Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
File:                     rF6twAMoUCNv7nVutY-_BeExa14.mft (raw, json)
Hash identifier:          fc3ci0f13cjDF/PZzIKo9iOdEorQPOq9i7AV2O3WgjI=
Subject key identifier:   3F:6F:17:5C:FC:6F:44:DB:B7:BA:A6:71:B0:CB:E0:09:0D:0C:8A:46
Authority key identifier: AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E
Certificate issuer:       /CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
Certificate serial:       019EC25C705759ACB1763286156B430D0E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
Manifest number:          1960
Signing time:             Sat 13 Jun 2026 19:01:38 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:38 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:38 +0000
Files and hashes:         1: HtxMXqqhzKqnM-81Q366LSa5VRM.roa (hash: lOeWJNKuBfP6Er8Y1VwMR1oQUbvjX1dy4GlVvc3GRBU=)
                          2: SmT1BUT7BtnuZLJ6_6jIBBoQ70s.roa (hash: RYBd7FR6OZyKgfNBGxNgxiTa308oNZjB95Z8XVN3KKA=)
                          3: rF6twAMoUCNv7nVutY-_BeExa14.crl (hash: rsFdYCbfLa4FMRLWLlT0V7hWcbQEXmUOY+Z/K+fb5Ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:70:57:59:ac:b1:76:32:86:15:6b:43:0d:0e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5eadc0032850236fee756eb58fbf05e1316b5e
        Validity
            Not Before: Jun 13 19:01:38 2026 GMT
            Not After : Jun 14 19:01:38 2026 GMT
        Subject: CN=3f6f175cfc6f44dbb7baa671b0cbe0090d0c8a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:00:45:63:fc:09:dc:10:23:80:2d:9b:10:
                    6e:ad:1e:27:42:68:3c:97:d8:53:6f:a7:e7:fa:66:
                    79:75:0b:33:72:1e:40:18:f4:ba:15:15:0a:65:ba:
                    f9:59:a5:cf:18:bf:d9:29:64:9d:a0:a8:c1:1b:26:
                    1d:3f:0b:be:6c:2b:ba:30:28:2c:3b:10:99:1f:a4:
                    4d:0e:ac:d5:d3:f1:f3:1a:da:28:97:b2:85:2b:07:
                    00:dc:24:19:08:29:86:70:6c:a8:90:8d:33:82:f1:
                    6c:c8:a2:23:c0:67:8e:32:48:f9:e3:f9:75:14:00:
                    74:a3:69:1e:49:1f:c6:d2:c3:f4:a4:4a:8b:15:92:
                    bb:1c:5f:fe:fb:1c:56:82:9e:7c:26:fb:76:b8:cd:
                    bf:ed:51:69:3b:35:ac:9c:0d:8f:f3:39:f8:47:58:
                    97:01:b0:9d:6d:3f:36:45:56:35:12:5a:69:e6:9d:
                    96:65:ea:6d:39:7d:0c:de:bc:d2:62:5f:d3:72:d9:
                    17:b1:19:3c:e1:fa:9a:14:52:1a:3d:fa:13:91:00:
                    00:9f:54:2d:d8:0f:3d:ac:61:86:78:5b:c0:12:87:
                    d0:69:fb:ca:0c:04:e6:22:b4:93:89:21:7b:5e:c8:
                    0a:ca:dc:a6:55:8d:43:f9:2c:14:48:23:b2:0f:a5:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6F:17:5C:FC:6F:44:DB:B7:BA:A6:71:B0:CB:E0:09:0D:0C:8A:46
            X509v3 Authority Key Identifier:
                keyid:AC:5E:AD:C0:03:28:50:23:6F:EE:75:6E:B5:8F:BF:05:E1:31:6B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF6twAMoUCNv7nVutY-_BeExa14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/52975f-feb2-433b-b2dc-c238ce4817db/1/rF6twAMoUCNv7nVutY-_BeExa14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:1e:72:9b:b1:5a:11:83:2a:55:fb:77:57:be:3f:a0:e3:b4:
         51:b1:22:ef:7f:e6:a3:13:42:4a:0e:78:d0:53:92:93:89:f3:
         f8:fc:07:e5:96:15:3c:b1:37:52:2f:24:83:30:66:8d:36:96:
         f5:0e:5d:8e:bb:36:00:f7:6d:2f:a1:30:e7:0d:66:32:8c:20:
         14:fe:b5:d6:f4:7b:53:a0:2c:ee:ed:a8:ae:0b:d9:43:9c:33:
         36:18:ed:6b:f0:5c:7a:ba:91:cd:8a:37:36:77:12:01:50:cf:
         49:4a:ef:b2:21:52:d3:a1:f8:29:f3:79:90:42:ab:9f:09:14:
         d7:b0:e9:49:e2:e8:5f:6b:5e:f2:be:70:ec:71:9d:ad:8f:54:
         5d:fa:c2:e0:c0:4c:ef:a9:6d:1d:4c:7f:09:f9:9e:38:29:08:
         58:6e:b4:f8:47:25:ca:f7:b1:0b:6d:e9:1c:c1:8e:88:be:86:
         b9:22:53:7f:0a:17:1a:24:ae:60:73:ba:f9:26:6f:d5:33:a5:
         1a:02:c7:51:fb:ef:19:41:74:12:6d:06:5a:6e:10:6d:66:65:
         ba:0c:7e:d5:37:42:1c:33:da:8a:5e:3a:6b:3f:79:5a:7c:2d:
         5e:cc:c0:68:63:1e:c4:cb:44:ab:0a:cb:21:be:ca:e6:a4:2e:
         2e:d7:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:21 2026 by rpki-client