Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
File:                     MXqSdCYInzuMUACDIhp5ip0uhGY.mft (raw, json)
Hash identifier:          cgzIyvO19uAgpLDuAxTynLw3dMqrh7hSl7SSuwc3i4Y=
Subject key identifier:   B3:44:9D:2E:43:29:CB:36:37:78:DA:6A:D5:C9:30:EE:63:05:F3:67
Authority key identifier: 31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66
Certificate issuer:       /CN=317a927426089f3b8c500083221a798a9d2e8466
Certificate serial:       019EBF23830A415064C21AB105851AB77488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
Manifest number:          1685
Signing time:             Sat 13 Jun 2026 04:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:35 +0000
Files and hashes:         1: 3-jw2Mn4GAjthDEPkukJUUAA8ms.asa (hash: OVjmmAruwPeNeXIeJ+cgYwQWAPOrHRgmi+6ExlA9DiQ=)
                          2: AAeB0P11BLo-0wFOSgELqWi6J00.roa (hash: ne5zZYzC8PT1Zd7TFJmCajzK/4fC4/JAvjpEfVor37I=)
                          3: MXqSdCYInzuMUACDIhp5ip0uhGY.crl (hash: aDvAD1Vi6gKhmuNmvjyQ4cFOcO+9m8o37myfT57gnqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:83:0a:41:50:64:c2:1a:b1:05:85:1a:b7:74:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317a927426089f3b8c500083221a798a9d2e8466
        Validity
            Not Before: Jun 13 04:00:35 2026 GMT
            Not After : Jun 14 04:00:35 2026 GMT
        Subject: CN=b3449d2e4329cb363778da6ad5c930ee6305f367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:dd:a8:ff:10:05:c6:45:b2:f4:62:0a:7d:
                    88:58:df:58:e5:2c:c2:e1:2b:cf:e3:c3:8e:71:6f:
                    70:f3:f0:c2:20:a7:ec:6f:6c:f7:62:b5:f0:57:01:
                    f5:90:23:65:bb:6f:96:ef:14:9d:88:2e:32:eb:c6:
                    ca:ee:a9:66:b9:02:77:cb:7e:e6:c8:91:45:ef:e2:
                    99:f6:d6:ce:7c:5f:85:5a:43:b4:bf:da:90:bc:db:
                    51:73:a9:49:16:19:37:8e:9a:28:69:1e:2a:cf:66:
                    c2:81:66:f3:83:9f:8b:6d:af:44:cd:0f:9a:31:1a:
                    62:a2:f0:25:97:5f:91:73:af:2c:94:e5:ee:30:06:
                    de:18:94:c1:c2:46:0e:dc:fe:7b:25:98:41:31:24:
                    76:3a:25:f1:f0:c4:3f:1b:b6:80:bc:e8:8c:70:aa:
                    0c:6b:03:54:e1:9e:08:97:d2:33:ca:cb:2f:c0:b9:
                    38:e3:73:f2:27:ec:4d:e2:b4:d2:00:de:d9:9a:6c:
                    53:e4:95:fb:fa:04:a3:58:d4:52:1f:2f:f4:5d:2a:
                    c5:4a:98:23:2f:65:c3:7f:81:2f:25:e9:b2:29:54:
                    fe:b2:d1:7e:96:99:37:c0:ba:24:63:4b:9e:43:3f:
                    b9:22:f7:81:31:91:b8:d8:a5:ef:4e:ab:2d:93:03:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:44:9D:2E:43:29:CB:36:37:78:DA:6A:D5:C9:30:EE:63:05:F3:67
            X509v3 Authority Key Identifier:
                keyid:31:7A:92:74:26:08:9F:3B:8C:50:00:83:22:1A:79:8A:9D:2E:84:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXqSdCYInzuMUACDIhp5ip0uhGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/de4740-d34e-42a7-8968-464b8f3b8363/1/MXqSdCYInzuMUACDIhp5ip0uhGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:45:36:93:9a:6c:d7:c4:ae:34:90:28:f3:9c:7a:f4:1e:68:
         c5:65:5d:9e:63:2b:cf:78:8e:15:0a:cc:c5:f4:b1:8f:ea:91:
         fe:ed:1d:cb:ae:9d:1f:4e:9b:f0:6b:ef:fc:e4:9b:e4:47:fe:
         d5:07:94:37:6c:75:0c:7e:fc:8a:cb:53:1a:f5:ca:89:b8:75:
         33:a6:7c:f1:89:b8:2d:74:8e:ec:68:3d:7e:1a:ae:41:a7:72:
         ec:ea:b0:ab:0d:39:cc:30:30:7c:64:ba:2e:40:05:4b:50:32:
         d5:4d:bb:8d:ad:12:3c:0e:40:fb:fb:55:ec:50:df:26:2c:22:
         4d:cf:24:73:f5:f1:38:29:e7:d3:6a:36:6f:3d:71:c5:10:40:
         4a:da:5d:81:80:f2:b0:69:9f:5a:aa:d2:9f:ca:ab:f5:b1:23:
         66:53:fc:ee:36:2e:2d:b9:9b:cc:5b:94:5d:f0:db:0b:09:7c:
         45:f6:b1:a7:52:fd:53:87:da:a5:de:be:f9:3c:44:6a:fd:29:
         25:2e:61:5d:f1:af:95:51:3f:2f:37:33:60:c9:d4:7d:6c:d2:
         fb:7f:40:93:f0:fd:4e:78:ff:41:3f:5b:f6:2a:5e:2f:77:e0:
         41:9f:fe:c5:ab:83:69:f6:6f:23:be:4c:39:fc:e4:eb:af:c4:
         ff:b7:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:49 2026 by rpki-client