Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
File:                     SU14c0FlEKL7I0bvNCKAFVUicTs.mft (raw, json)
Hash identifier:          //jBh1vgmcMFvnV6TXMqWTBn/DWzmVovwUjy73ko5z0=
Subject key identifier:   C4:53:F7:68:15:08:BC:79:34:D6:83:C9:22:54:6B:88:0C:1E:02:06
Authority key identifier: 49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B
Certificate issuer:       /CN=494d7873416510a2fb2346ef342280155522713b
Certificate serial:       019ECC717451980973BF5F26FDF5CD19F744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
Manifest number:          1679
Signing time:             Mon 15 Jun 2026 18:00:47 +0000
Manifest this update:     Mon 15 Jun 2026 18:00:47 +0000
Manifest next update:     Tue 16 Jun 2026 18:00:47 +0000
Files and hashes:         1: 32Nopwa7iDrMzQvWR2AiGUXyxqI.roa (hash: UhsqgA9BDo8hjf2FELCXlR0HFZ2+BdgenG+by3xwFz8=)
                          2: LjPmzvpwanEzWC7YwFcmuEsNkws.roa (hash: MIJ/J6I5pbMxfY/A5H3VycZbhKC12p0Tut4YaO1yZlQ=)
                          3: SU14c0FlEKL7I0bvNCKAFVUicTs.crl (hash: TNTthuPxhIWULdPhR8uyV5yZ3IWni1+E5kUnWqRkCjA=)
                          4: U032uAEUZ0b4mkUs5GY7tAVTTzU.roa (hash: DED8ognEIVQikRQX7YkZQcK+eDMVkhFnX19M3oaeQrw=)
                          5: UKW6ggBaCeq2EWzJWVDTUUG5C5M.roa (hash: RrnGAk5DcSVwnr4K/OnsZ4KSQkqSg7XT17ThtWs4Qzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Jun 2026 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:cc:71:74:51:98:09:73:bf:5f:26:fd:f5:cd:19:f7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=494d7873416510a2fb2346ef342280155522713b
        Validity
            Not Before: Jun 15 18:00:47 2026 GMT
            Not After : Jun 16 18:00:47 2026 GMT
        Subject: CN=c453f7681508bc7934d683c922546b880c1e0206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:8c:ef:0f:05:b5:8d:e4:14:a1:55:0b:34:
                    e7:c2:aa:7a:ee:4f:f5:44:32:b4:70:3e:d1:7d:3f:
                    8f:b8:5f:fb:f9:21:52:99:b1:06:f6:c0:f0:5e:9b:
                    e0:06:35:00:e3:c3:f0:13:e3:85:da:00:a8:6b:eb:
                    7b:36:35:76:1e:d5:d4:38:11:12:4d:55:83:a1:d4:
                    ac:de:6b:42:c3:01:cd:4c:05:2b:10:da:1d:db:71:
                    b9:19:70:ee:b7:c7:57:58:80:7f:b2:34:1b:1e:aa:
                    30:5f:42:49:22:54:fa:98:ac:77:48:84:b6:31:2b:
                    7b:f5:fd:db:46:cd:89:f4:08:78:aa:c5:9c:39:20:
                    f7:0a:75:6e:c1:e8:f9:63:87:a1:69:f0:b0:44:38:
                    ef:86:37:5e:d5:ce:20:0e:9b:68:74:7f:39:64:19:
                    f5:05:5a:a8:e7:42:bb:73:a0:b5:cb:ad:d2:3c:4b:
                    35:44:b4:2a:d1:4c:b4:fe:ac:a6:a8:61:21:67:32:
                    1f:5d:41:e1:54:4a:af:45:38:7b:55:37:09:24:dd:
                    88:dd:db:25:72:00:a7:fc:80:af:89:8c:1d:2f:a7:
                    72:2b:a2:f0:37:f5:c9:8d:76:66:bc:82:99:c2:82:
                    19:9e:23:00:fa:9f:29:be:b8:16:16:0a:08:ea:c7:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:F7:68:15:08:BC:79:34:D6:83:C9:22:54:6B:88:0C:1E:02:06
            X509v3 Authority Key Identifier:
                keyid:49:4D:78:73:41:65:10:A2:FB:23:46:EF:34:22:80:15:55:22:71:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU14c0FlEKL7I0bvNCKAFVUicTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/28f7a6-e1ba-4978-9122-e18e7b2ac536/1/SU14c0FlEKL7I0bvNCKAFVUicTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:4d:4a:0f:ca:2f:23:a1:e6:3b:20:81:a8:73:f2:bd:e8:
         0f:cb:11:5a:56:2d:e9:fe:4b:f3:f7:c1:11:19:fc:61:92:f8:
         5b:ed:b1:79:70:48:d7:09:ec:46:df:7a:e6:7b:09:07:bf:1e:
         43:6d:08:e7:50:3e:4d:5f:49:d3:1d:44:1d:ff:aa:9e:e6:57:
         7d:b8:ed:7a:25:47:d9:63:c9:f0:73:97:2b:5e:c3:96:32:26:
         9c:f8:64:52:9f:e4:d3:b1:79:88:80:62:2c:2c:79:0e:1b:82:
         50:9e:bb:ac:54:16:8e:50:20:5f:e8:15:fb:7c:ea:6d:09:e4:
         2c:b3:d8:12:5f:43:61:e3:77:4e:88:d6:12:26:99:29:f8:e0:
         39:3c:cf:73:b8:1e:4d:5d:54:0f:7e:93:1e:bd:7f:72:3f:66:
         9f:ae:31:6c:6c:3d:80:2a:89:b3:c1:a0:66:fd:35:45:a8:6f:
         c8:ea:24:22:0d:96:13:3f:62:15:9e:6b:0b:cb:79:e7:d3:14:
         27:08:51:07:14:2b:71:6e:88:df:7d:2d:f1:c3:d9:eb:17:86:
         98:17:13:0f:fd:7f:73:cf:96:64:4f:15:3e:a5:34:b8:78:bd:
         00:a8:5a:87:10:be:45:7d:21:ee:c1:e4:c9:e7:15:6b:de:bf:
         e7:04:60:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 03:55:33 2026 by rpki-client