Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File:                     _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier:          3v0/ZS3zvlN3ZMZGdCmVhfLLhvnHuCSDN55TWzeSCeI=
Subject key identifier:   B7:5A:C0:E0:27:EE:F3:75:1E:5F:3F:6E:F7:28:F1:6C:01:01:07:FB
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer:       /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial:       019EC0A464A40AD598ADD8C5BD6513B91663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number:          1269
Signing time:             Sat 13 Jun 2026 11:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:59 +0000
Files and hashes:         1: Br3g91W4evf2A8FX4-nPHSqH7Oc.roa (hash: gTgHpNU+s78J1A+sPr7pjfV/Fs0kKMeRldiNIgByjo4=)
                          2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: I2p3NlsC9Z8Ns9Z1oACzGLEsHhNk7bK7uLk4yrv37+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:64:a4:0a:d5:98:ad:d8:c5:bd:65:13:b9:16:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
        Validity
            Not Before: Jun 13 11:00:59 2026 GMT
            Not After : Jun 14 11:00:59 2026 GMT
        Subject: CN=b75ac0e027eef3751e5f3f6ef728f16c010107fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:56:28:27:ae:47:cc:22:e8:b5:d9:96:fd:
                    0a:1f:46:bb:fc:ce:7e:e9:0a:c5:9a:42:da:bb:68:
                    8d:d2:4b:9f:42:11:69:82:91:bf:2a:55:1d:cb:ab:
                    da:b2:7d:cb:5e:15:02:2e:06:f4:6d:0c:00:5c:9e:
                    ea:d7:d9:0d:7b:db:ba:8a:31:9c:e1:4b:fb:9d:4e:
                    2a:74:de:de:c8:6f:82:2c:2a:21:da:fe:7a:a2:1b:
                    47:fd:58:65:f4:7b:ad:97:0b:17:6c:8f:f4:ec:68:
                    e5:fe:fa:c5:0e:d3:b2:99:22:88:63:62:c7:c2:3f:
                    fd:5a:ab:3e:55:af:e3:43:16:d5:ce:9e:12:42:d0:
                    81:74:a7:65:70:e2:a6:aa:5d:83:9f:b1:cb:ff:ad:
                    e7:d0:34:9a:59:5b:e6:d7:a2:0d:f6:a5:4f:7d:50:
                    3b:f9:b2:fd:40:b1:cc:95:a5:d7:94:9d:2c:15:98:
                    0c:96:ce:5a:e3:6b:9f:10:b3:b5:d8:da:3f:12:0c:
                    fe:05:1b:bb:54:23:1c:38:51:d1:91:94:61:03:2c:
                    d6:e8:bd:e6:eb:cc:df:c7:b7:b0:d2:a5:cf:e4:0d:
                    8c:a9:05:db:47:8b:9a:2a:c0:d8:8e:62:ea:dd:2f:
                    41:90:aa:8b:09:4c:cc:ad:51:e4:37:10:d9:c2:e8:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:C0:E0:27:EE:F3:75:1E:5F:3F:6E:F7:28:F1:6C:01:01:07:FB
            X509v3 Authority Key Identifier:
                keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:c2:26:99:e3:6d:ab:dd:e2:70:f5:2f:56:96:5b:f5:dc:
         49:e9:73:e2:5b:a1:9e:5b:6d:c0:98:6f:c0:16:e2:b1:e0:4d:
         ea:8f:18:49:a9:78:ea:74:77:74:78:d0:6c:50:a0:a6:40:8a:
         34:29:66:b7:61:e0:f8:cd:6b:dc:65:30:62:2e:b0:f3:31:f0:
         dd:cb:09:e9:2c:f2:b1:7d:22:c2:1b:1b:cb:40:1c:5f:48:6c:
         94:37:1e:25:1e:d6:e7:41:fc:56:8f:c5:8d:68:5c:7f:02:31:
         54:ba:b5:1b:75:37:e3:df:5e:95:8e:f0:a3:5c:cd:44:18:af:
         bc:8c:77:a8:b8:7a:cc:23:64:47:f4:7b:1e:d2:78:70:da:8b:
         17:2b:c5:69:cb:a0:2b:1c:aa:16:93:02:a1:10:00:9c:fb:1d:
         b4:d2:f9:64:ac:97:fe:b5:fc:a4:13:db:69:a6:53:51:da:bb:
         5d:9d:58:ed:64:3f:08:88:2d:be:05:17:57:6b:21:8e:fe:7d:
         b0:44:f0:5a:35:4b:5d:29:1c:2c:d5:bf:85:3d:ce:29:cd:96:
         26:0d:fc:b1:24:d0:aa:24:3f:e2:19:d9:67:33:46:42:11:5e:
         a8:6b:ae:0b:c0:b4:e8:4c:e5:ac:9f:97:8d:af:a6:13:d4:a9:
         a5:5b:62:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:43 2026 by rpki-client