Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File:                     2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier:          +u2hxxo+JZ4m8rwa2BlXh9x+5PjRvLl/XWXF08WbSmQ=
Subject key identifier:   11:2F:44:D3:96:D1:36:5D:54:EE:A9:2E:DD:72:8D:45:AB:34:DF:57
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer:       /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial:       019E9B181BDD2FD0EB62AC175AEC4F302CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number:          0D79
Signing time:             Sat 06 Jun 2026 04:01:48 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:48 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:48 +0000
Files and hashes:         1: 1G4F8tXp79ck76MYvh4RlTMuH0c.roa (hash: mb1DMb5KSFZKad2RaZrc43nShfqVDrfZ7CG1uLPdIWU=)
                          2: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: xs2vGmYBunweTd6LrIDtiZtXIxNqjzk5FNHgTJ3zvws=)
                          3: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
                          4: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
                          5: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:18:1b:dd:2f:d0:eb:62:ac:17:5a:ec:4f:30:2c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
        Validity
            Not Before: Jun  6 04:01:48 2026 GMT
            Not After : Jun  7 04:01:48 2026 GMT
        Subject: CN=112f44d396d1365d54eea92edd728d45ab34df57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:b6:08:76:4b:0c:b6:4d:0f:4e:39:a0:dc:
                    ac:1a:97:72:c8:10:9a:c2:fd:13:d2:e3:40:4b:59:
                    26:1e:7d:ad:ed:4a:6e:fd:12:1e:65:ec:18:b2:7d:
                    49:2f:0d:d4:b9:8c:68:66:71:7d:bd:c6:6e:4d:74:
                    14:b8:42:ef:91:65:b0:15:91:9a:f6:76:be:a6:30:
                    aa:25:b1:4b:21:ab:82:2c:ef:10:64:18:6a:ac:53:
                    34:8b:eb:51:58:22:60:63:93:86:f8:3f:13:a3:8f:
                    15:35:63:bf:2c:5f:74:8e:9f:10:2b:3d:79:97:a0:
                    8d:70:c0:b6:2a:b0:38:7f:a1:a8:30:ce:3c:22:64:
                    bf:07:3a:a0:f2:de:66:6c:71:87:dd:be:95:a2:54:
                    33:a4:95:e1:4f:bd:b0:63:db:81:61:9f:6e:e6:d1:
                    0a:23:67:80:3e:64:0c:06:58:4a:98:c4:86:dd:eb:
                    a7:fd:ac:35:a4:27:2b:90:56:4a:d5:09:ec:de:81:
                    48:44:02:d5:2f:d0:68:48:aa:85:88:46:44:26:cf:
                    9a:fa:45:fa:36:2e:aa:eb:ef:83:97:be:ed:b3:72:
                    39:75:59:99:55:28:16:b8:63:60:b4:13:ee:6d:71:
                    80:a4:07:e9:57:4b:f8:31:d1:ea:f0:b1:68:ad:7c:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2F:44:D3:96:D1:36:5D:54:EE:A9:2E:DD:72:8D:45:AB:34:DF:57
            X509v3 Authority Key Identifier:
                keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f8:2d:3b:ef:5a:fe:d1:74:90:0a:d4:64:c8:43:0e:30:5f:30:
         61:3f:a8:34:4d:b8:9a:2f:dc:52:8d:7b:61:62:92:18:01:b2:
         9d:ff:58:5a:e8:a1:61:20:ce:1d:cd:53:8e:db:c3:17:77:a0:
         6b:a9:3b:52:99:84:95:15:33:71:0e:e5:44:54:84:95:1b:95:
         c0:7a:6b:fa:1a:07:7d:56:95:c4:6c:ab:35:93:28:eb:1f:7b:
         8c:d1:3f:24:d1:cf:dc:0e:16:51:78:72:2b:4f:46:d2:cf:5f:
         bd:6b:5c:a8:63:ec:f2:02:ad:d5:4e:89:72:de:e7:be:76:1e:
         83:fa:ea:d4:8c:62:74:e9:32:c6:88:56:eb:bf:60:20:cc:e3:
         ed:13:cf:cb:4e:00:76:56:82:e2:40:db:6c:80:60:ce:56:3a:
         6e:af:8b:fb:71:ed:57:f8:d8:4d:bc:38:c1:a5:9a:d6:ed:1d:
         4e:10:b1:51:b7:e5:2c:5e:75:a7:84:32:4a:d3:78:dc:00:01:
         f6:df:24:59:38:58:4d:d3:9b:79:20:dc:1e:51:74:cd:76:d1:
         f5:a2:3b:90:88:71:b9:22:4a:6f:74:3c:12:26:c2:3c:6d:ee:
         2c:27:b7:f3:61:32:a5:51:3e:50:bf:2c:0f:f3:6e:47:da:7a:
         50:0e:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:00:05 2026 by rpki-client