Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File:                     2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier:          2ramreMDSM76mN3gLnyc6bkM8iAVJ2XMNucqOezHRPg=
Subject key identifier:   BE:25:24:9F:A6:B9:77:50:B9:49:21:D6:EA:12:F9:93:04:D4:94:40
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer:       /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial:       019EBE47E7BA9A6729A4E9047360C4D499EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number:          0FC4
Signing time:             Sat 13 Jun 2026 00:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:43 +0000
Files and hashes:         1: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: 314NPkgaHJPrD5kUvpb+uLXiwBv9PC12mwRi2CbpIYY=)
                          2: 5xg54AVWW6Xi4BJUknnWOr4xprs.roa (hash: dLKpdsBaGDiqHhkCmoQj4IsxNnhuKkpCJzE6NQ8QV10=)
                          3: 7NjBGXkoqrpJtik6hyWam_91fPM.roa (hash: Cd/yxor3wZg6xcWw81ojOZAbyI0L65eF/W7E8e19B7M=)
                          4: bb-V_rGf3B0QiaioeNxnU56I040.roa (hash: 4nxBn8kzAZLq0QSt7O7jxqlGii0yEkqJb0VFpRa6+jU=)
                          5: tpwdEfzMyWWx6VArR0hVjMo-3q8.roa (hash: UHSQrSMMwMC/F3MwzFHNY7G8M39N7oYGsjXC+3amyxw=)
                          6: xC0dGwS2hqJMFjJkASOl38eG4CQ.roa (hash: o1etJOQuElRRT8k2/A1UeIK9/USuVlD2nFRLc2q3+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:e7:ba:9a:67:29:a4:e9:04:73:60:c4:d4:99:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
        Validity
            Not Before: Jun 13 00:00:43 2026 GMT
            Not After : Jun 14 00:00:43 2026 GMT
        Subject: CN=be25249fa6b97750b94921d6ea12f99304d49440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:96:6c:81:ec:d6:fe:ad:ac:2c:cf:f0:35:
                    c2:f4:bc:74:fa:b9:49:00:68:1e:6a:75:f5:f2:91:
                    2a:96:01:a2:20:ad:49:16:ab:be:93:c4:51:4c:ce:
                    43:bc:34:7e:09:00:41:ff:9a:c0:ac:a1:51:70:e4:
                    8b:0b:43:3d:85:4d:74:59:ab:8f:fc:ae:3e:af:90:
                    5b:f3:18:fa:ed:0d:a0:6b:ff:03:89:57:2d:85:51:
                    60:77:0c:c5:42:a5:c1:13:0a:cc:53:b1:e2:5f:7f:
                    c4:48:38:29:65:9c:fe:f1:ed:a0:13:b9:a7:4a:17:
                    fe:46:00:f8:63:ab:31:10:82:18:04:e5:e0:ca:15:
                    b8:16:9a:c2:02:71:a6:ae:cc:ab:7d:f1:91:d7:57:
                    44:3e:60:36:52:8b:9b:1d:8f:28:db:f4:77:9e:3a:
                    2f:e1:ed:fe:c9:6d:e4:46:cb:72:83:ed:88:77:74:
                    44:a1:52:ed:83:e4:60:6c:a2:da:18:f3:24:a4:8c:
                    71:74:6b:12:8c:9a:f9:bc:fa:cd:46:2b:86:2a:33:
                    74:69:94:39:a1:05:f2:28:a3:92:9b:fc:9e:60:ca:
                    33:ec:3d:eb:4f:87:20:94:3c:54:a0:7e:31:d2:e4:
                    3d:6a:c5:05:c1:9e:b6:5f:fa:eb:5f:3b:5f:e6:a0:
                    6c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:25:24:9F:A6:B9:77:50:B9:49:21:D6:EA:12:F9:93:04:D4:94:40
            X509v3 Authority Key Identifier:
                keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:71:49:7a:fc:4f:b8:ba:87:b0:15:93:d0:90:0c:1d:91:f2:
         00:f7:cb:28:ee:9b:c0:02:a4:6c:5e:51:6e:44:c9:76:55:9e:
         7d:9f:be:15:c8:93:7c:92:c2:a9:8a:b9:9f:cd:a3:38:2f:fe:
         1d:9d:66:c0:9e:2d:a0:a8:a6:2f:b8:52:a6:93:d9:da:c3:50:
         80:bf:e9:b7:b9:44:42:23:67:9d:84:cf:1d:de:14:46:f0:3b:
         0d:9a:99:b6:5a:79:24:48:61:13:46:73:de:05:10:e2:ab:cf:
         1c:e3:b7:1e:3f:78:49:d4:6b:45:6d:21:10:8f:9e:fe:29:f6:
         11:1a:57:80:a1:88:ef:f0:6b:b4:9f:d0:35:f3:8f:b1:38:c8:
         61:61:32:97:cb:c0:a1:4a:f5:e8:51:b1:bf:8c:28:f1:17:2d:
         6c:5b:13:6e:64:57:b7:be:9c:7c:19:71:06:0b:6f:92:65:25:
         70:d0:aa:74:fd:94:69:49:69:dd:6d:84:3c:03:2c:3d:d5:74:
         19:6c:9b:97:fb:d9:e9:97:11:7d:8f:ab:17:af:7a:87:06:35:
         79:7a:0f:87:a6:db:56:f7:20:67:12:29:ca:40:b3:15:4b:ee:
         ea:93:66:31:4e:bf:ca:ab:67:f0:53:ef:79:5f:94:69:bf:e4:
         42:84:b0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:20:12 2026 by rpki-client