Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File:                     sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier:          7GrjOpcAEF+uWxJj1nmDO5YXwlAHtbNM+vYB0xnKMwo=
Subject key identifier:   DA:70:71:E9:0E:06:48:21:FE:79:17:2C:53:50:76:71:26:44:82:27
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer:       /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial:       019EBE7EAF871738F446C919B9349F5AAB05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number:          0D05
Signing time:             Sat 13 Jun 2026 01:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 01:00:33 +0000
Files and hashes:         1: 41uTXUE3-Tyf_FkkFMPgrkYthMo.roa (hash: 9Aolk2ywdWY79USk6tBgdgUvgIQSTS6ltMiW7geqE8M=)
                          2: R7qJzjI_I0ZyfxtzpHAwF6z7ftA.asa (hash: JOhc4+TJAT9y3euT9g0kxLqAA+8lYprveqxEcA29tPI=)
                          3: WVWzNQBj7seo8FjvmhSj1kI6sP0.roa (hash: LoWAtshb113BC94Wt1I33mRTXma6WTQ9kgqJ5YaRPcM=)
                          4: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: VZ00NgST5Bo4EmGyj+p+U9gL2C4i+bkZNIc9W7sc9Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7e:af:87:17:38:f4:46:c9:19:b9:34:9f:5a:ab:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
        Validity
            Not Before: Jun 13 01:00:33 2026 GMT
            Not After : Jun 14 01:00:33 2026 GMT
        Subject: CN=da7071e90e064821fe79172c5350767126448227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:1b:06:ee:8c:aa:22:28:f8:35:91:86:78:
                    a4:68:a3:74:68:86:92:d7:29:92:8d:c3:90:4c:c2:
                    df:04:cf:46:06:e2:b2:92:aa:05:d3:0d:6f:ab:5e:
                    7f:30:a3:9e:f1:3e:0d:2a:1b:6e:64:b4:19:f8:c5:
                    4f:10:30:b2:0e:97:4d:d3:8f:f4:bb:21:d0:83:c9:
                    73:da:c9:26:11:ad:64:e5:db:f9:61:83:02:18:30:
                    ef:2c:b6:f1:8c:b6:86:e9:c1:51:ec:37:f6:70:fa:
                    52:26:71:ec:14:52:69:fa:a4:26:c4:92:f1:36:9f:
                    b7:b6:d0:00:30:6f:f1:d3:44:de:aa:c6:b8:6e:8a:
                    ea:27:5b:06:6b:83:80:5c:86:50:87:72:c3:2d:df:
                    3e:45:33:75:3f:87:5e:cf:4b:88:e2:06:ff:d1:18:
                    a6:26:73:8d:89:ed:7d:b8:a3:8d:e5:33:9e:3d:a1:
                    8c:fc:cc:76:a3:de:a6:7d:8b:88:29:00:f8:34:d7:
                    e7:b8:44:2b:fa:f6:71:5d:78:33:9c:bf:b4:0e:ba:
                    11:fc:2d:3a:cd:0b:99:db:e1:39:d3:2d:93:f7:71:
                    36:0c:82:c8:8f:3c:a2:47:14:b6:41:cf:54:8d:cd:
                    e8:1c:ed:48:d6:1d:4d:07:ba:df:37:f9:fc:9d:38:
                    88:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:70:71:E9:0E:06:48:21:FE:79:17:2C:53:50:76:71:26:44:82:27
            X509v3 Authority Key Identifier:
                keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ca:29:08:03:3f:0e:1b:65:62:fd:e0:81:fa:e5:7e:41:f0:
         1b:5f:cd:cc:d8:59:0d:de:8c:ce:67:5a:11:55:34:b8:c9:8a:
         ba:33:ab:b2:8f:21:d8:44:dd:ce:98:d2:cf:84:0c:0f:2a:4b:
         15:8b:2b:c3:cc:db:5d:57:33:01:1b:88:ed:2b:f5:12:19:67:
         46:08:ab:ba:88:1c:f7:a1:d1:cb:8f:d9:11:b5:4b:de:f4:ac:
         2c:95:fd:55:48:3c:5a:51:f5:04:8b:fd:40:7e:02:f0:0f:78:
         bf:28:a4:6c:5b:8a:be:c8:88:10:0f:0c:ae:ec:7f:a2:63:70:
         62:27:c5:24:6f:a0:77:96:66:3a:37:33:94:7f:10:b6:64:3f:
         2e:ab:fa:6a:fe:a9:7f:ae:9b:31:ff:07:70:1c:40:d6:66:4d:
         cf:46:2b:48:80:de:e8:af:49:59:d1:75:0b:67:4a:96:70:1b:
         d1:29:d4:e7:bf:97:8d:3a:4f:64:f2:4c:d2:d7:c1:33:f8:55:
         ec:df:69:74:0b:ce:1e:a8:98:71:68:ce:f8:bd:ac:1d:2e:f8:
         61:6d:a0:98:4c:c0:54:02:83:19:74:71:2a:5b:0f:9e:ff:a3:
         a7:05:bb:16:c0:27:dd:6e:fd:9a:bf:2d:97:24:7c:65:0b:2f:
         fd:d0:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:32 2026 by rpki-client