Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File:                     lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier:          nV8BHy8L/VjfMvpOrat0KmuR/0Kcu7w5OSVmuUJVpr8=
Subject key identifier:   8D:64:F7:AB:D2:07:E0:C2:05:AA:C4:0C:81:81:59:CB:00:E4:BE:9F
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer:       /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial:       019EC25C6A8733959BC1818ED90702A78F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number:          0346
Signing time:             Sat 13 Jun 2026 19:01:36 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:36 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:36 +0000
Files and hashes:         1: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (hash: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4=)
                          2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: gvCrv3tb6A9g6SWZvtJubL8kO9xbFPcS+tbJaWY01So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:6a:87:33:95:9b:c1:81:8e:d9:07:02:a7:8f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
        Validity
            Not Before: Jun 13 19:01:36 2026 GMT
            Not After : Jun 14 19:01:36 2026 GMT
        Subject: CN=8d64f7abd207e0c205aac40c818159cb00e4be9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:10:42:7d:25:aa:9a:c1:e4:e4:04:fc:b9:
                    78:b3:95:a7:f4:fc:60:7b:98:c2:3e:6f:d0:07:e5:
                    b3:5a:d0:54:03:41:69:f4:ab:53:ec:7e:23:87:eb:
                    ef:d2:35:f7:ae:e8:1a:61:04:a0:9f:94:8c:e2:e8:
                    39:c8:b1:6e:2f:a5:ac:ff:5c:be:31:66:b6:e6:6d:
                    e2:fc:62:88:c4:f1:26:d6:35:b5:15:fa:c3:a1:1c:
                    2a:73:7e:f2:13:81:a4:d6:c8:7e:63:5c:af:67:5c:
                    27:12:90:d7:45:46:98:d1:f3:32:fc:db:09:5d:0e:
                    7a:09:6c:ca:09:ec:be:2f:cb:b5:9d:23:57:89:bc:
                    f6:be:94:0f:5e:5f:3e:21:25:04:8e:85:61:74:28:
                    ec:1a:65:7a:d9:09:ad:0c:b9:4c:06:20:a1:3d:3b:
                    26:6f:af:16:50:57:15:84:fd:08:93:89:28:36:98:
                    71:5c:83:50:84:2d:39:4d:16:73:29:17:ad:b7:8d:
                    c1:63:56:71:bb:c7:5f:ec:4c:70:8e:f5:6c:98:71:
                    96:be:24:55:12:1a:4f:16:27:f1:4c:7b:04:9c:e6:
                    85:d1:e0:bd:a7:50:37:73:1e:f8:06:05:61:18:92:
                    d4:f4:46:04:69:5c:53:12:7a:9c:00:9c:55:1e:18:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:64:F7:AB:D2:07:E0:C2:05:AA:C4:0C:81:81:59:CB:00:E4:BE:9F
            X509v3 Authority Key Identifier:
                keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:bc:0b:11:6d:50:4f:74:f7:48:a0:be:f7:86:56:ed:46:53:
         2c:7a:3c:70:72:90:95:b3:c4:80:59:27:fb:a7:6e:9b:ab:41:
         32:ea:58:0b:1d:5d:af:d1:9b:a6:e5:4c:4c:4c:a4:b2:f9:84:
         62:cc:c5:57:61:79:40:bf:ea:58:6a:93:98:43:a5:bb:90:90:
         bf:74:d8:2a:ec:de:30:d2:f2:b0:70:24:d7:f7:2e:b6:5b:86:
         70:fc:62:77:f2:f8:7e:4a:7b:47:ba:12:02:a3:f9:46:d0:d8:
         c7:b6:99:d9:52:0f:fa:40:22:a8:65:8d:3a:ee:a7:8c:c1:7f:
         16:fb:a0:e1:68:bd:9f:32:89:ec:2f:7d:83:5a:c4:b9:8a:3f:
         eb:9c:03:56:2a:ad:bb:20:72:60:d4:a9:54:68:ac:1d:66:33:
         93:24:46:aa:08:43:90:ce:d8:6f:95:82:fd:53:a0:8e:ef:4d:
         b1:04:50:5b:81:f6:30:39:76:e9:ab:b5:b4:77:75:b5:f7:cb:
         19:32:8e:ca:a7:2a:03:72:a2:16:d6:58:71:4a:a5:79:52:32:
         af:55:44:a9:1d:75:c9:52:46:b1:40:20:31:72:1e:2a:9c:ab:
         fc:57:78:58:45:77:42:60:a2:fe:a6:62:eb:3a:7a:bb:1f:56:
         60:16:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:56:54 2026 by rpki-client