Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File:                     fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier:          5yJ/tCf7OxRVlBTNRv1yuH2m/1TTyS1BSngD2cUX1Ws=
Subject key identifier:   79:05:E6:D1:61:51:D3:D0:62:AA:3F:A9:EC:76:3E:D0:E3:E3:D9:22
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer:       /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial:       019E9C97276DE7DD231F41AEE61D47ECDDF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number:          144C
Signing time:             Sat 06 Jun 2026 11:00:12 +0000
Manifest this update:     Sat 06 Jun 2026 11:00:12 +0000
Manifest next update:     Sun 07 Jun 2026 11:00:12 +0000
Files and hashes:         1: 9w9SZI03wkoC4C4p8xbj1xyQTSk.roa (hash: 4ZjNUluDOnXe4+ntofvgh0yoY5kqpiMhMwraHxso+o8=)
                          2: CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa (hash: 64gVJuHjRSQovFr9XT+uIvTrz2Nlh3y9/QzHL+fzAZ0=)
                          3: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: PPavN/On+m4pSaR+xoIeqclDxJZIhr74oGKX9ksJkl0=)
                          4: hLVnBuf3u_JFi21jPT8scSeq55o.roa (hash: 9Kl/ni4B9iNPukEzlMtSOKbm3FCZbPlEMODKtlh8/eY=)
                          5: t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa (hash: kWqIg6Zu9e2cjZJBsJNhAniK6OQKlOVK34Tp81YEZc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:97:27:6d:e7:dd:23:1f:41:ae:e6:1d:47:ec:dd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
        Validity
            Not Before: Jun  6 11:00:12 2026 GMT
            Not After : Jun  7 11:00:12 2026 GMT
        Subject: CN=7905e6d16151d3d062aa3fa9ec763ed0e3e3d922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:d5:9f:40:a3:64:10:06:91:93:94:75:9c:
                    4d:93:f5:9a:df:a7:e7:bc:be:0e:24:68:fc:d8:af:
                    6d:9f:11:3a:85:08:63:bc:a8:bf:c0:7e:64:b8:e4:
                    4d:a6:5f:69:d5:89:c2:31:7c:25:40:8d:2a:fd:46:
                    4f:7c:97:5a:74:d6:e5:d2:12:81:11:f0:f3:f8:b9:
                    dd:79:f9:6e:ef:65:06:f4:c4:fc:29:6e:9f:38:6e:
                    d4:47:1b:5f:f7:a6:43:32:df:86:45:42:dc:d7:4a:
                    1f:f0:82:72:a8:bb:60:68:c7:7c:ec:5e:be:08:2d:
                    61:8f:58:d6:ec:96:5d:f7:b5:e3:c1:2f:94:f1:a6:
                    7a:a8:dc:a9:5b:ce:71:5d:37:fd:2e:ee:d6:10:1d:
                    20:33:55:62:19:58:a8:d3:77:b7:93:1b:d6:05:32:
                    75:7a:87:7b:ae:ed:9d:a9:67:5e:e3:ef:98:c9:3e:
                    a9:d8:90:e1:20:12:65:19:ed:65:14:4d:cc:3e:0a:
                    cc:27:70:90:dd:7d:15:6b:e4:bf:78:0c:61:e3:93:
                    ea:89:b9:38:bf:d9:ed:10:a5:fb:4c:e0:a2:0f:0f:
                    d0:1b:71:8c:ec:c6:ff:b9:6b:dd:18:86:e3:a1:a0:
                    90:c2:8b:e0:05:1b:23:0d:a2:2b:ec:6a:88:2f:47:
                    31:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:05:E6:D1:61:51:D3:D0:62:AA:3F:A9:EC:76:3E:D0:E3:E3:D9:22
            X509v3 Authority Key Identifier:
                keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:b8:04:8d:cc:6e:04:e2:fe:30:e5:31:2c:43:84:e1:11:
         54:c3:b3:05:a4:e6:c2:d4:be:0b:b3:d4:f7:06:01:19:7e:7b:
         90:67:3a:e2:10:e6:43:2e:fb:80:7d:94:93:e3:ed:57:2d:ba:
         b8:31:5d:57:40:b4:ea:11:67:5d:b4:b0:77:e2:67:fd:c2:14:
         76:4b:44:7c:07:89:5f:60:d3:84:01:b8:76:c5:2d:d7:11:c1:
         5e:d3:f9:0f:43:bb:47:70:c2:45:dd:90:1b:75:ec:a9:83:50:
         b0:5e:22:ac:18:f8:06:5a:cd:9f:e0:b0:7a:13:70:6c:fc:15:
         13:4a:e5:c9:bc:66:57:23:cd:e1:b2:01:74:44:e1:21:08:db:
         0c:12:99:9b:2d:00:4c:db:27:f6:7d:73:39:bd:cb:28:4a:79:
         32:b0:2e:d6:5d:c6:fa:57:2e:75:02:56:cf:6c:41:f4:ed:1b:
         63:9e:46:36:f7:c6:df:9e:87:eb:dd:91:f2:af:ad:c4:84:cd:
         a9:f2:7a:20:c2:52:63:4c:05:16:2b:ad:fb:99:d1:e7:85:00:
         bd:3f:df:e2:9e:2b:4d:e2:b9:8d:69:d5:a9:70:44:f0:1b:ce:
         0c:1e:13:2b:fe:71:0f:8a:dc:56:e9:00:dd:be:c9:3e:65:b9:
         b3:47:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:34:40 2026 by rpki-client