Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File:                     Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier:          TVwYEbCAJI9W4YaTEKk3qrbbu7yVHLC50STSRJK4RTA=
Subject key identifier:   06:09:CE:99:18:AF:90:14:4A:29:22:2D:DD:B1:3B:65:48:6E:0C:CD
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer:       /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial:       019ED31917BE64E42D478C83F3A8E75EC853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number:          1967
Signing time:             Wed 17 Jun 2026 01:01:37 +0000
Manifest this update:     Wed 17 Jun 2026 01:01:37 +0000
Manifest next update:     Thu 18 Jun 2026 01:01:37 +0000
Files and hashes:         1: C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa (hash: KjPNPOXZwVjnuKWDEKGdvD1QS5oO9ubnZY9SVeLWd9M=)
                          2: LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa (hash: k5Vr4nHqfxcqa1n3ZsAMJk6uHu5H4HSOAsJXgQNi+cQ=)
                          3: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: Pm9fNkSt2GPth5sbpcD8WOf1R5vp10HiHJasryZU8Jk=)
                          4: eu9ae3eLYSM_cPxuWpcvPn92OU8.roa (hash: HOeGxAKohjtOD7Ke0LKRStGG+xTv10n59udd9QSjFEw=)
                          5: v52ZTcdolNoppoOrn38Ym0qTh6M.roa (hash: qxbDlAOHfwm8HgM041yuk5h+Fnz9xMLxo2BwLuu0zHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:19:17:be:64:e4:2d:47:8c:83:f3:a8:e7:5e:c8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
        Validity
            Not Before: Jun 17 01:01:37 2026 GMT
            Not After : Jun 18 01:01:37 2026 GMT
        Subject: CN=0609ce9918af90144a29222dddb13b65486e0ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:f8:80:81:22:c0:6b:4e:34:2c:df:10:c1:
                    e2:3c:0f:15:11:83:12:01:2d:e8:2a:5e:3d:36:63:
                    0a:5e:af:60:67:dc:80:fc:ed:14:b0:59:87:cb:f7:
                    5a:fc:c5:e1:f0:c5:9b:cf:50:95:d0:24:63:c6:21:
                    73:8e:41:3f:5a:55:d3:a8:cd:9f:0d:84:13:fd:a8:
                    26:15:a4:88:5c:cc:82:65:73:fe:83:6d:5e:ac:86:
                    16:ee:f7:ab:5c:70:32:91:4c:4d:4c:e8:d4:f3:b8:
                    0a:bc:dd:e5:aa:be:60:db:df:14:23:11:a1:73:dc:
                    0c:67:c3:f8:11:d3:cf:31:c2:dd:2a:07:71:00:36:
                    d5:90:64:22:12:6a:b7:b5:58:d7:b1:49:c2:40:65:
                    96:3c:70:89:5d:7e:44:d0:cc:4c:57:a4:79:1a:62:
                    b0:89:c2:46:3d:de:b7:b3:18:1a:0a:35:47:de:90:
                    3f:05:6b:6d:27:53:94:40:a9:1e:65:58:07:14:bd:
                    31:ff:6d:17:3c:6a:fe:1c:e2:58:e3:37:1d:4b:73:
                    87:ac:a0:2b:30:27:75:9d:f2:a5:a5:ae:d1:f5:41:
                    4f:75:77:50:67:92:c9:53:c6:56:59:1a:58:3d:16:
                    02:47:5e:9d:ed:8c:b2:ed:59:dc:a9:7f:81:db:42:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:09:CE:99:18:AF:90:14:4A:29:22:2D:DD:B1:3B:65:48:6E:0C:CD
            X509v3 Authority Key Identifier:
                keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:81:48:5d:0a:ae:7e:1f:19:ce:a6:f5:70:6a:36:2c:2e:
         dc:15:b4:f4:ca:ff:4a:68:c4:32:5d:1e:77:c9:ee:d7:0e:83:
         9d:78:9b:16:0c:da:9f:63:7f:a8:12:d0:47:b1:d1:de:f7:05:
         55:9a:50:88:b2:48:00:39:f8:57:5c:f9:e3:99:29:ef:23:3c:
         05:41:c4:9b:5b:f9:95:8f:4b:d0:75:66:c6:c1:13:d5:9e:5d:
         7b:82:1b:a2:05:75:ac:5d:97:48:59:62:8b:72:cd:13:ec:30:
         45:c5:1e:9a:91:08:45:d2:13:d6:1f:90:1c:0a:e3:31:74:d0:
         4d:18:ba:6a:a5:3e:af:05:c6:c9:68:db:a5:fc:3c:ed:eb:51:
         47:bb:99:a9:6c:89:d4:77:af:c5:5a:34:70:7b:e7:c1:d7:85:
         e6:46:20:fa:a8:6e:b5:ac:02:95:5e:29:c3:1c:ee:76:4e:83:
         8b:4e:bb:c5:89:71:97:74:0b:f0:af:63:e8:35:3d:69:31:40:
         1f:db:d1:06:a4:34:c6:57:23:62:26:39:96:44:9a:28:31:93:
         a2:0f:f8:fd:cc:b1:2a:4c:eb:87:d6:7b:34:52:27:99:8b:c2:
         7e:ef:d7:98:6c:a7:54:ee:8e:a5:be:75:cf:5c:af:a2:d5:ab:
         f3:6b:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:46:48 2026 by rpki-client