Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
File:                     SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft (raw, json)
Hash identifier:          QvrXBfnaRDhUi1o5AdjsBG4XqKdw+AI4EIlsBnH5xvU=
Subject key identifier:   BB:4B:9A:FE:50:78:D5:E3:2D:14:DC:4D:F7:9E:2E:8D:D3:54:05:41
Authority key identifier: 4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19
Certificate issuer:       /CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
Certificate serial:       019EB9219B775D664F07721A9A8FD97DBFC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
Manifest number:          1958
Signing time:             Fri 12 Jun 2026 00:00:47 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:47 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:47 +0000
Files and hashes:         1: FXM0lZ9RW8MVyeNhLRa0gA27Yz8.roa (hash: AOWqH2G8p3eNy+r9FYww+1k4v48/EVkof2UT4jbdqII=)
                          2: ScbfsojaaHjN1VPlqjt62kAyKyQ.roa (hash: lQ50zLidvT+ypigEP+SJVNAGB7dMGWzSVTcP7sdJtfU=)
                          3: SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl (hash: miNSs8x+/YeEhoYKvy1FkUEBDvJ7/QS9VWX7VTHVHo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:9b:77:5d:66:4f:07:72:1a:9a:8f:d9:7d:bf:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac2bc0e3e59332f4be2c58ff25a1861f5fde819
        Validity
            Not Before: Jun 12 00:00:47 2026 GMT
            Not After : Jun 13 00:00:47 2026 GMT
        Subject: CN=bb4b9afe5078d5e32d14dc4df79e2e8dd3540541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:18:6c:af:dd:04:d7:4d:39:d4:f5:15:a4:
                    65:43:56:c2:33:86:fa:8b:2a:3a:14:a8:fd:9f:a1:
                    89:62:e4:f3:2c:33:d1:2a:73:79:fb:93:41:ea:82:
                    c0:37:0c:e7:05:e6:5a:b2:7b:60:9c:37:98:be:b6:
                    29:9f:1e:b8:18:39:ef:17:1f:ff:85:39:22:94:39:
                    40:ae:20:e4:87:97:17:23:ba:16:9f:e4:e3:37:7c:
                    f7:fc:38:96:b0:0d:98:5a:d5:d0:13:36:1b:01:4b:
                    73:6b:c9:de:9b:b5:6c:bd:4c:83:37:01:f3:a3:7d:
                    d8:df:8e:89:b4:23:ae:c5:6a:a0:4c:45:cb:61:da:
                    45:06:ef:44:ae:95:6e:72:3c:bd:34:ff:2b:41:fc:
                    10:04:01:23:aa:04:56:56:ab:e5:04:71:95:e1:f2:
                    4d:0d:76:f1:aa:2a:11:bf:c2:7f:c2:13:68:7a:86:
                    be:8a:91:06:f1:ab:12:15:60:20:14:47:53:a4:5f:
                    0a:9f:46:a0:d1:7e:48:7a:c5:06:74:91:50:a7:e0:
                    04:7a:99:a7:ce:9f:8f:8a:8b:f3:99:4e:31:a2:07:
                    9b:b6:79:6b:f2:e8:15:1f:f8:26:f5:fd:9a:57:86:
                    29:54:18:29:50:9c:92:d5:0c:a0:a3:94:92:03:7a:
                    9b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4B:9A:FE:50:78:D5:E3:2D:14:DC:4D:F7:9E:2E:8D:D3:54:05:41
            X509v3 Authority Key Identifier:
                keyid:4A:C2:BC:0E:3E:59:33:2F:4B:E2:C5:8F:F2:5A:18:61:F5:FD:E8:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48afe0-5a18-4d99-91b6-8073dce09628/1/SsK8Dj5ZMy9L4sWP8loYYfX96Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2d:80:53:b2:0b:2a:75:a3:48:f9:8e:95:8e:65:3b:78:f3:
         8b:7b:96:fe:86:62:25:24:0e:8c:ef:6b:86:07:f8:5c:2a:38:
         97:8e:f8:05:a8:6d:3f:1c:ae:34:3d:5c:93:cb:23:54:c4:47:
         c7:46:4d:de:62:58:b4:cb:7e:d3:2e:00:37:99:5c:8a:64:d5:
         75:b3:8c:e5:1f:80:db:dc:88:11:58:5d:09:5d:97:85:01:4b:
         67:d7:b7:b9:cd:02:e4:99:85:4f:f6:4a:ac:77:af:5a:d3:00:
         ac:03:4c:74:a1:be:48:b0:a1:7a:dc:c2:58:99:be:54:b0:85:
         57:0d:47:15:95:c4:50:56:ad:9c:04:75:45:a9:30:6a:6f:31:
         08:60:bc:df:a4:a0:b7:cd:a4:34:8c:5e:62:22:01:43:eb:a9:
         c6:5e:f6:12:36:ed:4a:99:cd:89:17:c7:bb:7b:db:08:f5:27:
         36:90:f5:7a:d8:29:29:c9:4c:3f:9b:05:4b:d3:d0:94:12:51:
         57:f0:f9:38:88:22:67:ae:f7:f0:f3:57:3e:2e:b9:85:eb:4f:
         4a:af:c6:3f:8b:a2:b2:a5:1e:95:de:42:e7:41:c1:38:6e:ee:
         ae:af:bc:31:60:50:da:f4:80:32:52:b1:73:2d:d6:de:68:05:
         f3:4a:1f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:18:37 2026 by rpki-client