Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
File:                     dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json)
Hash identifier:          uZyS5O5o42gpwSrQfBLIpbLav+YBiWoIZclkeSK62es=
Subject key identifier:   4F:5B:7B:ED:E2:EF:57:A5:E4:5C:6A:A6:DA:6A:1D:56:4D:DB:E1:5A
Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C
Certificate issuer:       /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
Certificate serial:       019EBEEC5E36289CD7B277F35894F763EDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
Manifest number:          12B0
Signing time:             Sat 13 Jun 2026 03:00:22 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:22 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:22 +0000
Files and hashes:         1: 24LmoNlDA3mTST7ILFjXRoavbLc.roa (hash: ChZQ2voHnXOpu6Bgdd654y5XHIYOuPkH15v1qaYadLA=)
                          2: RDZxalDBba-KXcD-MDsp1kF4DmQ.roa (hash: RfbDrqRTWuSJ+e1Z40xGqlEQmsc4zVr3kOeTExU0ca4=)
                          3: _I5ZyNzs_5Q4toW0cmKShzzyGvc.roa (hash: CAZwJiEdqc66XP0aQOYr0r6o81HABrE7ATqPwsQle/M=)
                          4: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: Niylhlv/vbViu+RIKqssLvJLTSwvjTH0bOGEWvUSVXc=)
                          5: iB4-Lv4Y5pfev06wgUUTf3MkuqE.asa (hash: v6oTaVMB32ysT0WuXZ0EG1XMy1UYjDtrDIPZoAi/1TQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:5e:36:28:9c:d7:b2:77:f3:58:94:f7:63:ed:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c
        Validity
            Not Before: Jun 13 03:00:22 2026 GMT
            Not After : Jun 14 03:00:22 2026 GMT
        Subject: CN=4f5b7bede2ef57a5e45c6aa6da6a1d564ddbe15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:53:fb:a3:6c:66:61:db:10:ff:d3:58:d0:
                    12:4e:a8:6d:e2:cf:85:16:f3:63:b2:d3:8d:e2:ff:
                    19:93:4e:2f:6e:39:ce:2b:1c:01:9e:bb:09:5c:c5:
                    a6:a5:bf:66:a9:5e:52:91:c2:d5:b8:be:ac:4d:82:
                    a8:ef:bc:fb:a8:e8:1f:16:4f:3b:e3:80:d9:c5:37:
                    3b:9e:54:8e:e8:e0:a0:7e:79:4b:1f:cc:67:2a:b5:
                    82:80:07:98:43:13:36:44:fc:2c:5f:ed:bf:80:4f:
                    c2:4a:c7:e2:79:c3:62:83:b0:7f:a6:63:b2:a0:58:
                    ae:06:8a:ad:2b:8f:57:cb:af:69:7e:6e:c0:93:bc:
                    13:c2:7e:1b:73:73:7e:51:12:81:ba:29:14:e5:fe:
                    52:46:d7:9f:21:dd:af:b9:57:f6:98:71:ea:fc:46:
                    d1:c1:4d:64:e3:9f:c1:3f:74:78:ae:bf:28:d7:cb:
                    2d:a4:29:d3:20:14:a4:0e:cf:fd:33:6a:b8:4d:96:
                    22:f0:a4:9f:28:7c:5f:9e:1f:5b:8a:b3:6d:a8:8b:
                    f6:41:e6:ce:68:5d:39:87:6b:c8:3f:be:79:58:3a:
                    c1:6d:c3:0f:99:af:62:f5:a0:4c:cb:d7:3a:45:f0:
                    39:52:d3:cb:0d:fd:cd:c2:2c:bc:83:a5:23:af:eb:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5B:7B:ED:E2:EF:57:A5:E4:5C:6A:A6:DA:6A:1D:56:4D:DB:E1:5A
            X509v3 Authority Key Identifier:
                keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f1:7a:e2:db:79:8e:08:bd:a3:44:dd:7a:44:85:aa:3c:17:
         cb:fe:5c:2e:b1:d0:9a:19:e9:e8:91:40:ee:32:92:b8:fc:bf:
         8d:ee:29:1b:f8:7e:f6:18:05:9e:66:9d:19:75:3a:e3:a4:33:
         63:59:79:63:f8:df:c9:2a:91:e5:ce:39:58:b9:9a:7b:79:aa:
         92:d5:1e:13:43:cc:f8:a8:ac:36:98:74:8f:de:94:4a:b4:79:
         ac:4b:6b:b4:50:cc:5d:40:c8:1f:c6:f9:ef:3c:f2:78:a7:e8:
         f6:17:fd:8e:ff:5c:88:e5:25:9f:6e:52:15:1a:0d:05:9a:99:
         5d:83:c2:5c:77:7e:c5:e2:26:de:49:33:64:66:00:41:a5:ac:
         ca:d7:4d:49:d3:15:14:22:6f:5f:a0:3e:b6:05:31:f5:a4:f2:
         35:5b:36:1e:6a:2e:aa:b5:3d:c6:7c:5d:54:d6:d8:8a:1a:5d:
         82:13:e8:48:3f:cf:9f:cd:4c:d3:c3:bf:e1:27:a6:ed:83:dd:
         6f:7b:b8:5c:38:59:d4:21:43:1f:a9:af:63:e8:13:d8:3f:4e:
         c8:60:ca:1e:2b:e3:14:65:81:ff:6b:db:6f:b7:4d:f3:7d:ba:
         5b:b3:54:0c:e1:39:af:01:d8:52:68:c5:d6:cf:31:c2:e4:ca:
         24:35:a4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:22:39 2026 by rpki-client