Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          cVzHf6vCLMeKw5y089Sv84mdhpC3JFpX/zrSCjJIQxs=
Subject key identifier:   E2:59:80:D5:9D:6A:96:45:DA:40:A1:81:4D:2E:64:A5:65:E3:A8:E7
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       019E9B1812E17440C3616A96F65CD1DA5176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          1985
Signing time:             Sat 06 Jun 2026 04:01:46 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:46 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:46 +0000
Files and hashes:         1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
                          2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
                          3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: H/nme8alwshumXHiR7OcKH+dWkf+dKUHq0Svgx7s+hs=)
                          4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
                          5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
                          6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
                          7: kyJQs5we30dtkYez5Z5lc7nb1uk.roa (hash: QYkWAPu1QeZJ7qVGGJyIAFdYbqAhnaEmDRslgqPIGEg=)
                          8: vkSBou13YVLJcpm4RzlvkM2VmEA.roa (hash: Yt5SBPreKEhsGRzUNTyivVfBSSg7gYCaurShg3S49zg=)
                          9: w66ZldWus98F7FLtFE_HfwzAVOw.roa (hash: dMhZ2iCHZg0KsJ/1R4eui0OO1+pgGYsJE5mhqZ9ftyc=)
                          10: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:18:12:e1:74:40:c3:61:6a:96:f6:5c:d1:da:51:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Jun  6 04:01:46 2026 GMT
            Not After : Jun  7 04:01:46 2026 GMT
        Subject: CN=e25980d59d6a9645da40a1814d2e64a565e3a8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:d0:73:d6:c8:61:5e:f7:ed:a2:6d:56:e5:
                    3f:0a:ea:c0:a8:30:65:7d:3b:58:5b:e5:64:be:b9:
                    8f:ad:62:7a:be:ce:4e:09:6b:84:3a:5b:8e:b8:e9:
                    b4:80:18:8c:ec:ed:5a:ec:36:93:37:96:9e:61:40:
                    18:44:04:7c:36:1f:7f:f3:8f:17:45:3d:0d:2c:b5:
                    02:ff:38:e8:15:b7:0e:e9:b4:4c:7b:a1:da:62:f1:
                    9c:bf:e7:17:4b:19:47:9b:e7:da:f2:d8:f2:8c:1f:
                    3e:a6:bf:77:0f:8b:26:19:76:8a:e6:e7:4f:4c:54:
                    2c:bf:66:59:b8:7e:54:cd:41:49:d8:5b:d8:bb:e1:
                    e2:28:36:04:f4:0e:91:39:33:d7:33:5f:a9:f4:28:
                    65:87:38:41:9b:6c:81:e1:7c:f6:86:5d:c8:39:70:
                    5a:b0:8c:b6:1c:f4:20:c7:94:8a:79:1a:df:7d:0a:
                    13:83:aa:33:e9:6f:53:a5:16:db:5b:d5:82:5b:28:
                    2c:6b:54:1c:7d:e9:a8:7d:d0:e9:64:8b:ad:2d:03:
                    57:26:94:2b:06:a5:4f:05:b9:e6:80:97:3d:43:de:
                    ff:3a:21:1a:cb:58:c1:01:58:21:d6:68:39:f4:7e:
                    c1:ce:23:09:f0:e8:12:51:4b:f2:b6:6a:2c:f6:d9:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:59:80:D5:9D:6A:96:45:DA:40:A1:81:4D:2E:64:A5:65:E3:A8:E7
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c0:1b:9c:bf:6f:bb:c0:9a:4f:0e:ef:20:bb:31:ce:0f:2f:
         f9:73:a4:b1:28:de:8d:f7:81:c8:65:c7:bb:98:29:ef:cd:2d:
         22:ea:74:23:fc:70:45:56:1a:1a:32:03:3f:13:ed:1f:ab:fd:
         f0:f7:2b:7c:73:08:d4:b9:ad:b2:09:26:94:8f:34:67:16:c7:
         34:89:98:7c:5f:1a:28:34:d8:80:e0:7b:b0:58:19:32:89:d3:
         90:f8:ff:01:79:d6:99:48:3d:2c:44:ee:82:fd:1d:af:b4:68:
         42:a5:39:b2:6d:3c:62:74:0b:f1:fb:6e:b1:37:9f:91:c7:e3:
         f7:c1:37:c1:9f:b6:6f:cd:88:fd:af:3a:ec:86:c0:87:77:9e:
         fa:bb:b6:03:ae:ce:7f:f2:59:2c:71:60:81:7e:61:b0:9d:6f:
         79:31:d1:56:7f:8d:f2:6b:b3:44:4b:72:92:af:03:b3:ba:d8:
         47:e2:93:9d:34:37:34:9f:cf:18:30:a3:9d:6c:86:4b:24:fc:
         0f:48:df:ee:93:90:51:75:7e:25:dd:3c:e9:62:93:7c:ec:11:
         4a:b8:ba:21:fd:17:98:f9:58:30:c4:a2:ab:fd:58:b8:d4:c2:
         59:b7:e8:36:c3:37:23:45:77:3a:8c:e1:8c:fe:27:f0:72:80:
         30:3e:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:24:22 2026 by rpki-client