Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File:                     1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier:          9SAg2XcLogX/XLMUAStI/tdxpWs+PGYAzTQ2nisL3+Y=
Subject key identifier:   DE:2B:1B:09:2A:22:B7:12:A8:63:8E:28:5B:8A:EF:B3:04:F5:FF:D6
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer:       /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial:       019EBE4839CF9BCC73B59A0FB3744ACF6125
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number:          197D
Signing time:             Sat 13 Jun 2026 00:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:04 +0000
Files and hashes:         1: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: tmmV3M5Xyenw12Dmy7nrX6evxIGyU9mcC9/2T7w/UJc=)
                          2: 3OLcCBdwbIaLkHGliS3jf40rOZM.roa (hash: y+Z6qCdxU1AT2mPO0SPuKLnBtAD3uBo7UAXx7c407AA=)
                          3: 7LUz6zkdSebwRph-6evZof_oRoA.roa (hash: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k=)
                          4: KtD6aD4KBGSPFRBC5ubxTgpv4OU.roa (hash: zNzcDdueDysFJSzHSeNazQFGxaY5kz27vwvCAz515lA=)
                          5: OMBNTszB5wXKZ9IOOisfc5Ncc3g.roa (hash: OQtSOUZKXb+ePEwbUtJ2h6BYGNQBsamV7FxCAnZHUEg=)
                          6: VDq4XVm-chk4RmH_DLCcm-c9XVU.roa (hash: uzm9itNBfPBSACNJ8dRUqkqj9M3fkNruixY7kFUN5DI=)
                          7: WjUJuVavVvWIOhCXLIpzjmH8nxM.roa (hash: oWtAdEFup6UqaVEjv0AVS/6vQwdRB+cwenGWPR6SHoY=)
                          8: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (hash: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:39:cf:9b:cc:73:b5:9a:0f:b3:74:4a:cf:61:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
        Validity
            Not Before: Jun 13 00:01:04 2026 GMT
            Not After : Jun 14 00:01:04 2026 GMT
        Subject: CN=de2b1b092a22b712a8638e285b8aefb304f5ffd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ff:ef:92:23:05:c8:df:9b:2a:5d:49:27:44:
                    62:69:73:fb:8c:d9:a8:4d:5c:0c:35:3a:da:fc:52:
                    2c:7b:10:17:4d:ee:cf:9d:62:99:0a:00:d8:4c:5e:
                    50:e8:37:7f:86:9b:25:2e:0c:42:e3:22:5b:07:44:
                    d3:5a:67:14:45:aa:c0:15:d9:1e:15:51:dc:5d:76:
                    d0:77:33:91:95:5b:99:eb:39:49:1b:60:b5:9e:7f:
                    ff:d3:31:2e:53:52:47:26:5b:39:e8:2f:b9:eb:bb:
                    34:3d:92:d8:87:44:f8:1d:61:9e:34:53:d0:2b:8b:
                    d7:80:64:32:e6:f9:e6:07:85:fa:bf:47:21:4a:6a:
                    d6:77:d4:df:79:0d:01:9a:3d:b1:08:be:9e:6e:49:
                    49:fa:40:15:1b:24:7f:bf:f5:f1:11:5d:97:56:61:
                    2e:c2:60:6f:14:10:30:8e:1e:9c:42:57:95:f4:30:
                    fe:21:69:d2:e2:d4:e8:b1:d0:9f:c7:6b:85:da:14:
                    49:5a:da:17:38:e9:44:e8:62:1e:02:13:0b:5c:1a:
                    e9:e7:7a:8d:08:67:8c:16:5d:2b:b2:80:05:7c:66:
                    bf:64:df:7c:df:41:60:70:d7:80:a1:49:97:8d:ad:
                    ac:c8:84:2b:81:96:5b:dc:8b:95:9f:7e:4c:d1:86:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2B:1B:09:2A:22:B7:12:A8:63:8E:28:5B:8A:EF:B3:04:F5:FF:D6
            X509v3 Authority Key Identifier:
                keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2a:09:61:c1:09:5d:cc:7e:f1:20:1f:0b:4c:bf:11:2f:24:
         fd:85:28:63:87:d5:f6:a9:05:a4:68:b3:51:1f:9c:fb:1b:3c:
         fb:2e:c5:22:f8:7f:48:dd:3e:a5:29:b6:16:a3:4b:dc:fb:81:
         03:08:16:fe:68:be:c0:f7:b0:08:fd:8c:78:8c:b7:6b:98:9c:
         9d:58:15:da:f0:11:4e:02:cc:b0:77:39:19:13:a3:65:95:3a:
         08:70:31:6d:e7:ed:26:62:78:a7:5c:bb:2f:72:e5:8d:36:18:
         31:75:29:82:c6:7b:af:62:bb:7d:2e:cf:5d:c1:a3:77:2a:25:
         81:f6:da:d0:39:f6:af:8a:1b:55:c0:94:11:60:34:51:56:eb:
         2e:79:4b:77:7f:7b:b4:43:f5:2d:c8:3f:ea:8c:07:a3:60:1b:
         b4:ae:72:5c:c0:27:60:b3:78:ae:59:c6:33:17:f9:cd:50:13:
         c3:3d:7a:67:b5:25:a5:0b:98:30:1a:73:54:88:c2:aa:5a:7e:
         7c:84:f1:37:bb:02:37:59:24:fd:95:87:15:60:a8:39:5c:a2:
         37:a7:b3:d4:30:af:76:90:40:dc:dd:e4:74:2c:66:22:9e:44:
         22:39:90:a2:9f:fc:b6:d7:a1:41:95:bc:a3:b7:a8:23:37:dc:
         28:a0:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:44 2026 by rpki-client