Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File:                     txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier:          L2f8cQuBeNTSBVxtRgHK3ekwQN7pakwgsbCi2Mei7DU=
Subject key identifier:   F1:B7:95:D9:14:B0:CE:5F:A9:0A:F4:21:4E:A0:DE:50:99:C7:07:63
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer:       /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial:       019EBA3474336CBB443C8A768FEB8665689F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number:          13B9
Signing time:             Fri 12 Jun 2026 05:01:00 +0000
Manifest this update:     Fri 12 Jun 2026 05:01:00 +0000
Manifest next update:     Sat 13 Jun 2026 05:01:00 +0000
Files and hashes:         1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
                          2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: 7ZV0Fhcmy4QB3PCEksASl3tL94gLUfsjqDOyB4cDso0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:74:33:6c:bb:44:3c:8a:76:8f:eb:86:65:68:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
        Validity
            Not Before: Jun 12 05:01:00 2026 GMT
            Not After : Jun 13 05:01:00 2026 GMT
        Subject: CN=f1b795d914b0ce5fa90af4214ea0de5099c70763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:6c:80:14:b3:20:23:a0:4e:00:de:85:bb:
                    46:1d:47:9e:41:df:90:80:c1:60:7b:c3:2a:1c:a1:
                    97:bf:42:5a:72:63:a0:63:cb:54:82:d2:22:2d:48:
                    01:80:63:86:58:33:2b:b5:35:ad:95:32:52:a1:d6:
                    07:b5:8c:16:b7:a3:5b:95:dd:b3:9f:65:c6:74:59:
                    ca:56:08:5f:b2:70:ac:ab:4d:86:7c:ed:85:a3:ce:
                    93:9f:df:20:03:1e:70:89:8e:89:3c:ba:e6:6a:56:
                    4d:3d:4a:88:59:90:ea:65:09:97:da:f3:4b:fd:b1:
                    8a:67:5b:4a:a6:5e:83:b8:0c:b6:7a:66:03:bc:78:
                    ee:16:10:56:98:00:ef:9b:c8:92:a3:b9:17:bc:d5:
                    6d:26:c2:21:89:ea:3b:0d:07:5d:2a:1e:70:19:57:
                    b1:85:0f:f8:9d:fd:25:85:55:2f:d9:c5:78:4a:43:
                    05:3a:94:69:0b:7a:94:08:bc:35:99:04:56:5c:58:
                    f1:a4:15:8c:02:4f:73:75:15:e4:d7:ae:fe:41:6a:
                    40:d2:ce:68:8d:54:6f:32:9d:8b:87:d4:52:3f:dd:
                    79:b3:4a:a0:89:7e:31:ba:5a:8e:95:81:bc:3a:c4:
                    98:0a:a4:69:75:09:06:ed:2e:91:fd:dc:12:22:d6:
                    06:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B7:95:D9:14:B0:CE:5F:A9:0A:F4:21:4E:A0:DE:50:99:C7:07:63
            X509v3 Authority Key Identifier:
                keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:68:c3:77:66:75:c3:29:8a:2e:50:1e:31:b2:8e:79:3c:fe:
         17:f4:8a:49:80:2b:38:3e:f8:17:a1:44:ee:a7:5d:b5:a0:ee:
         35:4c:69:e2:d4:85:79:fe:97:80:3e:49:fa:f0:49:6b:45:0e:
         fc:06:12:80:c1:01:f1:80:d8:40:b7:bc:13:93:ac:6f:2b:dc:
         d2:4b:a0:a0:60:4c:0a:e2:6a:cb:ee:71:84:38:18:41:11:8e:
         48:f9:a8:dd:69:67:8f:e9:97:39:0c:3b:c6:d8:47:e5:12:05:
         06:06:f3:5d:35:33:35:bf:1b:18:50:a4:d2:c9:0c:56:12:49:
         04:01:e2:38:d2:ee:b4:67:a7:61:d9:be:d4:20:6a:61:0b:79:
         66:1d:1f:7f:50:4a:f5:91:8a:33:f6:b6:d1:0e:f0:3a:a6:07:
         5e:3d:b4:19:78:ba:5b:26:e8:ea:57:b9:57:4a:d0:db:e1:7c:
         35:fd:c6:38:e6:ac:69:0f:3e:32:6e:78:de:66:26:64:03:d5:
         e9:49:be:14:ce:3a:cb:fb:e8:e3:e6:89:32:0d:00:a9:ad:90:
         9b:c9:3d:3f:ae:9b:b6:25:15:e7:b8:0f:f1:82:46:62:cd:0b:
         d2:61:e9:cf:7e:b4:54:69:6d:35:69:4a:22:09:21:2d:04:57:
         be:10:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:28:44 2026 by rpki-client