Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File:                     4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier:          2o8UeEElNhibr6SgHJDBSeWafNXqz+7IckbZDpSv7KM=
Subject key identifier:   20:2B:4A:F9:7E:7B:16:FB:98:4F:B5:EE:6E:DC:75:80:E4:D8:E2:1C
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer:       /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial:       019EC0DB15A0BE9AB193AA7DE866229F1832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number:          1229
Signing time:             Sat 13 Jun 2026 12:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:43 +0000
Files and hashes:         1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: /3WteYfWM/UYGjRy1sRzm2gDv6uJSOw6jilYnYjm4fk=)
                          2: DN7ZfyoDKyJXUkj1EC6pJ1I4DkQ.roa (hash: bY5wbQ98GBM8x3W74YxZg+qztKUip/POgTeTbjHHMZI=)
                          3: p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa (hash: 9OCWuqN8cdwaFpWbH6S/GLnMMyvjYjVk46dDsDdpR/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:15:a0:be:9a:b1:93:aa:7d:e8:66:22:9f:18:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
        Validity
            Not Before: Jun 13 12:00:43 2026 GMT
            Not After : Jun 14 12:00:43 2026 GMT
        Subject: CN=202b4af97e7b16fb984fb5ee6edc7580e4d8e21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:c4:16:94:9f:4f:1e:47:ff:7c:90:35:5a:
                    e4:2e:6b:c4:69:3a:5a:1b:31:0e:f0:27:07:0b:48:
                    cd:bc:e2:df:98:d1:bf:69:fe:4a:22:f1:0e:40:cc:
                    e4:e3:f1:76:ef:0c:10:cf:5a:3f:ba:75:31:1d:43:
                    7d:57:ee:7a:f9:b4:db:3a:82:71:67:51:ef:87:90:
                    12:a0:f1:71:c1:ff:fe:35:ce:dd:3a:76:a3:1f:fd:
                    b9:3b:28:28:2b:40:d1:72:67:51:2c:51:20:82:9c:
                    a7:80:cd:41:88:52:c0:f7:6f:a7:cf:41:55:f0:94:
                    c5:b4:2b:41:2c:53:9b:9a:5b:69:68:ff:9f:b7:4f:
                    1e:78:35:e1:40:46:5e:0b:a8:cf:d4:d0:49:a9:f2:
                    09:ff:a8:5e:f0:94:b0:45:03:91:15:9e:72:fd:33:
                    20:77:d9:2f:d0:20:79:00:fb:01:ae:d3:63:8c:d5:
                    4c:7b:78:3e:a2:06:a1:f1:b6:a1:d7:d8:71:aa:b2:
                    83:38:73:2b:3e:a3:1b:eb:40:f8:ac:05:fd:c2:be:
                    61:82:2c:33:3b:c9:b4:75:9b:ae:fa:e5:f0:b2:01:
                    d4:c7:f0:dc:76:01:46:72:c3:9c:cf:10:54:2a:e6:
                    33:0a:22:3d:e4:56:6b:34:c3:fe:aa:64:45:f7:d1:
                    d6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2B:4A:F9:7E:7B:16:FB:98:4F:B5:EE:6E:DC:75:80:E4:D8:E2:1C
            X509v3 Authority Key Identifier:
                keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:52:d6:b3:c5:64:0e:e3:04:97:f4:32:b8:4e:65:7c:2e:9b:
         a9:9c:75:60:d0:e2:b7:87:ac:cd:b0:93:a6:1d:ef:4d:a5:b7:
         a8:18:fe:d3:2b:41:58:91:e5:73:7f:4e:ca:86:b5:df:cb:fe:
         70:14:b8:9f:36:91:6f:dc:4c:38:37:f6:ae:7b:d6:93:f6:fb:
         e3:4c:7b:55:05:65:a4:65:b4:bb:14:cc:29:24:4e:00:86:bb:
         ef:83:e1:f2:bb:61:63:48:e4:95:ab:1b:bc:97:80:c2:b8:68:
         e2:73:11:d0:53:7b:f3:5f:1e:67:be:10:a0:38:de:51:b2:54:
         fb:21:69:0a:e2:33:42:6b:fa:13:47:4a:85:70:cc:05:8a:73:
         ac:73:55:09:e7:f1:75:e7:ba:85:b0:f7:ad:6c:45:82:5b:0b:
         be:7c:46:4b:ad:22:95:29:35:c9:34:a9:de:c3:ba:e5:a4:7f:
         c6:06:ba:95:7b:86:b6:2e:d5:a4:92:24:4a:2b:76:1b:c7:94:
         97:b0:2d:ac:e1:48:24:c6:06:3a:3c:89:f8:79:69:3a:ee:f4:
         fa:6e:da:53:92:5b:66:57:36:3d:7a:e4:2b:24:63:6c:c7:d2:
         7c:57:8a:1b:69:72:ef:9b:24:4c:52:57:c4:c9:c4:df:fb:61:
         14:0e:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:56 2026 by rpki-client