Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File:                     Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier:          52aZ2upq0laP4v9iEd7iTYbcQshzQsEWWNdsDXS7pxw=
Subject key identifier:   0A:27:6C:24:8E:05:79:9F:86:51:EC:02:1C:C5:A5:84:13:12:97:48
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer:       /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial:       019EBFFFB004686B8AFCB10C9E9E33868BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number:          1963
Signing time:             Sat 13 Jun 2026 08:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 08:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 08:01:05 +0000
Files and hashes:         1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
                          2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: aid0/99xS05j09XwwVNmgW+LkLAmxaZPhtJbeyaXd7U=)
                          3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
                          4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:b0:04:68:6b:8a:fc:b1:0c:9e:9e:33:86:8b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
        Validity
            Not Before: Jun 13 08:01:05 2026 GMT
            Not After : Jun 14 08:01:05 2026 GMT
        Subject: CN=0a276c248e05799f8651ec021cc5a58413129748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d8:44:7f:f1:90:5e:f7:33:d7:16:f8:8d:8c:
                    9c:bd:30:6b:2b:7d:06:5b:d3:e3:6c:83:d0:40:4f:
                    21:74:a8:53:37:32:cc:bb:42:44:9a:06:9e:26:e9:
                    05:0f:0e:3a:1d:e2:02:8b:24:a1:bd:9d:6e:ab:aa:
                    45:45:67:90:12:f8:9a:f3:a3:4d:06:3d:aa:97:86:
                    41:3b:b6:ae:ab:71:4e:7b:62:c3:36:8b:72:cb:c8:
                    bf:d2:45:9f:fc:a4:b7:60:9c:76:bd:2f:88:92:46:
                    00:ff:d7:18:7c:91:86:d3:83:07:32:a8:f5:95:12:
                    08:a9:e7:a6:87:51:bd:10:ab:a4:bc:9c:3e:22:23:
                    fa:8b:32:75:07:1e:ce:57:14:f3:46:6a:3d:2e:05:
                    1b:a8:6b:f8:6c:0b:60:f0:08:62:19:9c:3a:e9:f7:
                    8a:ee:f0:e7:09:f4:e7:52:6e:38:cf:1a:7a:25:a7:
                    be:57:9c:0f:2c:5e:29:1b:06:1f:ff:ad:7c:c4:d1:
                    30:4c:80:fc:8a:ca:38:a4:33:25:1d:25:c4:7a:da:
                    92:67:b4:74:2d:1a:e6:a2:56:de:ea:7d:5a:b4:64:
                    ca:0f:c0:8e:7e:ed:06:d0:53:4b:37:1a:1d:76:26:
                    fe:fa:14:4b:b5:37:3f:5f:40:fe:db:7c:94:b2:37:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:27:6C:24:8E:05:79:9F:86:51:EC:02:1C:C5:A5:84:13:12:97:48
            X509v3 Authority Key Identifier:
                keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:bd:bf:d5:34:18:65:64:06:8a:06:c4:ba:f8:6f:63:c4:a0:
         30:aa:29:d9:fa:50:38:86:7f:98:77:04:77:d2:df:83:58:d4:
         e2:26:2f:c3:4a:20:37:0b:ab:f0:03:d0:9b:05:df:be:af:09:
         f6:53:ec:6a:dc:10:c1:05:da:80:14:8c:1e:55:dd:85:a7:77:
         07:89:01:e6:c6:3b:5e:69:26:ec:c3:ce:0a:cc:63:05:d5:31:
         46:60:4a:8e:33:1b:e5:5f:e1:a0:e7:08:d5:0a:d5:c6:04:84:
         1e:97:35:02:d7:98:71:96:e8:82:73:8a:59:06:b3:2d:ae:b4:
         21:43:59:9b:20:80:1b:62:52:74:bf:10:32:9b:71:50:f4:e0:
         c9:41:ac:aa:11:c2:f7:ef:52:29:b0:c2:a5:04:c2:28:bf:78:
         c8:02:a9:24:f7:31:ef:6d:bf:10:a2:59:cf:35:2f:0c:ab:65:
         fe:ed:b1:97:6c:f2:6b:78:4b:09:a7:4f:0b:99:7f:09:52:ae:
         fe:99:31:56:ae:22:56:de:25:54:0f:5b:65:a8:ac:8a:ae:d3:
         b8:76:9c:3c:09:4a:48:91:f7:59:5e:c5:d5:14:a2:6d:c8:28:
         67:95:45:1c:25:4c:fb:c8:63:31:7e:bf:02:e8:7a:5e:64:3b:
         80:0e:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:04 2026 by rpki-client