Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
File:                     xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft (raw, json)
Hash identifier:          vztXHqkEd0e5ewZa4xY8xwJlzsK8wuk2xwgy3/eq7Us=
Subject key identifier:   5F:36:1A:E2:32:59:91:56:EC:41:B7:44:33:FC:AC:91:06:D4:03:1F
Authority key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Certificate issuer:       /CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Certificate serial:       019EFBA862F12156559E3E8287BAAD19EF4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
Manifest number:          BF
Signing time:             Wed 24 Jun 2026 22:02:57 +0000
Manifest this update:     Wed 24 Jun 2026 22:02:57 +0000
Manifest next update:     Thu 25 Jun 2026 22:02:57 +0000
Files and hashes:         1: YPZjGGUztC1i2ZNYvGgdAsuXTgo.asa (hash: K4CEQz/XSFN1g13QszcoyDmffxNfF6QeHPnFTt4rvN8=)
                          2: xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl (hash: fw444x1Nw8k/HXG4cBw4HnELwSQi1Fg5L4yvjZohCtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 22:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:a8:62:f1:21:56:55:9e:3e:82:87:ba:ad:19:ef:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
        Validity
            Not Before: Jun 24 22:02:57 2026 GMT
            Not After : Jun 25 22:02:57 2026 GMT
        Subject: CN=5f361ae232599156ec41b74433fcac9106d4031f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:10:cd:bb:95:db:85:18:83:c5:58:ff:a9:40:
                    b2:47:22:cf:4e:6d:45:b7:ea:39:eb:41:69:ac:80:
                    a8:d9:5c:90:dc:32:ba:cb:c9:5c:2c:ee:21:e3:b2:
                    ba:53:64:cf:4e:92:22:af:83:82:94:ca:c7:f2:1a:
                    55:49:42:ed:94:8f:fc:ad:e8:ae:a4:32:df:52:14:
                    bc:33:05:96:57:e0:3d:a4:42:8c:fe:ea:c4:4a:a6:
                    66:9d:dc:b0:bf:61:af:18:68:96:94:67:5b:e7:88:
                    3f:39:91:4e:be:ed:00:7b:be:49:f7:4e:e8:df:30:
                    7e:da:e1:28:19:0b:41:62:29:8e:a5:02:31:3e:c7:
                    75:27:36:05:90:f0:54:87:5b:24:ff:12:6b:43:46:
                    6b:7f:ca:85:6d:52:54:7d:a9:6e:63:45:00:ac:ad:
                    b4:98:96:ed:a3:c9:9d:f2:8f:e1:aa:63:e4:f0:af:
                    b4:91:e7:d6:5e:75:95:0f:10:d9:63:dd:74:8e:b3:
                    e1:ff:c0:2e:98:06:4d:60:2e:72:96:40:6d:9e:34:
                    af:28:31:6a:aa:e1:89:8c:e8:b1:57:f4:6e:12:8d:
                    54:a8:ed:b4:0b:ec:26:af:9e:23:b8:1b:39:1d:d8:
                    ec:c2:5a:95:f2:5f:27:ae:ba:28:67:61:12:48:b3:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:36:1A:E2:32:59:91:56:EC:41:B7:44:33:FC:AC:91:06:D4:03:1F
            X509v3 Authority Key Identifier:
                keyid:C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:62:87:91:8f:df:ac:2e:60:77:23:a7:23:4f:b7:d2:3d:71:
         24:e8:80:a5:52:e7:de:93:f7:a7:f6:2c:0c:c1:66:e3:36:e6:
         09:86:ac:0c:06:06:3f:e9:17:20:0e:16:21:75:d3:6c:3d:04:
         fd:98:f7:fb:64:0f:ca:63:b2:f7:d5:d3:9f:6b:9e:30:b9:f8:
         d1:32:dc:d6:99:93:a6:28:06:ea:0f:71:b4:79:13:fc:98:ba:
         5b:2a:47:89:4a:de:1d:de:b1:b9:9a:6f:11:5d:ec:74:05:05:
         bd:2e:a7:f1:66:53:90:dd:5a:0c:fb:05:97:07:f2:97:19:8b:
         69:bb:39:9e:a2:4b:29:82:e1:2d:27:e2:1c:93:99:f6:8e:26:
         91:7b:a0:a2:3c:e8:09:e0:f6:fe:c4:05:43:95:a9:f5:90:06:
         b0:0f:b8:73:e7:17:7f:ae:78:ab:0e:37:c6:bc:93:96:37:20:
         43:32:cb:90:0a:d2:0f:fa:27:1d:d8:ca:0f:61:88:ee:f8:fe:
         c3:6c:3e:1c:c1:d3:b5:a9:a2:4a:50:8a:c8:a9:82:ff:b1:87:
         12:8d:16:11:2c:a0:5a:7e:c9:c4:e5:54:63:62:f9:ce:58:89:
         f7:c3:02:36:09:78:c6:78:ad:e5:6d:b2:43:a1:af:ba:d2:4c:
         0c:3e:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:31:57 2026 by rpki-client