Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File:                     fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier:          9Ru/MRcSVy4I+kI0n8sW1ePIuKRU/EqHJ5+INv6i9Bg=
Subject key identifier:   F8:EF:D2:DC:57:F7:7D:5E:0B:BE:60:0E:67:A6:85:84:58:5D:93:A7
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer:       /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial:       019EC4B7ACF6FAE18116BB7C1FEE7FBB3925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number:          1970
Signing time:             Sun 14 Jun 2026 06:00:32 +0000
Manifest this update:     Sun 14 Jun 2026 06:00:32 +0000
Manifest next update:     Mon 15 Jun 2026 06:00:32 +0000
Files and hashes:         1: OexBeKcIncb0jKb4JvVZXcJT1Ug.roa (hash: O2kEZ95yzKLiq43k1ys04PPuKi6PpIFY+Xw79K5ILEo=)
                          2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: p39MRJvmiu2mFGjJwcQpiGt/VNoRdIpFLK/BkTr8HMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:b7:ac:f6:fa:e1:81:16:bb:7c:1f:ee:7f:bb:39:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
        Validity
            Not Before: Jun 14 06:00:32 2026 GMT
            Not After : Jun 15 06:00:32 2026 GMT
        Subject: CN=f8efd2dc57f77d5e0bbe600e67a68584585d93a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:01:75:76:84:87:9b:d7:54:21:f8:95:4c:
                    7c:08:c1:ec:2f:ae:cc:17:f1:0a:7b:44:c3:9c:18:
                    e6:85:67:e8:72:8a:01:28:16:7c:6d:c8:02:71:a0:
                    a2:96:7b:d4:00:2c:42:0e:2e:46:97:23:16:f1:b4:
                    91:9b:40:67:56:a2:78:4f:1c:d6:3f:d0:8f:05:ef:
                    10:5a:ad:34:c9:a7:b2:ba:45:e3:34:e9:96:40:af:
                    69:2b:30:9c:07:81:4b:ce:5c:42:7f:53:bd:06:92:
                    85:f0:6b:38:3b:d1:cd:ea:1c:07:43:38:3e:0e:5d:
                    2e:aa:63:78:bb:fe:cf:a0:22:75:f1:68:20:63:01:
                    44:76:7d:f3:0d:39:76:d5:41:65:81:55:19:9e:42:
                    55:20:66:dc:c3:6a:25:74:49:24:80:3b:71:1d:eb:
                    4e:13:ff:f7:2c:ed:44:e6:0b:97:75:fb:e6:50:ff:
                    87:71:70:da:c0:72:e0:5e:99:c8:76:8f:58:65:f0:
                    18:b0:86:9d:7c:c3:2f:f2:df:5d:59:7c:2d:8c:27:
                    b9:b7:ca:54:4e:03:f7:2b:05:25:4d:43:04:2d:56:
                    ff:7c:3c:2d:0f:b8:f7:95:66:68:2e:dc:24:fd:4e:
                    4a:80:95:98:22:29:7a:2a:55:a2:21:c0:05:27:0a:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EF:D2:DC:57:F7:7D:5E:0B:BE:60:0E:67:A6:85:84:58:5D:93:A7
            X509v3 Authority Key Identifier:
                keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f1:2a:50:a0:e2:d6:54:97:9f:2b:71:4e:84:d0:1d:7b:d7:
         02:ef:f6:07:21:9b:ae:ff:02:bb:58:a6:7a:b5:d6:70:80:e5:
         4f:47:cd:0f:7e:7d:52:9f:ca:a6:95:77:92:29:f4:1d:ba:0f:
         fd:c2:55:31:cf:8f:0e:c9:f8:0f:79:25:cf:7b:e6:e4:7e:92:
         e1:41:2b:c7:b4:04:ff:7c:98:e5:a1:f0:ee:1f:bf:e0:47:02:
         af:99:2c:d6:02:8d:b1:9e:a7:b6:02:13:a7:c3:b7:f9:b3:e0:
         33:6c:bf:2b:17:c2:12:07:16:7b:a9:f6:2e:ca:9a:d4:50:93:
         ec:73:77:30:33:cb:fc:0b:45:a6:ea:63:af:a4:45:60:ce:bb:
         ba:e6:23:e7:52:96:ba:95:20:5b:f3:22:c2:71:fe:b0:e1:52:
         7e:6e:67:de:62:c0:97:c5:53:af:68:11:8a:61:7a:98:c4:f1:
         f8:8d:1b:a0:3f:fb:85:f7:6c:b1:b1:3f:02:8e:9d:64:de:73:
         b3:7f:fe:2e:69:f6:66:e9:a1:72:fa:c9:33:a1:1c:e1:73:a0:
         db:a5:61:79:e9:36:d6:ce:ee:88:fa:f9:e9:1d:7d:a9:d4:d8:
         e0:f0:81:36:cc:d2:38:25:66:64:40:76:08:ce:25:0a:18:b5:
         b8:32:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:13:42 2026 by rpki-client