Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File:                     SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier:          Xn2pDXc1kn6lQlVsUPeTyA/Z2vqmm2m2PFjyr5BiJQg=
Subject key identifier:   66:4B:19:D7:94:95:37:96:9E:46:29:45:21:12:35:F0:56:A5:F8:58
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer:       /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial:       019EBEED23ED9142AB8234A381C87438BB50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number:          0939
Signing time:             Sat 13 Jun 2026 03:01:12 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:12 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:12 +0000
Files and hashes:         1: 3jYKnkkcPN6zosdPDC704_TH7Vg.roa (hash: kX0KO9Whng4G4PQyxbPg/tClDSCWlQb64Svmgd3bElg=)
                          2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: nkwnYYrW4TH7b1uSH7rXg+S0ji/wrbO0PzM6SY4FDWc=)
                          3: d7BNBvtBybD-ouMBr6YNcUi45jE.roa (hash: z33gEnZ5ORYGaYJCcJZ5qtqJlEn1QrL+f98X4D8eWjU=)
                          4: r_AxxcY8QiH2nWS9CL04AgPUmsY.roa (hash: l8fqDJAdHfTIgiiJd3kewidzUv4M6LymruB3QWo/rdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:23:ed:91:42:ab:82:34:a3:81:c8:74:38:bb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
        Validity
            Not Before: Jun 13 03:01:12 2026 GMT
            Not After : Jun 14 03:01:12 2026 GMT
        Subject: CN=664b19d7949537969e462945211235f056a5f858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:7f:d2:6f:60:86:58:a0:9d:a8:51:c6:2c:
                    a4:3a:d7:6b:bf:8e:3d:d4:ad:55:f8:b1:61:ec:6b:
                    c5:b6:e7:ab:a0:c4:41:ef:ae:d3:32:17:ae:d2:92:
                    52:f6:6e:ae:83:94:21:c9:e8:ad:1a:d1:43:5d:77:
                    a6:c8:cf:fc:75:0d:ec:eb:f0:ab:99:62:73:f5:9d:
                    93:c6:e5:cd:79:f2:60:1a:22:3a:79:d7:b8:0c:bc:
                    07:f4:9a:50:96:79:3b:d3:ff:2e:e1:bb:f7:c8:63:
                    94:23:c9:3d:b9:2b:07:a7:c6:d0:00:7d:a4:fe:71:
                    ce:c1:37:b7:01:d6:bf:92:12:12:bf:cb:79:d7:1e:
                    5b:e0:10:d7:c8:34:47:8f:f3:dc:11:5e:68:a0:0b:
                    58:e2:48:98:df:27:e1:f4:33:73:57:3c:02:6c:0d:
                    81:51:ed:25:47:88:49:17:09:de:7a:36:b7:a4:c9:
                    d7:79:52:e3:74:9e:72:b4:30:2d:d1:6d:ac:7c:d9:
                    dd:ae:88:eb:09:1b:71:10:e2:46:22:63:cb:3b:bd:
                    09:ce:5a:a5:de:46:57:7e:71:9f:3d:b9:d4:88:43:
                    50:23:1e:e7:58:a5:cb:a0:ff:1e:fe:99:d2:59:15:
                    bb:c8:44:4c:39:cc:93:9c:21:01:b5:e0:8e:43:e2:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4B:19:D7:94:95:37:96:9E:46:29:45:21:12:35:F0:56:A5:F8:58
            X509v3 Authority Key Identifier:
                keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bc:94:9c:84:4b:06:bb:07:13:84:47:94:a4:0f:e1:68:f4:
         bb:ef:8c:af:a7:f1:be:d5:ca:81:36:62:1e:ef:3c:fe:04:e7:
         cc:3e:0a:97:77:37:ad:41:23:4c:96:99:23:af:da:30:8a:39:
         05:5a:a3:d3:3b:89:af:0a:67:73:00:25:6e:08:6e:99:fe:f3:
         1c:13:c6:a3:c7:3d:e3:2b:b5:c4:1b:d9:e7:3f:8c:19:7d:95:
         33:11:f7:08:0b:d1:51:b2:1b:cd:a7:7d:6b:07:c5:5c:ea:35:
         d2:a2:6e:df:40:a8:b3:88:21:84:6d:fc:ca:8b:43:48:13:4e:
         ec:e2:5d:de:4e:8d:45:5c:3a:fc:a2:a4:e9:f8:8d:1b:ca:5f:
         f5:ab:5a:69:0c:ca:b4:3a:5c:78:14:5f:99:93:3f:5a:99:ec:
         f0:7c:08:f8:ce:e3:a8:2b:0c:1a:ea:ea:c2:ea:2f:22:75:c7:
         04:49:e2:2e:7e:d8:b1:99:80:a5:ea:06:37:f7:8b:b0:fd:bc:
         f3:9e:02:0c:1d:7e:22:5f:0e:7f:e2:ba:ba:96:39:b5:ae:71:
         f3:c9:48:61:de:26:a6:8e:cb:80:0e:3a:1a:67:a7:f1:db:9b:
         e1:79:28:2e:aa:b5:c8:42:2a:74:3d:1b:0b:9f:54:dc:11:c5:
         1f:0d:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:02:27 2026 by rpki-client