cd:d2:c5:42:db:45:48:3a:26:d5:0b:
         1d:3a:ca:65:59:86:3f:b1:8b:17:fb:32:6a:d8:4f:df:68:2e:
         21:7c:22:fa:9f:a5:77:81:0b:f1:fb:5a:e7:0d:74:cf:75:29:
         3a:5e:dd:1e:bf:2c:9a:49:71:4f:4b:af:3c:f4:05:e4:fb:b8:
         85:1e:be:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:08:56 2026 by rpki-client