Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
File:                     _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json)
Hash identifier:          pWSli6U/30d9aWRRnnVG8hcD+Q3dPzPJe6sLrXuYvGA=
Subject key identifier:   C4:10:EF:12:56:45:DC:3D:F3:CA:6E:8C:19:28:68:7C:33:F5:5E:C0
Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
Certificate issuer:       /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Certificate serial:       019EC25B6EE1798F0F2939B24BE97DA23616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
Manifest number:          0160
Signing time:             Sat 13 Jun 2026 19:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:32 +0000
Files and hashes:         1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=)
                          2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: wx2sukS8K+0jSZQHWAlb1dexNHRB8ZL/oqQ0sWQIzY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:6e:e1:79:8f:0f:29:39:b2:4b:e9:7d:a2:36:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
        Validity
            Not Before: Jun 13 19:00:32 2026 GMT
            Not After : Jun 14 19:00:32 2026 GMT
        Subject: CN=c410ef125645dc3df3ca6e8c1928687c33f55ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:2f:77:a1:34:00:9a:fe:1f:6f:2c:82:e2:
                    e0:69:a7:69:ab:b7:b4:ca:b8:d2:00:ad:1a:7d:e0:
                    5d:0d:a6:42:19:1c:73:07:98:b0:35:0b:6c:0f:11:
                    37:19:90:71:9a:d6:16:1b:fb:85:ad:1f:77:bb:9c:
                    35:26:20:2f:22:d4:3d:84:6b:35:fc:a3:9a:a6:04:
                    b6:e6:f5:02:58:d0:0b:98:e4:b3:fd:34:e4:0b:77:
                    9a:3e:fd:02:d0:70:bd:33:44:96:60:ea:8e:69:14:
                    a1:0e:5c:14:77:8d:74:9b:75:48:cb:b7:a1:66:5d:
                    26:99:0b:05:d4:48:73:15:72:5a:45:dd:bf:88:99:
                    b7:6d:a0:eb:7b:13:19:2e:cd:a9:e5:ee:02:a4:e9:
                    3f:2e:3d:e0:5d:af:e8:a0:a9:6b:69:32:9c:ec:f7:
                    d4:0b:22:ff:a9:c5:ae:71:c5:3b:ed:bb:40:65:a2:
                    9e:bf:f0:a3:eb:be:0e:e0:a8:34:26:47:81:60:27:
                    fb:0f:3d:94:59:eb:59:9a:5a:86:0b:d0:47:fc:b3:
                    00:81:af:4f:96:aa:34:83:f5:9c:2e:05:9c:b2:ee:
                    78:f4:01:cd:a0:bf:93:33:37:43:8a:ec:0b:db:c2:
                    78:e3:7c:29:eb:7d:a6:56:4e:dc:6e:ad:17:a0:59:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:EF:12:56:45:DC:3D:F3:CA:6E:8C:19:28:68:7C:33:F5:5E:C0
            X509v3 Authority Key Identifier:
                keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:66:e5:21:36:7e:dd:35:f7:9a:c2:71:2a:ca:23:52:b3:71:
         b4:fa:47:92:9b:9a:94:15:23:f1:1c:e4:53:7d:32:1b:a1:6c:
         d4:8d:6e:7b:eb:62:8f:e4:af:a4:2f:b2:e1:6a:cf:0c:d7:45:
         9d:3f:22:4b:f9:b0:e9:41:02:c0:dc:f2:cd:24:3f:42:c0:80:
         fa:b9:c4:11:74:5a:02:86:c0:4c:b6:fe:68:62:0a:a4:7d:ab:
         df:3a:0a:fb:7e:c8:5b:fc:4f:12:a8:12:85:04:0e:77:ef:f0:
         57:33:c5:4f:d0:62:c6:d3:4b:6d:ea:20:e3:80:a0:d5:61:ab:
         ab:cb:44:75:fd:2d:e5:a9:b1:91:ff:db:0d:0e:5b:92:14:41:
         e3:3e:4c:66:ac:ad:af:91:74:0a:eb:74:d9:6e:4e:be:fd:69:
         0f:9d:8a:67:6c:7b:ab:4e:53:85:cd:a1:43:62:09:03:23:47:
         f7:fd:11:d4:67:00:fc:c7:05:57:a5:1b:ab:4a:f1:99:13:14:
         b5:87:bb:1c:b4:71:4b:c5:3c:73:52:34:9c:dd:79:a0:ea:20:
         b7:8b:3e:f6:5e:98:f6:4e:22:ec:7e:83:d7:33:c7:f7:bc:07:
         c6:67:05:7b:04:0f:e7:e6:23:29:ef:97:00:0b:52:87:b7:2f:
         4a:da:fc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:24:22 2026 by rpki-client