Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File:                     sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier:          taPcSrn6mkSjF1CwSLma+1JwvfnB2YjxwIDecxc9H5g=
Subject key identifier:   69:C3:65:B1:F7:EE:4B:BA:3E:E6:7D:D6:D2:DC:2F:97:E2:CD:E8:5F
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer:       /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial:       019EB5B34F68BCA95B79CD0C132C9EBC30B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 08:01:27 +0000
Manifest this update:     Thu 11 Jun 2026 08:01:27 +0000
Manifest next update:     Fri 12 Jun 2026 08:01:27 +0000
Files and hashes:         1: YVVSxC4wbNTE6amPOj_aUWu9KmQ.roa (hash: jx8KSb9gYYltGS0dfqO/0sgILL/tPjue23+E+n9mHYY=)
                          2: jvfuzQB2Ic8Lkn_v-fU0vD7KZUI.roa (hash: wTQiDytgLASjhAyRpE2k4salmmSbcvPsNpIE4v8G2dw=)
                          3: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: sj5+iK4sWwWQURe1VvJZHott8fjL6G3nDUyZ86mAlIU=)
                          4: uZerU1VFymarw95eI6TPiaIDHis.roa (hash: C1hv+0PjM/vZjHfsuivW+vQVr2csnV+QB+NjMqb8++s=)
                          5: xgkVb7jGmrVMuFNZV5uC54rwBLc.roa (hash: U7zPiRVnuj8K+WrtUv0kblwys87NbJBaEKGAwaoWJcc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 08:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:b3:4f:68:bc:a9:5b:79:cd:0c:13:2c:9e:bc:30:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
        Validity
            Not Before: Jun 11 08:01:27 2026 GMT
            Not After : Jun 12 08:01:27 2026 GMT
        Subject: CN=69c365b1f7ee4bba3ee67dd6d2dc2f97e2cde85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:f1:9a:45:02:a5:10:a6:d5:c3:20:0e:cd:
                    f0:c0:97:02:eb:69:bc:31:ef:d6:e1:c7:88:09:32:
                    83:8a:41:db:b9:3c:a6:1a:e6:f4:f4:82:4b:bb:3d:
                    03:bd:ac:33:c7:bd:64:94:fc:66:c0:af:97:8d:2c:
                    26:b1:4c:90:7d:d5:e9:c2:ab:ac:94:02:6d:6a:67:
                    66:12:4e:ce:24:82:63:96:2b:4f:53:31:e4:79:cf:
                    10:97:8b:c5:11:f4:04:5e:ef:b8:4f:53:01:8b:56:
                    62:f9:fe:21:fc:01:7b:00:5c:9d:38:e2:24:7e:9d:
                    f6:b5:66:90:41:a2:43:a1:d6:e5:d9:83:4e:11:fa:
                    3e:cb:69:83:9f:3b:8a:f6:54:63:9b:8d:8b:fc:d3:
                    42:ea:94:bd:d4:d9:04:78:e3:62:ff:91:1a:fb:f8:
                    ac:2b:d6:fe:2c:5b:dd:36:2c:ef:68:5d:39:cc:e8:
                    b6:59:0a:68:22:dc:58:4d:26:d2:f3:cd:ad:6e:56:
                    c1:af:ef:f8:49:ee:39:4f:89:7c:1d:32:13:ca:e6:
                    05:0b:9d:8e:f6:fd:17:21:6f:47:c5:22:6a:3a:68:
                    f8:ca:e4:be:84:be:e6:18:d8:35:26:86:e5:39:8b:
                    b3:63:d1:20:64:e9:26:c9:e5:72:10:4b:18:9c:30:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C3:65:B1:F7:EE:4B:BA:3E:E6:7D:D6:D2:DC:2F:97:E2:CD:E8:5F
            X509v3 Authority Key Identifier:
                keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:8e:5e:2f:0c:2d:3a:9d:97:3c:48:3e:f7:a3:ff:d1:a3:
         93:10:a7:e0:df:04:2a:b7:74:71:a6:43:21:fc:4b:58:c3:0f:
         9d:f7:b0:74:06:ed:16:4a:0d:92:e7:0a:d9:32:dc:83:d5:aa:
         fe:a3:9e:3a:fb:b0:9c:1f:b6:88:e6:27:1f:ed:de:f6:b7:45:
         5a:d5:c4:15:5e:e1:ae:8a:05:95:a2:3d:02:c6:cf:92:44:dd:
         7e:e2:f8:a3:41:f0:dc:29:09:0d:0a:f6:d1:7b:f2:03:bb:63:
         8e:b1:0c:90:f6:54:51:c3:2e:09:64:28:d7:ae:da:0f:6b:2a:
         a2:84:dc:c9:99:1d:73:e4:6b:01:b2:e0:e9:37:6c:64:68:db:
         17:5d:83:1e:e8:5a:0e:8f:6d:7c:3e:42:85:64:de:73:c4:24:
         2f:5c:16:dd:1c:48:75:a8:f5:91:82:48:f8:8a:2b:6b:b5:52:
         02:86:54:1f:99:6d:dd:ef:47:45:e4:9e:71:8c:21:74:a6:91:
         9c:03:58:d1:1e:89:fa:8c:55:b6:df:3a:22:6c:f4:df:08:5e:
         ef:c5:d4:fa:a3:cf:4f:d1:6c:fb:72:36:0e:e8:fb:a9:df:49:
         af:0d:a4:9c:f0:c8:fe:58:f3:d6:ec:2b:65:ae:4d:35:65:3e:
         c9:77:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:43:32 2026 by rpki-client