Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          S5DusDxq4Fi/od6W9vDn+n+2I7dxn+xRhd2r5zt7C14=
Subject key identifier:   10:B0:E5:6B:AE:38:F6:16:89:51:D9:60:EC:19:6D:FE:4E:7B:72:D1
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       019EBFFEFF0F73CBB19E219FE1334788BCB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          1739
Signing time:             Sat 13 Jun 2026 08:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:20 +0000
Files and hashes:         1: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: 8GaHO47N+e0GL/O28ROQW5IV6EcICJisHyamOTjPVCA=)
                          2: FMZLd4Ps16YzGBMpOnOc44HcG18.roa (hash: jgDZrPFGw8aOglddPDZFhV8lrzoZRsEiVQVdiUDUggU=)
                          3: WaYI_MWy3hRJbRYG3PdN8Y_RMYA.roa (hash: THX2fKKKnX9yBs9zY/imZHrBKciUjAfyILqIM2Dr8Yo=)
                          4: WwkncKL5VRC13xPV2ZE_H9se7W8.roa (hash: BknD8zU7XCC2nFHasTpI89u/51fYeUQLrTGPpyLxToE=)
                          5: ZbSrOte3J1bjSkMjIcjwzDpvPJA.roa (hash: 4PfqWbbb/AkFI2O3OXjGcGzMpkxwYMJ2P6SIOk3keto=)
                          6: ci1GvowS4KwUM3G8aFjlO2irLAA.roa (hash: m7TYB3sPDSUmcqNDhcvm3uaAFsWsaBEs5gP6w8LP+l0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:fe:ff:0f:73:cb:b1:9e:21:9f:e1:33:47:88:bc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Jun 13 08:00:20 2026 GMT
            Not After : Jun 14 08:00:20 2026 GMT
        Subject: CN=10b0e56bae38f6168951d960ec196dfe4e7b72d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:a8:e0:1d:70:f4:fb:c9:26:af:f1:0c:e2:
                    d1:58:45:ec:d2:b4:e8:f7:d1:65:ff:67:6b:56:ab:
                    b3:64:e8:ec:ff:d6:d0:49:6b:0e:ed:78:f2:4a:01:
                    6c:f3:14:ae:49:15:4f:73:dd:d3:07:db:24:ed:75:
                    6b:09:5d:4c:02:fa:cf:0e:56:03:78:4e:4c:18:e4:
                    61:b2:29:96:4c:07:0f:ba:bf:a3:b6:a0:11:ed:3c:
                    43:2a:56:06:b2:56:0e:d2:f2:9c:b8:54:ee:32:9b:
                    03:20:73:96:88:2e:c8:69:42:a9:09:02:1a:d8:7c:
                    76:d1:84:70:e7:0f:1f:2e:d4:2a:2d:b6:e5:1d:e9:
                    b2:cd:bb:ae:d8:3e:31:70:57:a4:0c:a4:d2:b4:2d:
                    04:1e:a6:60:f7:24:80:da:9b:1d:28:5a:be:2b:02:
                    b4:1f:c1:9d:44:1c:79:c6:18:3f:e2:f2:77:e8:98:
                    f6:80:e9:61:f6:41:01:75:99:2b:62:f4:fa:83:7a:
                    b2:33:d5:d4:4c:c7:df:24:7c:d8:f3:ee:b5:99:f3:
                    cf:8e:bc:98:02:66:59:60:48:d8:ae:8f:d2:0e:4b:
                    d1:cd:89:b1:2a:8a:c0:94:9e:02:8b:80:5b:5a:05:
                    09:fe:5e:b1:03:4d:96:b2:31:95:7d:e6:62:70:6a:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:E5:6B:AE:38:F6:16:89:51:D9:60:EC:19:6D:FE:4E:7B:72:D1
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d8:0f:ae:c2:ea:d2:aa:07:6f:8b:6b:be:f0:a4:5a:3a:f5:
         de:41:a8:22:81:f9:e0:c1:9a:df:bf:96:43:3a:4a:cb:c0:7f:
         32:28:a3:8d:31:f8:fb:c8:c6:01:eb:5d:4a:cf:3a:b8:08:8a:
         38:64:20:6d:fe:5c:1b:f1:7c:93:71:e4:73:e0:ea:71:95:ab:
         0a:ae:f4:cd:dd:9a:18:1b:d9:81:d4:23:d0:9f:f7:97:51:43:
         b4:72:61:3a:a5:c1:f3:8e:cf:84:f6:9f:16:8d:00:d3:68:6e:
         1a:dc:f3:e8:04:9a:14:5d:15:51:57:06:c5:94:6a:e2:c7:36:
         db:19:2a:3d:4e:e7:24:43:8e:cd:92:f1:f8:f4:29:cc:d2:c0:
         5a:7a:e6:0f:77:b0:c4:97:6b:86:61:a7:1e:5b:97:58:7a:31:
         42:9c:d0:af:23:37:39:81:da:f5:c1:b5:81:36:4a:1c:fd:03:
         f1:69:a8:89:b7:0b:8d:01:45:34:ad:40:20:d2:d0:2e:e9:9c:
         22:2e:bf:e0:b1:2a:17:19:94:39:24:f9:2f:13:ee:bf:51:db:
         d7:af:c5:9f:1f:e3:1d:03:63:24:ff:32:d8:8e:e5:6c:dd:4f:
         e2:0a:51:ec:c1:8e:b2:4b:e3:fa:2b:0f:d6:6c:dc:e1:af:98:
         ab:54:46:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:36 2026 by rpki-client