Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File:                     mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier:          mPrDMNMkh6ZnqvH0yKwisf5Q3tjzzK0fm9puMuSDVgA=
Subject key identifier:   4B:12:EE:29:90:E3:67:99:74:61:B0:C6:C5:99:2F:43:26:0A:7C:84
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer:       /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial:       019EBF5AA4F97A08F5891308553B7FF44B5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number:          06CF
Signing time:             Sat 13 Jun 2026 05:00:49 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:49 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:49 +0000
Files and hashes:         1: FBxiREsktkVFp8venH-s08qeoPQ.roa (hash: ibnO/dj3ZhDaLeFXf0GojpXiulWnjeB2LQmvljQymA0=)
                          2: WvhwqSTk9fYsIwVWoqZqzKg6HQ0.roa (hash: GwslgAUxIHInMefcYidsp1yt/WAtqY5sHB1EhJWpZT8=)
                          3: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: 6X1QXlZ/ciRDIRkIM+wWP6fk8+QM84nGQAp4b8Nq5k0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:a4:f9:7a:08:f5:89:13:08:55:3b:7f:f4:4b:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
        Validity
            Not Before: Jun 13 05:00:49 2026 GMT
            Not After : Jun 14 05:00:49 2026 GMT
        Subject: CN=4b12ee2990e367997461b0c6c5992f43260a7c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:a4:c7:1f:8a:66:49:1c:bb:9e:8a:18:a2:
                    57:ba:d3:0c:e7:d0:6b:06:29:cc:9e:17:d8:54:61:
                    61:15:2f:de:80:fd:25:e9:56:9d:b5:94:76:77:18:
                    62:1b:9f:42:18:46:c2:d5:b5:6e:63:b9:12:7a:56:
                    69:71:0a:e8:bf:e4:f0:90:2d:2b:3b:30:dd:c2:86:
                    23:34:3a:9c:a5:d0:7e:5a:b6:d2:80:79:4d:c4:16:
                    4b:3e:6d:60:62:d8:81:32:a1:71:06:37:39:85:39:
                    f7:94:09:94:cc:46:e0:7c:99:7e:5e:33:19:b8:4e:
                    2c:db:f3:7b:86:57:b8:ac:44:a5:fe:68:c8:27:eb:
                    10:ec:33:f6:99:6f:40:cc:d4:a8:9c:58:69:4f:ee:
                    df:6c:c2:6c:17:9b:ca:9a:f8:38:04:f6:ac:95:45:
                    b2:f2:ee:4a:cc:8a:04:a3:a3:4a:f3:9a:84:50:66:
                    bb:0b:2b:d0:8e:39:99:b7:e5:8e:19:e4:4e:db:00:
                    af:f7:af:be:7c:d9:e6:cf:e8:cb:b2:12:4a:a7:63:
                    d2:e3:c7:16:95:35:b5:20:23:ed:f4:99:70:36:dc:
                    27:5c:7f:54:be:13:b0:e6:cc:5c:d4:a1:6b:2a:a3:
                    a4:b7:a9:10:1c:72:1e:7b:98:04:65:2e:ff:ac:31:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:12:EE:29:90:E3:67:99:74:61:B0:C6:C5:99:2F:43:26:0A:7C:84
            X509v3 Authority Key Identifier:
                keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:11:7d:39:02:d6:2b:74:fe:ec:c4:16:fa:e8:20:dd:d9:6f:
         11:45:ad:e0:78:5e:a0:a8:0e:23:1d:30:88:7a:d7:a6:7e:3f:
         8a:f8:ae:bd:8f:b4:58:1e:4e:90:d3:30:12:df:c3:81:71:94:
         f3:ac:ad:9e:3e:38:47:5d:f6:43:25:22:50:ee:1d:98:90:b3:
         31:4c:d4:98:6d:aa:df:d5:a6:f2:e8:64:1d:d0:0a:35:87:5b:
         44:b6:a1:51:77:3a:8f:e6:0c:b5:7f:55:7f:f2:e3:2c:f4:82:
         22:42:8c:1b:6d:10:d6:fb:e0:2b:d2:a7:b0:bc:f0:f3:32:80:
         3a:08:49:7c:c6:94:74:60:a2:19:82:6a:a2:78:91:4e:4a:a2:
         24:44:9e:a1:31:84:61:61:0e:d3:ed:fb:c1:48:a1:3b:71:07:
         ad:c3:29:67:a8:72:35:63:81:9d:12:b6:45:f4:c4:01:13:d4:
         d8:90:0e:13:47:b2:5e:4f:cd:77:a4:af:66:11:fc:79:31:81:
         e6:98:16:03:7e:f4:f4:88:d2:6f:68:30:f9:59:d0:c0:01:1a:
         64:cd:fa:67:56:c5:6b:d4:e4:6b:90:61:f6:9d:95:91:ba:b6:
         33:68:d5:25:7c:6d:aa:2b:e6:c1:a8:43:a7:d4:78:e3:0a:c2:
         d4:0f:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:36 2026 by rpki-client