Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          ibJlWds43AiBMp9Bo7IyEia/tQHiS+YoavwCuN3TeIs=
Subject key identifier:   2B:7B:3A:C9:3A:E5:54:D8:3F:AE:5F:D9:D5:37:C4:6D:A4:C6:A6:F4
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       019EBE114F91E378B9555DB8C3A5D151D1A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          1962
Signing time:             Fri 12 Jun 2026 23:01:05 +0000
Manifest this update:     Fri 12 Jun 2026 23:01:05 +0000
Manifest next update:     Sat 13 Jun 2026 23:01:05 +0000
Files and hashes:         1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: rDHqtKKD3Em/+xxL7oytUs5UswUSe28b9rmwEgkDxCs=)
                          3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
                          4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:4f:91:e3:78:b9:55:5d:b8:c3:a5:d1:51:d1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Jun 12 23:01:05 2026 GMT
            Not After : Jun 13 23:01:05 2026 GMT
        Subject: CN=2b7b3ac93ae554d83fae5fd9d537c46da4c6a6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:aa:51:7d:27:97:0a:2a:3a:5e:b9:5d:f8:38:
                    c9:91:db:2e:ad:bf:23:55:fd:eb:90:c5:c7:5a:34:
                    0c:f4:45:fb:e7:76:f2:72:99:9d:00:da:a8:bd:b6:
                    06:bd:04:a1:c3:9f:57:0f:d8:5d:79:e2:b4:70:90:
                    19:9e:fb:a7:79:b2:d4:9d:6c:f3:74:4d:2a:95:fa:
                    13:57:f5:47:90:03:c1:09:b9:41:71:d1:9c:da:d3:
                    bb:60:ae:f8:a0:9f:79:de:4a:5f:d8:c5:fa:30:44:
                    7a:fe:88:38:0e:d7:8a:85:78:7d:a2:1e:e5:49:bf:
                    b4:55:ac:7b:93:f1:1a:89:d1:c8:49:6b:00:31:a1:
                    ca:d1:38:73:48:bd:92:fe:6e:f2:e0:32:4a:51:45:
                    c0:b1:30:f3:cf:eb:7a:f3:c4:78:f9:83:d7:4b:d3:
                    ff:08:45:76:45:3d:61:ad:ab:50:b9:b9:99:ec:f3:
                    77:7e:3c:3a:7d:57:bc:a2:4b:38:1c:d6:2b:87:d5:
                    16:12:91:da:17:f4:cf:e8:3f:aa:b4:63:63:9f:af:
                    2d:c0:4a:12:ca:72:12:91:44:91:3c:9f:eb:3a:1e:
                    ef:d6:81:29:27:fc:c1:97:f3:f3:a8:8c:a5:02:fb:
                    6c:20:0b:04:b9:33:60:bb:33:4f:8a:e6:15:34:fd:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7B:3A:C9:3A:E5:54:D8:3F:AE:5F:D9:D5:37:C4:6D:A4:C6:A6:F4
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:e5:13:d5:c4:2c:13:2e:4b:ad:22:f5:f7:f7:1d:55:40:
         d6:09:7c:c4:9d:40:aa:7d:ba:6c:64:17:bd:b4:51:bf:db:9e:
         07:e2:32:c6:de:50:e5:8a:a0:78:f3:4d:6b:c7:4e:86:b3:33:
         3f:99:53:22:7d:78:2f:22:03:a6:b8:1a:cd:a6:21:0a:85:bc:
         c6:f3:29:51:f9:c9:5c:5b:f2:4f:2e:4b:35:fe:c2:08:17:d0:
         b1:19:70:bd:aa:24:b2:49:ac:8f:ff:d2:be:3b:20:79:db:2e:
         03:f7:dc:a6:e5:e3:11:80:95:c0:e4:01:aa:ea:93:d8:b0:20:
         99:cb:e7:71:87:6a:8d:77:91:3a:08:49:e3:09:9a:e2:7d:6c:
         6c:9c:e0:fe:84:77:02:ba:e5:28:cb:44:c5:c2:a4:80:0e:1f:
         7d:90:fd:c4:00:40:f8:12:6f:24:17:60:6c:02:e1:19:fa:4f:
         d4:9a:fa:53:6f:1b:85:4f:a5:50:ba:5e:48:18:02:9d:4d:39:
         45:7b:b0:ea:74:a0:4b:ed:73:55:2d:c0:2c:af:e7:c4:0b:9a:
         a2:f3:72:d8:fc:d4:dc:ca:10:69:9b:c0:01:10:2b:90:21:06:
         a4:51:65:a0:fc:b4:fb:b2:ef:75:5c:b9:cf:6e:f3:73:80:91:
         19:66:3f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:21 2026 by rpki-client