Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          2Wbi2UNB47lHmeF6DZuw+MfFLAauP+4ECe97z4gok00=
Subject key identifier:   BA:BA:A0:C9:17:97:D0:C8:9E:CD:D1:BB:6E:1E:F5:54:92:33:2F:44
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       019EBF2336B74DF24B97FA3072FA02A6A5D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 04:00:16 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:16 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:16 +0000
Files and hashes:         1: Gr2HNFebnqweKA8qaD2IyszWQgI.roa (hash: RegbgViGMcDrxCenuREVm4TdvOmQvNdOjtPl4uk6fVU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: rKv3crLREIBw+NV0CQu8GP2H0T1l4g8aSH4ESlwkngA=)
                          3: wCh-pphXrFlnVedivymKoSdB-PQ.roa (hash: RWZ4wkHC1VRgI9WF5HxhbBtNjKgc6U0S8oWX6yGUEvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:36:b7:4d:f2:4b:97:fa:30:72:fa:02:a6:a5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Jun 13 04:00:16 2026 GMT
            Not After : Jun 14 04:00:16 2026 GMT
        Subject: CN=babaa0c91797d0c89ecdd1bb6e1ef55492332f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:0e:47:11:81:f0:b4:b8:01:12:fc:e0:43:
                    98:ad:46:22:d8:4e:9e:97:54:37:44:ab:17:4e:81:
                    8d:aa:d6:24:5c:ee:06:48:23:72:fa:a2:05:96:b5:
                    a4:be:cc:47:b1:4e:4a:31:ab:a2:8e:89:17:c4:d0:
                    15:6e:5e:95:d6:8f:6e:10:d7:74:c8:60:b4:ec:22:
                    b4:8d:d9:2a:de:07:65:00:e4:56:9e:3f:ad:13:94:
                    5c:4d:b5:97:00:c2:48:41:ae:5d:15:c6:65:99:4b:
                    f8:99:7a:de:48:65:83:b5:55:ab:2e:99:88:2f:9f:
                    43:a3:95:99:c0:73:12:9b:26:5f:41:94:d9:fe:a0:
                    a1:3e:4f:56:fb:02:75:a4:07:1a:31:44:c2:0b:db:
                    54:29:89:58:fc:1e:3d:a9:4b:48:d4:82:05:45:d5:
                    02:c6:fe:72:d0:6a:96:ac:21:a9:e8:bd:69:c6:63:
                    2f:ad:44:67:e2:94:79:24:14:de:f6:d2:1e:53:a7:
                    2f:f6:e5:72:1c:3f:84:d6:b4:c5:96:4d:c5:1f:08:
                    4c:cf:8d:6c:ce:ea:4b:8b:af:e3:95:e4:96:bc:c3:
                    dd:4a:92:b4:dd:96:f3:0e:89:d2:db:a9:6b:e8:3b:
                    58:6e:a6:19:69:8a:fa:9b:a2:04:bb:0c:56:85:d0:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BA:A0:C9:17:97:D0:C8:9E:CD:D1:BB:6E:1E:F5:54:92:33:2F:44
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e7:c4:6f:83:fd:e7:66:92:5d:66:45:ef:e3:aa:2b:77:9b:
         06:12:7a:2e:f5:ef:b4:ee:35:1c:17:07:4b:1a:7e:03:be:59:
         5f:be:bc:cb:49:5c:6f:86:d2:04:f7:1f:5c:86:12:52:dd:d7:
         7a:81:20:a3:7c:c2:0a:3a:aa:9a:5c:ab:59:68:e8:b1:cb:76:
         a5:33:4f:fd:c5:a3:05:a7:ee:37:53:ea:f3:72:3d:18:4f:08:
         2e:78:3a:1c:6b:09:ae:c6:bd:a8:bc:b2:8b:2b:94:d4:3d:c4:
         4a:9a:9d:de:7d:94:d3:b9:df:f3:14:3c:c2:27:c6:eb:b4:26:
         65:10:33:c2:06:53:51:b9:1d:d4:32:b5:14:75:96:ed:c0:31:
         d2:d6:d5:5f:dd:d5:90:b5:54:d2:b2:45:72:31:87:7a:ee:c9:
         a2:79:cc:a3:92:ed:25:d2:b1:67:6f:a8:e9:b4:11:06:02:cf:
         c0:9e:d0:95:02:39:dd:5b:2b:ce:af:2d:db:99:01:6f:f6:44:
         0f:ec:04:ac:66:e6:32:6f:2a:58:a0:4e:d6:a9:f5:6b:a3:ef:
         af:61:bd:7f:0e:51:12:3a:a0:2e:b4:c7:34:55:73:74:46:e0:
         f5:c2:b9:67:36:91:43:92:47:c0:f9:25:70:9b:53:34:87:e5:
         4e:ca:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:15:17 2026 by rpki-client