Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
File:                     valtAqgi9GJTwq7mgEQdWsJ8PfU.mft (raw, json)
Hash identifier:          kDdnOQHXL5cUFVXWvk7CHwGEIMYNzaw472Ckp8/qsOg=
Subject key identifier:   F0:C3:EE:62:42:07:9D:60:FF:04:33:E0:FB:CF:58:A9:64:36:98:7D
Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Certificate issuer:       /CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Certificate serial:       019F19E8292F56D4DBC7547E0455E4063B7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
Manifest number:          1991
Signing time:             Tue 30 Jun 2026 19:01:13 +0000
Manifest this update:     Tue 30 Jun 2026 19:01:13 +0000
Manifest next update:     Wed 01 Jul 2026 19:01:13 +0000
Files and hashes:         1: EhydGNTB-hB89eN92UxIng6UVZM.roa (hash: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU=)
                          2: PEaB6XQK_JSckDUEH_ZUUvy4XJs.roa (hash: pHNbC9gTB8A25YDnRH1/ZymWlhpa8gI2FiyHFl3N24c=)
                          3: kNnArX8rxSQizIzXcuK9nc5VM20.roa (hash: vhtZwmPY49vps0U0PvF9ig8qAqogrTdDowNB1/EB0pk=)
                          4: luTG1wEQoJ2CdlwrK7SvZ_P5LnE.roa (hash: mWrhQXIzFzzy6PXlxTLPkj0tx5iEbtFjzb8/vkv2Ot4=)
                          5: valtAqgi9GJTwq7mgEQdWsJ8PfU.crl (hash: nSorBmiYvqfnj1s9AspmrCt97uIa0ZOFT5Oa6j82h88=)
                          6: vyQaTgnZmO6A2QP5fltvyAiHn2w.roa (hash: CuO+A8UIrEVOD42Zu4NLM0xT7n43WzFhoUCyh9EEw7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:e8:29:2f:56:d4:db:c7:54:7e:04:55:e4:06:3b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
        Validity
            Not Before: Jun 30 19:01:13 2026 GMT
            Not After : Jul  1 19:01:13 2026 GMT
        Subject: CN=f0c3ee6242079d60ff0433e0fbcf58a96436987d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:ce:eb:8c:a4:7a:c5:a9:70:34:1a:40:99:
                    a7:4d:d1:30:20:a6:67:4c:3a:82:6b:cd:c2:12:a0:
                    9b:99:9c:01:2d:82:fc:c9:14:17:bb:ad:58:aa:03:
                    4f:b2:57:ba:d7:41:31:04:5b:c2:4e:f9:43:56:60:
                    48:38:b4:60:99:2a:14:af:e7:aa:29:07:51:bf:b8:
                    64:6e:d4:d0:b9:75:b7:c3:9f:e3:a6:a4:2d:33:8d:
                    02:0b:df:fa:68:4d:68:fc:3d:ca:13:0c:8b:3b:d6:
                    0f:bd:c9:be:49:37:50:d0:59:a8:c7:57:78:31:8f:
                    c3:1a:e6:ea:32:9c:f9:6e:01:90:65:81:80:4e:e1:
                    d8:d7:1d:6e:2e:30:13:99:50:10:68:89:d6:1e:35:
                    b6:10:b5:ce:27:63:7a:61:01:c6:63:cc:9a:b7:93:
                    47:59:40:57:67:ff:bf:4b:2e:eb:be:52:f1:af:09:
                    f1:93:7e:60:b7:28:dd:40:9f:eb:6e:68:d5:55:14:
                    2b:3c:9a:d9:68:51:c3:e1:0e:7b:80:eb:89:d4:ea:
                    8d:84:29:1a:2e:cd:4b:fe:a2:be:66:89:b2:49:31:
                    5f:e0:cf:6d:2c:f6:cd:3a:15:34:08:91:d6:16:b3:
                    79:c1:b8:e4:91:c0:2a:87:c2:4e:b6:e1:1c:59:49:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C3:EE:62:42:07:9D:60:FF:04:33:E0:FB:CF:58:A9:64:36:98:7D
            X509v3 Authority Key Identifier:
                keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ae:52:32:c2:8f:96:de:f9:00:92:93:44:79:6a:ce:a6:b7:
         fa:67:68:e6:86:75:46:15:fa:93:97:c2:3e:49:f5:1d:34:74:
         83:f4:6d:6e:4f:88:cc:4e:a7:00:4d:84:6e:5c:3a:16:9e:87:
         7d:86:ff:8d:8f:18:c3:0a:a9:a9:d6:d1:18:1b:18:d5:19:79:
         26:9f:04:83:ca:8c:dd:94:83:e1:de:5c:43:89:6c:9d:14:87:
         d5:7c:77:d8:35:bd:87:a1:f2:fb:f5:a1:39:8d:88:25:ba:25:
         9e:f3:dc:30:ad:8a:b8:01:53:dc:86:24:9b:00:da:74:aa:ab:
         ad:45:9c:c6:04:6d:17:70:e8:c9:e1:6e:2e:fd:72:e5:30:3d:
         a7:96:22:42:fb:96:f2:fa:0d:13:d0:52:56:bc:7b:58:05:17:
         2c:f6:25:32:df:2a:45:2a:2b:e2:39:f7:f2:e4:bc:ab:6c:aa:
         aa:9c:5c:4f:cd:87:74:3f:14:ba:b2:65:da:7d:d2:6f:5c:7f:
         64:2f:42:93:e8:e4:68:45:a1:3d:c0:ad:6d:a8:98:94:5a:d8:
         2c:56:4a:99:1d:e9:e9:d0:29:fc:fb:b7:65:86:93:cb:0b:3b:
         74:1b:1c:56:d5:48:4c:21:83:90:ac:ea:70:29:bc:0f:87:41:
         39:f9:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:08 2026 by rpki-client