Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File:                     t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier:          ObMK+Xo2edJaJFq/TabcST3R4v0fedR7GT5JjUv9KHQ=
Subject key identifier:   0E:59:26:99:BD:CC:A3:BC:8D:65:C7:CD:C5:11:DA:27:C1:01:3F:8F
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer:       /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial:       019EC2CA27E51C67C472B3B1AC1BC63C8CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number:          1246
Signing time:             Sat 13 Jun 2026 21:01:28 +0000
Manifest this update:     Sat 13 Jun 2026 21:01:28 +0000
Manifest next update:     Sun 14 Jun 2026 21:01:28 +0000
Files and hashes:         1: C3bpuH1Ln3wZcltqgWV-QdyZXWo.roa (hash: SgEa2GcTojmgl93R0bbvqmF29F3iGkaifhHxCRpsADM=)
                          2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: G5FqU+O2yhlPQ1hOgcAL8uGmulyZ80sll3WuZNqeJBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:ca:27:e5:1c:67:c4:72:b3:b1:ac:1b:c6:3c:8c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
        Validity
            Not Before: Jun 13 21:01:28 2026 GMT
            Not After : Jun 14 21:01:28 2026 GMT
        Subject: CN=0e592699bdcca3bc8d65c7cdc511da27c1013f8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:e9:6b:56:9f:5a:31:c1:1c:36:be:75:0c:
                    ea:0e:8e:17:de:2f:94:02:a5:f9:cb:72:7b:1a:4a:
                    52:fb:7a:be:e0:7f:63:6c:d7:d5:e0:57:de:95:3e:
                    ac:59:e5:2e:a6:4e:0b:f1:b8:cc:3f:13:23:30:73:
                    a4:fc:6f:a3:42:58:a0:15:f4:2d:a0:ed:00:3a:f6:
                    e7:37:66:ba:fd:cc:67:4a:b4:83:cb:41:8b:b7:c9:
                    ce:87:ab:99:d2:08:e0:59:31:eb:17:7b:7c:1c:a6:
                    06:2b:40:f6:22:5f:c3:50:a6:50:00:35:5f:fc:ab:
                    bd:96:28:fc:f7:8a:5b:89:de:e3:5e:60:7d:fd:a3:
                    8d:0a:e0:f2:28:75:2f:83:ec:8e:65:16:99:fa:f6:
                    0b:85:57:08:af:7e:ab:6b:19:1b:08:cb:59:61:84:
                    ec:b1:b2:e3:fa:18:8c:af:1a:cf:bf:7c:79:c3:93:
                    4b:a3:ee:ac:eb:78:fa:c0:96:e4:a2:3f:bc:90:5e:
                    84:69:68:8f:65:4a:1e:64:d9:e5:ca:8b:b7:f1:84:
                    bb:f1:f9:86:e0:4f:d7:61:ce:e2:41:21:f6:56:f2:
                    26:dc:f6:a7:e6:4d:f9:79:7c:2c:45:3c:7c:bf:c1:
                    b5:a3:eb:49:7b:83:7d:0b:6d:be:5f:22:df:ad:99:
                    82:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:59:26:99:BD:CC:A3:BC:8D:65:C7:CD:C5:11:DA:27:C1:01:3F:8F
            X509v3 Authority Key Identifier:
                keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:09:38:18:6c:72:7d:b6:72:ce:ca:a8:a3:9a:38:39:6b:16:
         27:3f:fb:8d:d2:7a:67:02:99:d3:29:4d:58:ba:f5:cb:44:45:
         bb:f3:d6:bb:81:cf:25:48:08:db:98:bd:19:3f:a2:ce:43:19:
         20:c7:07:6a:eb:e8:40:d8:8e:21:00:0e:98:54:7f:07:df:8f:
         db:15:fc:3b:d5:95:53:a2:e0:d7:46:ce:e6:15:ee:e4:35:18:
         06:04:ac:34:d8:08:c9:da:ba:99:6b:01:27:9a:94:f4:da:8c:
         b3:85:5f:b4:de:31:0f:14:43:5c:3f:12:13:50:9e:34:6b:07:
         8e:75:a3:30:5f:47:06:53:08:49:8c:64:3b:a7:70:cb:85:85:
         92:77:7b:16:37:33:39:e5:98:95:86:70:c4:4a:26:ab:d0:4e:
         06:7a:d8:3d:82:9e:3a:6f:cf:f2:69:d3:4c:9c:cb:ac:ed:0a:
         2e:f0:2e:7c:0a:49:7b:d9:6f:e5:fe:03:a2:3b:91:41:65:c8:
         dd:7b:d6:78:e1:7f:5f:a9:18:86:a4:f1:c3:7d:59:36:01:5e:
         fa:1c:49:21:49:ec:d5:6f:26:6c:25:81:07:83:3e:bb:fb:a5:
         50:a4:0b:40:22:1f:e6:be:b1:a6:13:f1:86:6c:6e:2a:66:36:
         8b:a8:aa:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:03 2026 by rpki-client