Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File:                     XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier:          eQg0b6fGIw4IqWPkBqlarTPz1MVguG7PWC82Tv4/57w=
Subject key identifier:   66:E5:F8:BD:91:37:80:D0:46:02:D0:67:7A:03:FF:49:DF:FF:10:42
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer:       /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial:       019EC6DD2914FF1FD8073D2B0578550A175F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number:          1961
Signing time:             Sun 14 Jun 2026 16:00:43 +0000
Manifest this update:     Sun 14 Jun 2026 16:00:43 +0000
Manifest next update:     Mon 15 Jun 2026 16:00:43 +0000
Files and hashes:         1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=)
                          2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: t+vTk02EOaKCsnULe8EypVPcFGqpsAB2ujDNmIkMSj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 09:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c6:dd:29:14:ff:1f:d8:07:3d:2b:05:78:55:0a:17:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
        Validity
            Not Before: Jun 14 16:00:43 2026 GMT
            Not After : Jun 15 16:00:43 2026 GMT
        Subject: CN=66e5f8bd913780d04602d0677a03ff49dfff1042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d7:ee:43:11:a3:71:70:35:6d:ce:14:9b:10:
                    c4:b4:d7:a8:ef:4e:16:0b:3f:06:3c:2d:0e:70:df:
                    fc:bc:2d:04:65:38:23:d1:d5:8b:53:fa:5b:2e:78:
                    12:4f:83:2d:aa:3a:8f:3f:00:9c:9a:c6:00:96:5c:
                    fe:c9:ba:da:33:9d:5a:15:75:0e:e5:cc:d6:24:b2:
                    ed:74:32:75:5b:70:b6:46:5c:47:e5:db:6a:c2:fd:
                    3e:b2:c6:20:11:36:19:c1:3e:5a:06:e4:38:c9:14:
                    39:9e:dc:0a:c3:98:d6:fe:e9:03:87:33:cf:7e:fa:
                    c1:fc:10:57:2a:e2:27:8a:26:d8:5d:09:83:a9:9a:
                    e0:c5:85:ea:9f:1f:13:af:72:47:12:04:b4:08:ae:
                    64:32:47:e1:44:c3:65:b1:c1:89:a1:01:51:13:18:
                    d0:9a:41:1e:24:06:21:69:b3:3f:cd:9b:00:ac:bc:
                    b6:fe:0a:88:5d:43:d5:12:b6:58:28:ea:46:58:58:
                    b4:cd:a9:63:f4:48:fa:cb:7a:32:34:c7:17:93:11:
                    d2:16:21:ca:d8:06:2f:f0:f6:f7:85:76:e4:9c:7b:
                    07:17:81:77:60:1c:e8:68:76:76:85:67:60:1d:9c:
                    0f:1f:73:4f:d7:74:cc:9f:04:00:d0:f3:97:ba:df:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E5:F8:BD:91:37:80:D0:46:02:D0:67:7A:03:FF:49:DF:FF:10:42
            X509v3 Authority Key Identifier:
                keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9b:10:54:53:64:de:5d:b4:d7:73:35:1b:ed:08:b1:72:74:
         c5:8d:80:56:ff:19:32:5a:6f:13:62:76:94:83:a3:bb:e2:da:
         e5:b2:54:98:60:6e:c9:dc:07:e2:51:89:25:2e:59:0d:da:94:
         9e:46:e7:fb:bf:68:50:9d:60:81:23:ea:3c:a3:82:84:26:af:
         3d:b8:46:9f:6a:2d:17:24:32:ae:f6:40:b6:f4:7f:b0:da:1e:
         f1:5d:0f:99:e0:a8:3a:b0:d5:cd:b6:5e:71:85:00:d5:6b:81:
         45:a1:cf:06:ab:f9:a4:6b:37:a0:32:17:fb:fd:a6:df:dc:e8:
         b8:9d:c5:5b:df:09:b0:a1:b0:d9:bd:c9:c6:f3:35:b6:ce:b6:
         70:b6:de:55:5c:cd:a1:3f:78:8e:a6:89:40:2a:0a:6f:71:0b:
         ab:fc:90:80:51:a3:dd:60:44:6f:8f:39:a6:51:3b:e2:71:54:
         43:cb:88:c9:a7:ea:3c:1b:2c:9a:d1:82:f6:9e:5b:61:ed:95:
         62:4c:70:47:26:01:b2:61:6d:db:4b:74:f5:b7:36:24:23:84:
         e9:2a:a3:f9:f8:56:18:d0:79:12:eb:11:78:c0:1c:ab:31:95:
         d6:4d:01:7a:66:5a:5c:bc:fc:54:85:aa:bc:e1:0b:e8:64:a6:
         3d:42:99:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 18:46:52 2026 by rpki-client