Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
File:                     l4OlSHs1wdHh8VfBkTErPfS8F6s.mft (raw, json)
Hash identifier:          +gaNswsD2UTiLtnTdsaLgsyLV7P59qkuA4sovu5x00Y=
Subject key identifier:   20:50:D0:B6:89:98:22:48:1F:D7:60:A7:5E:43:52:08:C7:11:87:99
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Certificate issuer:       /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial:       019EC0363E44746CDD4C4570889499B9976B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
Manifest number:          1975
Signing time:             Sat 13 Jun 2026 09:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:40 +0000
Files and hashes:         1: B5Ns6rWldhEAob3mxJpKyKcm42A.asa (hash: n1DHfqrLmjXkNDAqU/pYWiBza4Za68DkT/EAuiXqfOs=)
                          2: CvSQt69yariNUKKDqC1XPhdiuj8.roa (hash: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4=)
                          3: Fyhcvg0fPg6HNZeGx-fuI9q3TG4.roa (hash: s3i5jOLFeKaJCCjPZix9kmPk1E24LFggTy6p8YPrOME=)
                          4: QOv9AtzM59S_WNU7KUIEWRfJl68.asa (hash: 6O0jKZ/+i/G9w5+oF5K0c5UTn7UqPYc3SNDvmBucH+4=)
                          5: _aX_04oA-sEKgu-zFqSKB5o59IU.roa (hash: vvrDSoMTojkEyhL+KDnVE26ozWnsURm+/ty33yW6e80=)
                          6: a4kSWXHUjeJ3UXaQ-vc8USD7130.asa (hash: lbgYBLK33JoEr+PhrlEn3no20wzVFGeWMxTDLDLfyNY=)
                          7: etDwmKHRsmxardQ7oN51mJmZIhw.roa (hash: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0=)
                          8: k7Eva3BsYTKaJgiYaLtXuPfGCXs.roa (hash: S7y3L8mFY/zmqOAsq7ao1VYi9SoF04UMS+/L5vkE7Fs=)
                          9: l4OlSHs1wdHh8VfBkTErPfS8F6s.crl (hash: ZBCg/LxpRAmKizDp18HETK9VLV4KaceOQgxwmngcjDU=)
                          10: wNJN5eIQFxpTQPR_yflmL8Lctrw.asa (hash: 2uWAVzddog3xAuqZI9xlMQgD8WOzmLiMNlAfNcUz1AE=)
                          11: xdAiPxtHiSARdy6D1muPHXjJ7bo.asa (hash: VY4TRsfLEX39zBQVtcIxPVYcqXpcy2I5EsQFBkqtus0=)
                          12: xywW8VsvtWulmUgX-o54Ju69bE8.roa (hash: 4C5SlKS6xYjsyyHEt/gap8Ho2+t7PTtjb6goXCdrV64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:3e:44:74:6c:dd:4c:45:70:88:94:99:b9:97:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
        Validity
            Not Before: Jun 13 09:00:40 2026 GMT
            Not After : Jun 14 09:00:40 2026 GMT
        Subject: CN=2050d0b6899822481fd760a75e435208c7118799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:d3:02:53:21:7b:ad:f8:d5:69:6d:8a:fc:
                    5e:fd:53:fb:e0:c0:bc:8e:92:89:c4:76:02:e1:00:
                    08:25:0f:6c:d4:02:82:48:81:1b:25:82:5e:28:42:
                    bc:23:ae:aa:e2:5b:74:89:81:a9:e7:ec:0e:32:05:
                    6f:bf:2f:99:a6:84:c1:a9:ab:37:92:b0:e2:7c:b9:
                    57:2d:12:c1:fc:38:3b:5d:72:50:8e:db:ab:88:a6:
                    e6:d4:eb:25:8d:2e:74:f0:04:05:2d:2a:95:36:22:
                    f3:ec:ac:a6:a6:c2:f0:1d:74:18:36:f0:02:61:ce:
                    33:a5:10:0e:16:1a:1a:33:2f:3b:92:4b:85:4b:2a:
                    69:5c:03:61:63:41:f1:ae:05:e1:d5:d9:3e:be:41:
                    90:b7:fd:53:4b:21:12:aa:8f:ae:b2:cf:54:87:d1:
                    8c:2f:25:7d:b0:ac:9e:77:e6:11:54:c5:06:05:52:
                    f9:29:bb:7f:68:ed:0d:37:d2:50:a3:b5:5b:95:f2:
                    e9:de:44:49:5d:78:eb:30:30:6d:46:10:6c:78:9c:
                    b9:e5:37:6d:68:4b:d2:bb:1a:c8:56:a0:48:22:a2:
                    a5:e7:06:2b:ba:2a:06:3b:7a:80:e1:e6:16:6d:05:
                    73:b0:b7:aa:27:38:e6:ac:30:d7:e2:01:29:00:7a:
                    34:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:50:D0:B6:89:98:22:48:1F:D7:60:A7:5E:43:52:08:C7:11:87:99
            X509v3 Authority Key Identifier:
                keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:24:6d:c4:17:3f:41:b2:d2:09:cd:f2:a6:21:03:8e:47:e9:
         be:39:f5:44:0d:7a:66:79:25:aa:ed:80:f1:fd:e8:be:fd:cc:
         78:91:0a:53:e8:09:d2:80:d3:38:68:73:86:b3:31:ce:d2:10:
         e5:59:00:d6:58:71:79:f3:ae:83:47:c4:cf:8f:ca:18:29:47:
         1d:03:be:88:a3:ab:7a:88:2e:82:cb:7f:a3:93:bf:0a:d4:0d:
         72:27:0e:e0:39:66:c0:86:ac:6f:33:0c:a7:ed:1e:6b:dc:29:
         88:5f:a1:49:6b:a3:1f:65:cb:df:66:c2:b7:d6:c7:2a:36:ad:
         c1:d3:0c:65:0c:24:2a:0e:e1:4a:be:22:f3:ea:18:47:c0:ec:
         fe:77:71:d2:e7:41:81:12:02:72:83:da:ed:b6:0e:15:1f:1c:
         c6:66:c7:d2:04:45:0f:d2:0a:95:0f:e5:96:1f:6b:71:84:78:
         4c:d1:d3:98:98:83:4c:7f:99:ae:b7:15:79:b2:35:12:7f:a3:
         50:d7:f1:dc:93:31:ab:1c:1b:7f:8e:9f:35:85:9b:e8:46:74:
         67:5b:6d:f8:28:be:72:cb:29:b8:0a:ec:d3:dc:80:1c:14:c6:
         60:0b:29:ab:8b:1d:90:64:af:cc:7d:96:bf:58:94:c3:78:87:
         5e:b8:e4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:29 2026 by rpki-client