Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
File:                     fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json)
Hash identifier:          31I26D+jmz64SFIrM8CGA8LqUkQIqNCibDlTEn40ePY=
Subject key identifier:   BE:0F:FB:A6:EB:5E:7F:2F:AA:5F:02:6F:4A:C4:B7:0B:B5:48:73:3D
Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8
Certificate issuer:       /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
Certificate serial:       019EC52643E0586430BFF3BB8048C8C489B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
Manifest number:          18ED
Signing time:             Sun 14 Jun 2026 08:01:19 +0000
Manifest this update:     Sun 14 Jun 2026 08:01:19 +0000
Manifest next update:     Mon 15 Jun 2026 08:01:19 +0000
Files and hashes:         1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=)
                          2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: RsuC/gp63ilkbnAiqAwE5gkJSq77jDy2GVqOFf2nvYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c5:26:43:e0:58:64:30:bf:f3:bb:80:48:c8:c4:89:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8
        Validity
            Not Before: Jun 14 08:01:19 2026 GMT
            Not After : Jun 15 08:01:19 2026 GMT
        Subject: CN=be0ffba6eb5e7f2faa5f026f4ac4b70bb548733d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5c:dd:ab:67:fe:47:e5:64:6e:e6:b6:ba:6f:
                    1e:6c:ee:18:ee:c3:46:86:df:35:b8:9c:5a:fc:6f:
                    4e:8e:bd:65:fc:b3:7b:49:84:de:70:46:e5:c0:5d:
                    11:71:2b:ff:63:c2:7e:c1:df:5e:75:44:f6:4f:68:
                    38:a4:e7:30:d3:bc:3a:33:12:ca:ea:ae:82:4b:98:
                    47:52:06:cf:20:ab:20:9a:52:09:94:13:6d:97:6b:
                    0e:84:31:1b:6e:cc:e1:cd:4b:38:f8:c1:9f:1f:52:
                    3f:3d:74:51:9c:1e:bb:e5:b4:b4:0b:df:32:cd:a1:
                    20:5f:36:3b:6e:27:08:e0:2d:16:74:6b:5e:45:90:
                    9c:09:65:ee:ef:8a:17:51:c7:e9:40:6c:98:2b:01:
                    94:15:50:80:0c:e8:e3:a8:96:89:bc:8d:0a:41:62:
                    fd:99:c0:89:92:2a:70:2a:3f:42:70:6d:f1:ee:d4:
                    b2:8d:1c:07:a1:15:aa:d9:bb:7e:cb:f2:95:43:27:
                    87:f3:a5:cb:2b:82:d7:96:9e:3f:45:74:0b:1a:c9:
                    04:4c:08:56:4a:36:e2:13:b5:a0:bc:29:38:3f:a7:
                    fc:88:6f:15:f7:1d:f4:56:cd:f4:d4:38:58:68:07:
                    00:c8:ef:34:1f:00:31:6f:16:96:c9:78:a3:41:21:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0F:FB:A6:EB:5E:7F:2F:AA:5F:02:6F:4A:C4:B7:0B:B5:48:73:3D
            X509v3 Authority Key Identifier:
                keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:99:a1:f9:95:3d:78:ce:0e:73:3a:11:a7:44:b0:95:4e:
         bb:08:6a:7c:22:7b:91:b9:56:b5:b3:2a:70:a3:62:85:f3:01:
         35:31:8d:9b:20:32:3a:78:c4:ea:49:15:a7:ff:28:d5:15:e5:
         eb:43:9f:db:a1:5f:ee:30:be:c8:3d:20:d6:07:63:27:e1:aa:
         b8:e8:66:33:3a:bf:a5:9a:d5:37:1d:76:c8:10:9e:b3:7b:5e:
         19:57:15:71:ae:04:8a:4a:e6:1b:93:7e:7c:78:1c:1f:24:95:
         12:a8:a5:b4:bd:40:1f:d5:dd:dd:a2:26:b8:2d:3f:6d:63:39:
         39:2b:b7:2e:6e:9b:ce:74:cf:b0:f0:7a:16:84:b7:40:d5:9b:
         4b:c5:f4:5b:c2:60:fb:ee:05:0a:8a:ca:09:b5:f4:56:a5:8f:
         16:5f:13:45:b1:ee:6a:b8:6f:25:21:83:86:d9:f1:29:7c:72:
         5e:ee:22:de:f4:f4:94:2d:b0:6b:20:1b:0f:82:8f:6e:27:a8:
         25:1f:cd:55:de:4c:20:72:41:99:a4:d4:d1:64:87:dd:e4:0d:
         7b:33:9c:13:66:2c:30:ae:14:bb:6a:2d:4a:d8:ac:12:e0:80:
         c8:de:b8:d7:70:ab:13:51:d6:cd:1d:36:28:8c:83:2e:07:61:
         5b:c9:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 11:12:21 2026 by rpki-client