Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File:                     srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier:          1jVPOXS4Tc27SEoPIeppmOerDx+o9K5rY28sJV1eJpM=
Subject key identifier:   D8:5A:41:0E:0B:96:82:82:C6:94:56:39:29:15:22:47:DF:78:D4:84
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer:       /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial:       019ED5751ED9A0647F5A817FDCD69DE6665E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number:          095A
Signing time:             Wed 17 Jun 2026 12:01:22 +0000
Manifest this update:     Wed 17 Jun 2026 12:01:22 +0000
Manifest next update:     Thu 18 Jun 2026 12:01:22 +0000
Files and hashes:         1: Spy7lYm24U3zdnyHMnurxfa2T6k.roa (hash: JcDra+5Gb+YXgz7R5LBtufPmpQV8nA+XRnuojSfqw4U=)
                          2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: ZaURTPvDMbsYjood7R0Tk7ce37PZmDRFes5Gw5agFkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:75:1e:d9:a0:64:7f:5a:81:7f:dc:d6:9d:e6:66:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
        Validity
            Not Before: Jun 17 12:01:22 2026 GMT
            Not After : Jun 18 12:01:22 2026 GMT
        Subject: CN=d85a410e0b968282c694563929152247df78d484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ec:a3:6f:cd:f5:ff:dd:65:e9:1c:9a:96:bd:
                    fe:04:46:77:ef:62:34:fd:1b:89:ff:43:83:ba:87:
                    90:09:21:8e:03:f1:b7:4b:09:45:20:69:c8:26:81:
                    8c:4f:bf:56:d0:70:a3:a9:94:b7:c8:18:b7:6e:86:
                    24:91:64:a8:4c:7d:e9:fe:a0:5f:16:13:63:7a:d8:
                    11:2e:be:28:cd:01:f7:e2:ee:35:26:0d:12:0f:71:
                    ac:f9:98:f6:06:38:fd:9b:64:06:e1:aa:fa:17:9e:
                    1a:2a:82:f5:b9:64:73:98:ad:e2:44:e4:74:08:19:
                    7d:1c:bd:80:08:58:3c:6a:23:99:43:f7:95:b7:df:
                    63:1f:48:0d:cc:02:fe:92:f3:45:fa:33:ce:90:bc:
                    de:81:30:54:f9:41:c5:5b:18:35:9d:83:bc:2e:f5:
                    7d:8c:16:48:6d:95:57:1c:63:58:ee:85:dd:73:ae:
                    4b:1f:33:92:f8:f3:a3:59:3c:0f:a0:2f:de:aa:dc:
                    93:8d:19:72:72:bb:72:7d:7e:fd:24:02:b6:ef:e1:
                    3e:c3:47:71:9f:72:63:3c:4a:8e:cf:ae:ce:ee:0c:
                    12:90:75:91:5c:f2:e3:2b:54:f3:ad:09:23:77:b4:
                    cf:a3:70:2d:de:c0:f6:21:d8:11:dd:d2:19:5c:5c:
                    49:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5A:41:0E:0B:96:82:82:C6:94:56:39:29:15:22:47:DF:78:D4:84
            X509v3 Authority Key Identifier:
                keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c3:b4:ea:4c:6f:4b:e9:31:ba:97:6d:33:ed:07:9f:34:ac:
         d2:14:93:49:94:36:13:55:30:04:9c:45:a6:4b:67:fa:40:0d:
         6a:19:92:a7:28:98:0a:ab:78:43:e5:c3:87:79:18:19:87:f8:
         6a:a9:bc:25:e4:0e:63:0e:7a:5c:43:45:7f:69:ec:d4:9e:a3:
         4d:f0:1b:06:8b:b3:68:f6:1e:44:36:6d:dc:5f:33:2d:8f:f1:
         03:0a:7a:6e:33:fa:4c:2d:4f:3f:bb:db:37:d9:f9:33:a1:22:
         18:22:47:5b:62:73:2a:75:da:91:2c:b6:8b:66:43:42:f8:22:
         3c:17:5b:23:fb:4d:eb:15:44:b9:a4:35:8c:9c:42:f1:2b:e5:
         7c:d5:d5:46:e3:3e:68:d4:c9:0e:be:2e:76:fa:62:14:d1:f8:
         9f:fb:ba:24:2b:70:49:04:5d:0a:a3:10:66:d3:bc:e7:f3:9f:
         a8:d2:bd:4a:67:5d:68:cd:f1:16:ff:a1:0a:64:a6:11:8a:36:
         35:c9:7f:77:69:f8:9f:d5:fb:63:ab:51:d9:72:87:2b:e8:e0:
         8f:a7:0c:cf:53:ea:c5:cf:b7:80:c6:f8:5c:92:24:a8:d2:ff:
         63:74:3d:94:0c:8a:5d:63:e9:eb:9c:46:8e:a6:5a:9f:2a:79:
         57:b2:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 18:02:25 2026 by rpki-client