Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File:                     cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier:          iu1tIQWonx8+Iw6eYhK7XQYTTADaNPlumcBqHiX6yXk=
Subject key identifier:   93:E4:2D:04:9A:36:EA:C9:02:BA:1A:9C:D0:4B:0C:1D:5C:D5:BB:D3
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer:       /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial:       019EBF9167EBA253CB690F40F0E0B9677C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 06:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:37 +0000
Files and hashes:         1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
                          2: 9-uYpBrZ0SnlXEdYG-rWZOkX4-8.roa (hash: ch9SwzgHwXntgNAkT37G/8PeEwHz84mvTnudFL4bbYg=)
                          3: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
                          4: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
                          5: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: V1Md0BqIRGF+ChWpFxdu+t0/oFRxiX53/B5IWPVsDps=)
                          6: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
                          7: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
                          8: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
                          9: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:67:eb:a2:53:cb:69:0f:40:f0:e0:b9:67:7c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
        Validity
            Not Before: Jun 13 06:00:37 2026 GMT
            Not After : Jun 14 06:00:37 2026 GMT
        Subject: CN=93e42d049a36eac902ba1a9cd04b0c1d5cd5bbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:ad:6c:80:bd:2b:8f:fd:b5:4d:21:35:73:
                    4b:c3:4f:ae:67:21:e3:fd:36:a5:ab:b7:83:f5:be:
                    4a:d7:c4:71:46:97:61:9c:2c:1f:d8:ac:fb:bc:db:
                    88:dc:83:fc:8d:0d:f0:3c:95:71:a7:d9:8d:a0:b4:
                    f4:a6:d1:60:f9:fe:ab:65:4f:31:d1:05:42:ca:d5:
                    b9:3e:94:e8:e2:04:16:00:bb:ed:c8:de:8c:87:b5:
                    a8:fb:5a:0e:7d:03:cb:33:c6:06:9b:06:c9:59:9d:
                    de:33:a5:b5:a9:1b:05:fe:7b:11:d2:98:ce:71:50:
                    49:b2:6c:d6:14:c9:50:f5:e8:a8:db:80:c8:0c:9a:
                    bf:73:3a:72:12:bf:c7:39:c8:8e:f5:8c:21:44:a1:
                    d7:df:bd:80:d3:6c:ff:bd:b0:77:ce:3d:78:c4:da:
                    2e:12:6c:8e:09:94:59:df:df:cc:bd:52:f8:ca:f8:
                    fa:a2:39:a0:fe:d4:48:48:57:b1:27:c6:15:e2:28:
                    82:0d:76:f6:f6:80:a7:29:f5:8a:d6:a2:30:7c:19:
                    20:b4:ae:f0:54:f1:2a:14:2c:0c:01:c0:fc:d2:14:
                    af:e1:a7:d2:64:71:a6:54:ef:e6:a5:90:02:73:bd:
                    b4:b7:e7:95:e8:0b:2e:15:72:cc:b7:c4:d5:4b:63:
                    02:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E4:2D:04:9A:36:EA:C9:02:BA:1A:9C:D0:4B:0C:1D:5C:D5:BB:D3
            X509v3 Authority Key Identifier:
                keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:82:0a:77:53:08:c1:bc:cc:11:de:ad:74:3b:d3:c1:98:
         78:30:95:51:ba:ce:7f:d4:32:6c:59:ce:f8:86:21:ff:cc:6d:
         12:e4:05:74:3b:a8:8a:b1:6b:46:60:b6:b5:a8:ae:7f:08:c3:
         f5:63:f6:8e:d6:da:2c:fd:3a:c2:3c:51:5a:28:0d:bd:a4:b9:
         4a:2c:4b:ec:86:5b:9f:43:67:5f:59:b3:99:b1:fe:69:26:0d:
         d5:59:15:dd:12:51:10:41:76:c5:84:5e:43:ce:e1:e2:67:7f:
         8b:1d:4d:64:c4:98:b7:98:55:d4:b4:71:8f:00:9b:2b:cf:5d:
         ad:7a:c2:8e:d7:66:55:d9:15:47:e5:c5:c4:45:2e:57:e1:49:
         c1:4c:4e:46:54:e5:52:8f:33:80:3e:df:be:73:50:92:21:9f:
         ac:ea:eb:c3:a8:ce:bc:0e:cb:b8:7f:fc:6c:9b:ff:e9:26:d2:
         e2:a5:3d:49:7b:e4:df:68:ea:12:e8:e2:76:f1:6f:06:dc:a5:
         d5:31:42:5b:85:b2:f1:56:86:7b:44:41:db:b1:cc:38:09:86:
         84:5b:1f:16:08:72:2d:f6:b2:ca:f8:9b:11:18:33:be:54:2f:
         9b:11:be:c0:94:38:7d:2c:86:ea:42:4b:b0:c4:f4:90:10:45:
         ac:43:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:06:54 2026 by rpki-client