Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File:                     S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier:          bvmiov9RN/XmGCYisk4VyYJN50zQ/PcDMIbnqDjETiA=
Subject key identifier:   67:D7:8A:CF:2B:F7:17:16:09:32:42:D4:CD:E5:52:ED:F4:C7:7D:E3
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer:       /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial:       019CE5C9625B79C05E40BAFEE1E5FDF1907B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number:          0E6C
Signing time:             Fri 13 Mar 2026 06:01:45 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:45 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:45 +0000
Files and hashes:         1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
                          2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
                          3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: y0jZHQ+kUBn8v18Hlw0/3ZmXDL7OWHjckQFXkvDIJP0=)
                          4: SO3BlzN82wuSE26PkAHoL9gdWK0.roa (hash: 2lTdc7W5+lUgsLYun9vUAbt/KzErih08Dxdrvh4+kG8=)
                          5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
                          6: xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa (hash: 83vwjevGkm7TeLLNTTDiOn/v2zo45wBKwUV/hw2Ppgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c9:62:5b:79:c0:5e:40:ba:fe:e1:e5:fd:f1:90:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
        Validity
            Not Before: Mar 13 06:01:45 2026 GMT
            Not After : Mar 14 06:01:45 2026 GMT
        Subject: CN=67d78acf2bf71716093242d4cde552edf4c77de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5a:77:2b:ff:1c:61:68:f7:9f:77:b1:6a:d8:
                    93:42:18:8d:f9:b9:75:06:2c:24:ce:d2:5a:66:17:
                    5e:24:08:22:c1:50:76:6f:75:7a:4e:b4:b8:f3:11:
                    2c:87:84:90:f6:22:cd:0b:6f:85:b2:c7:6b:b0:1c:
                    dc:25:50:82:78:05:c9:0f:f8:c4:98:d9:f6:d5:36:
                    37:65:62:a4:4b:f9:24:42:07:ad:70:65:39:a2:85:
                    df:61:1f:89:1d:3f:9c:12:27:d0:03:4d:91:9a:a0:
                    7a:11:a1:28:5a:37:3d:11:34:2d:48:6f:99:27:8c:
                    3a:f8:1a:8c:8d:a5:27:91:84:d7:b5:75:6d:7a:84:
                    76:30:4a:6e:e0:1a:5c:e6:3c:ac:c7:37:7d:c6:ce:
                    ca:21:63:f1:5f:3d:32:3f:c6:f3:55:14:90:3c:04:
                    00:b0:f4:f4:28:df:9d:a0:4c:bb:ed:d9:d4:f6:04:
                    f2:bf:01:63:74:8a:2d:01:5c:7a:8e:b3:11:35:9f:
                    90:54:6f:6a:0b:6a:a5:b6:9f:af:47:12:ab:73:12:
                    8f:9f:ca:db:5f:09:af:38:61:2d:33:bf:3b:9c:77:
                    64:83:e5:70:98:6a:a1:cc:64:1e:91:a6:6a:48:0d:
                    cf:9c:84:62:33:9e:6d:f7:c4:8c:e4:3a:1a:63:27:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D7:8A:CF:2B:F7:17:16:09:32:42:D4:CD:E5:52:ED:F4:C7:7D:E3
            X509v3 Authority Key Identifier:
                keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:52:07:8d:44:df:06:95:ee:12:f9:f6:cf:41:1b:87:8e:5e:
         1e:0a:9e:0f:c0:d0:9b:2e:bd:67:91:b4:ed:46:e5:94:21:d2:
         82:a7:44:d5:5a:f5:46:87:36:01:e0:13:a9:f5:6a:c3:76:85:
         dd:83:dc:3c:e9:c6:a8:7b:05:70:87:73:ff:22:76:88:04:2c:
         82:90:05:cd:c0:4b:59:2a:e7:1c:03:29:98:98:5d:56:41:ff:
         b3:e7:48:0c:b3:75:25:24:8b:ab:b3:24:19:4d:29:41:98:0f:
         b8:53:ab:6c:84:9a:f4:a0:62:35:eb:61:de:c0:d8:d4:8f:51:
         60:82:9c:f1:18:cc:72:57:57:d0:09:8e:fe:8e:e2:bb:f0:56:
         8f:9f:d5:3a:54:6c:89:20:d5:93:09:2b:73:92:01:9f:c8:ed:
         46:a3:5a:ca:d5:a2:91:a4:e4:42:c1:74:dc:49:83:c4:d8:a6:
         e6:9c:4a:b6:73:9a:72:62:30:0d:67:68:43:fd:4d:67:49:35:
         fa:ec:a9:a2:97:98:2a:39:6d:ac:07:a9:be:fe:0f:06:91:cc:
         6c:e0:72:ac:79:80:d3:f0:6a:01:17:7b:5c:03:92:4a:53:d4:
         43:0a:66:80:c3:bf:cc:69:0c:83:ec:94:94:e3:1b:cb:71:fa:
         42:18:dc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:30:14 2026 by rpki-client