Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
File:                     PS60FH7nv8a6cvwDSUU0mPAA5YE.mft (raw, json)
Hash identifier:          frLSV1MXISI3jghjTdLlFZq+c+ZRVH0axnz6nMYvDlA=
Subject key identifier:   E4:E2:1E:26:7A:86:3E:C8:56:9E:57:FC:55:22:95:66:36:F5:EB:D8
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Certificate issuer:       /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial:       019EC292BCC42308DCF56186A77AA1AB0514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
Manifest number:          0650
Signing time:             Sat 13 Jun 2026 20:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:56 +0000
Files and hashes:         1: PS60FH7nv8a6cvwDSUU0mPAA5YE.crl (hash: 1PfF8/DrbRHlVitex42k0y2PcMbLJ7XuHVN+Ko7zmTA=)
                          2: bbcALS1K5TEmKYiB1a6e1mZZWEs.roa (hash: byEO33BLjOD9so540gGEwTdyvs1ahwhfnYTzDETisqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:bc:c4:23:08:dc:f5:61:86:a7:7a:a1:ab:05:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
        Validity
            Not Before: Jun 13 20:00:56 2026 GMT
            Not After : Jun 14 20:00:56 2026 GMT
        Subject: CN=e4e21e267a863ec8569e57fc5522956636f5ebd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:c1:10:6d:e5:07:ed:b0:15:f8:c0:88:28:
                    5f:c5:fa:43:1d:15:b7:a6:a9:7c:c9:0a:65:23:ae:
                    77:6e:cd:a5:8e:1d:07:36:c2:49:33:e4:82:ca:a3:
                    d2:ce:83:46:38:09:71:58:26:fa:c0:ee:59:4c:86:
                    18:0d:6b:e9:e6:d1:ec:9b:c5:70:3b:15:05:5b:14:
                    06:fc:9e:f2:bf:07:be:21:94:ba:bd:52:c9:24:11:
                    38:e9:a5:94:10:68:8d:85:ca:d5:08:5f:8e:d7:60:
                    a7:4c:dd:0c:b1:6f:a0:cc:04:01:ab:5d:d9:fc:88:
                    b2:99:71:99:d3:00:d4:75:7a:18:71:95:1a:d3:77:
                    62:68:71:ee:b2:a9:88:b7:29:25:4b:62:2c:82:52:
                    29:e8:4d:d7:7c:d8:85:ed:e0:66:8c:8a:10:d7:40:
                    56:5b:d8:d3:aa:a3:82:3e:c9:30:0b:92:68:72:5c:
                    32:f4:07:6e:3f:02:c9:ad:50:86:04:30:71:84:4b:
                    e6:64:3a:0d:15:19:3f:2b:e2:b9:f2:84:67:89:18:
                    7f:f4:ea:85:fe:db:46:69:13:25:68:cf:19:ac:33:
                    14:a3:c3:99:15:ce:ad:b9:2a:a0:61:33:dc:1f:35:
                    74:10:15:c2:9c:ed:35:d8:7b:c7:94:6b:d1:19:db:
                    fb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E2:1E:26:7A:86:3E:C8:56:9E:57:FC:55:22:95:66:36:F5:EB:D8
            X509v3 Authority Key Identifier:
                keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a5:54:a7:00:9c:53:24:70:e2:e0:ee:87:1c:44:c5:d1:e6:
         c0:45:75:f7:03:c8:01:a7:8e:0a:c3:3d:8e:a6:71:e0:55:30:
         c5:d6:cc:8c:82:a2:ca:16:ac:72:6c:7a:3a:30:8f:2e:3f:42:
         cf:b7:c2:74:e3:c4:4c:af:14:41:27:ef:ca:a7:cb:89:1a:a9:
         b7:d8:3d:5e:83:ea:6a:04:99:85:05:c5:24:35:9d:b5:fd:de:
         c5:ee:54:a1:cc:7e:ff:4c:36:e9:43:83:e3:7e:56:bb:ae:b4:
         2b:7e:36:de:4b:fc:8d:ba:b8:26:4d:db:06:0e:9a:b8:c1:d3:
         aa:eb:05:50:3e:70:e3:f1:3d:e6:6b:f6:89:52:90:9a:31:13:
         59:4f:1b:12:ce:8c:49:89:bc:d0:ac:f4:a6:33:f0:6e:c3:36:
         4c:f6:2c:6c:89:b2:c6:b3:0a:2c:34:67:fc:fb:4b:90:64:8c:
         96:92:91:fc:50:37:d3:94:96:6d:4f:c1:b7:9e:ac:e5:da:20:
         33:5b:b9:b9:83:29:6c:04:39:58:1b:37:cb:5c:d5:f6:43:97:
         b7:ac:5c:d4:33:94:a7:86:95:64:b2:d0:1d:9b:32:97:35:92:
         b6:51:bb:81:78:43:d5:6c:d7:4f:5d:c0:a5:b9:6e:49:0a:17:
         a4:9f:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:29 2026 by rpki-client