Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File:                     S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier:          1lh8wSfb6DKFCjfqSLCLkW7uS4ldBhMdXTBThST7//I=
Subject key identifier:   2E:13:47:E4:94:8F:0F:6A:2A:AD:0E:66:B9:F7:69:E1:FD:94:68:8D
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer:       /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial:       019EC25C91AD19337C55B5E0D7FB55A0F462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number:          1986
Signing time:             Sat 13 Jun 2026 19:01:46 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:46 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:46 +0000
Files and hashes:         1: R4nwBrKG7x9uOWCG8K_so7mVRUo.roa (hash: R6vN21QkHPK5A6K5j3qcFOHwB6bVk1zcZeUr2+mwrXk=)
                          2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: L+bi9Xa1ejJgAEva9OsPwrpVQJhoYWNrqEPWRuhoM2A=)
                          3: cN9-QkcDeRmmddqpx80fjE4LD7s.roa (hash: O0DZXiBII2s8che4/ZMrj0hj9juscGV08AllWCCgxdM=)
                          4: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
                          5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:91:ad:19:33:7c:55:b5:e0:d7:fb:55:a0:f4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
        Validity
            Not Before: Jun 13 19:01:46 2026 GMT
            Not After : Jun 14 19:01:46 2026 GMT
        Subject: CN=2e1347e4948f0f6a2aad0e66b9f769e1fd94688d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:8e:ee:a2:14:88:03:86:ea:ce:e2:f5:46:
                    7d:50:a0:38:0b:3a:6f:67:2a:59:1f:23:19:35:fe:
                    ee:a8:64:c4:08:46:ce:cd:40:aa:e8:4d:41:58:8a:
                    3b:d0:fb:86:24:09:cb:c8:c8:0a:e4:cf:ce:08:58:
                    f9:d3:d4:e9:c4:b0:c9:58:41:c5:20:ee:e0:30:d9:
                    ce:45:90:25:cc:83:c8:11:da:81:a4:76:85:3b:8f:
                    41:d1:a6:bd:91:17:4c:40:87:fc:90:ef:37:0c:ac:
                    41:c2:1f:c4:a7:56:8e:a1:b6:02:73:b4:4a:0f:91:
                    eb:e8:59:10:0b:be:ef:8a:47:28:b1:27:df:b5:bd:
                    3c:a7:e3:0f:44:36:a9:7d:bf:95:a7:29:8d:44:a1:
                    59:d4:5f:19:10:bd:56:43:c8:b3:db:21:af:1c:42:
                    6d:e3:af:59:fa:37:39:b0:0b:77:d9:06:cf:6a:f3:
                    be:c5:69:a0:d5:f2:ec:93:3c:29:8d:aa:8e:e9:18:
                    bc:2c:a2:27:0a:44:3a:60:8c:cb:84:8e:93:61:2e:
                    07:00:c6:67:7b:fa:42:83:d0:9d:e6:5a:0c:3a:0e:
                    d4:f5:b8:d3:ed:ec:67:95:7f:85:68:9a:aa:9f:69:
                    64:58:c3:88:67:8c:9b:73:57:a9:31:f6:28:78:9d:
                    f8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:13:47:E4:94:8F:0F:6A:2A:AD:0E:66:B9:F7:69:E1:FD:94:68:8D
            X509v3 Authority Key Identifier:
                keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:67:16:4a:97:52:ca:0c:ec:fa:59:0f:46:e9:8f:a9:48:
         7c:e7:8c:56:f9:4e:c7:9c:a8:6c:2d:e9:98:e4:5d:c2:a6:c2:
         04:06:1b:35:45:99:96:1d:a7:38:f0:11:f5:83:98:cf:a1:a6:
         da:14:b0:e3:fa:45:a8:de:55:a8:8e:31:28:f4:25:6c:35:7e:
         af:d6:de:5b:ba:09:43:3a:ee:16:01:20:75:45:35:b8:aa:a0:
         ea:44:b5:6e:7a:48:a5:41:e9:b8:1f:17:e0:ad:ff:02:cc:91:
         c1:96:f5:61:f9:10:3d:1f:25:2e:71:ee:5f:a5:9a:c3:62:cf:
         b3:21:34:0d:ce:41:da:cf:33:a3:92:34:35:6f:72:57:0c:b3:
         ff:2e:c8:68:61:f2:40:75:29:2c:ed:be:83:f4:88:82:e5:c1:
         75:6f:eb:63:71:da:b6:d2:19:fa:ce:7b:92:d2:ea:06:20:f1:
         14:cb:09:5b:06:a8:18:b6:1a:c8:3e:cd:ce:31:06:46:22:6d:
         a2:ca:ae:c5:e4:72:60:99:65:52:5a:c2:7a:dd:5a:63:bf:ac:
         62:58:9c:28:3b:1c:73:2a:f7:26:7e:80:af:55:b2:c0:01:43:
         6a:2c:28:17:24:27:fa:17:74:03:88:60:34:0a:e3:a0:68:6e:
         8c:7a:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:20:46 2026 by rpki-client