Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File:                     PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier:          OzQKqmA67TZ7MZlbbN6QUXvM0aZc3x+nuxCf0DDQKfU=
Subject key identifier:   67:EF:DC:B9:41:CE:1D:AB:11:F5:D8:70:95:F1:D3:8D:BA:0A:6F:9D
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer:       /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial:       019EC224BD62C3114699A103FF2374871CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number:          1152
Signing time:             Sat 13 Jun 2026 18:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:48 +0000
Files and hashes:         1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
                          2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
                          3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: Y+v10RJ7wPUYO7eAh5zQR/2Y3WN9fysUM875rkDaPPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:bd:62:c3:11:46:99:a1:03:ff:23:74:87:1c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
        Validity
            Not Before: Jun 13 18:00:48 2026 GMT
            Not After : Jun 14 18:00:48 2026 GMT
        Subject: CN=67efdcb941ce1dab11f5d87095f1d38dba0a6f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:c6:94:0a:2e:02:e7:ed:d5:93:a1:63:35:
                    fa:16:d8:81:19:77:37:f8:1e:8d:47:01:ed:cc:a0:
                    fc:94:98:86:36:e4:dc:b9:33:ce:1e:0f:c2:de:b7:
                    79:36:c1:b8:61:3b:19:82:87:64:59:1d:e7:cc:be:
                    02:21:4a:5b:18:6c:33:9e:68:d5:97:94:3d:d1:c1:
                    7a:85:9c:e3:c6:d4:a7:bc:ee:63:e5:b0:75:65:36:
                    cd:29:c7:d2:19:b6:95:29:73:26:86:c4:0f:32:19:
                    cc:73:84:0e:84:d8:a5:1f:f3:f6:d6:ac:06:77:cf:
                    f4:a5:44:c8:ff:11:15:e7:00:c8:ff:07:83:09:d7:
                    86:3e:6d:68:fe:b4:c5:67:ee:d4:b7:7d:d3:75:6f:
                    0f:3f:e8:7f:d3:f9:e8:f0:1f:a8:15:9c:73:b2:df:
                    3f:e0:47:54:58:19:f2:9a:e9:93:e7:ce:90:25:36:
                    d7:64:d9:c5:e1:65:15:16:19:54:58:55:32:78:11:
                    15:11:8d:6f:8a:49:44:6d:09:92:8d:82:61:91:92:
                    e2:dc:bd:d3:96:64:a4:7b:3d:ad:a6:73:2d:43:8c:
                    74:41:79:18:57:fd:8f:c5:c1:09:64:77:8d:aa:ed:
                    49:49:26:d6:c4:96:d1:b7:ff:9e:12:d7:7c:d4:8c:
                    b8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EF:DC:B9:41:CE:1D:AB:11:F5:D8:70:95:F1:D3:8D:BA:0A:6F:9D
            X509v3 Authority Key Identifier:
                keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:0b:28:e5:ed:ca:c0:9d:9c:7c:9e:e2:43:cb:75:27:8a:
         8c:44:d2:72:fc:f2:ec:77:3e:e2:cd:e4:dd:5e:80:d5:d7:0e:
         89:11:71:a2:a3:4a:dd:9e:ab:b9:ad:e0:32:a4:62:a0:47:21:
         8b:e8:c9:91:c8:27:7e:17:d5:2e:e0:d8:38:bc:c5:78:86:9e:
         bb:d0:43:a6:3b:6f:d0:d6:a5:3e:ee:f6:16:dc:57:1b:2b:88:
         ae:71:0a:51:f6:8a:e7:00:c8:54:1f:39:37:97:b0:b3:6f:6f:
         aa:69:b7:ea:f8:09:75:cd:8b:c7:fc:1a:8d:78:48:98:22:5a:
         36:d2:e4:39:7c:0d:7d:f6:31:06:04:9b:ef:3f:18:f2:d3:c4:
         d3:f9:db:10:0c:93:18:8c:a4:a9:d5:d8:cb:fe:15:e7:d6:61:
         07:e6:a4:52:64:a0:58:24:d0:d9:e6:0f:8d:a9:14:cc:01:9b:
         fb:4e:d9:8e:ba:69:53:d5:9b:8c:39:6d:e7:c4:95:99:ac:54:
         5f:9c:39:30:9a:45:26:1f:75:c2:1d:a6:90:3a:9b:be:fe:b0:
         90:e9:8e:56:38:5d:32:28:1f:69:6b:98:c5:46:8f:f5:24:ff:
         5d:02:ab:33:dc:95:84:85:6f:fe:33:4c:b7:d1:dd:af:23:20:
         3d:53:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:22 2026 by rpki-client