Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          tFf19ayR3xEese2WfDfGRnQkvckhinFfax77xdetGO8=
Subject key identifier:   6D:69:36:FB:C7:51:D8:6F:0B:22:4D:28:B7:71:CE:E9:10:DE:06:1C
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019F08864E31E951D04E4C13B4ECE00CFC4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          1984
Signing time:             Sat 27 Jun 2026 10:00:47 +0000
Manifest this update:     Sat 27 Jun 2026 10:00:47 +0000
Manifest next update:     Sun 28 Jun 2026 10:00:47 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: aSXkQWo4KHPrrpvdtz6p5uEL/KIsStH+L86JnCPuxfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Jun 2026 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:08:86:4e:31:e9:51:d0:4e:4c:13:b4:ec:e0:0c:fc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Jun 27 10:00:47 2026 GMT
            Not After : Jun 28 10:00:47 2026 GMT
        Subject: CN=6d6936fbc751d86f0b224d28b771cee910de061c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:c2:8d:5b:25:ea:a5:ff:31:20:1f:d3:75:
                    8e:bd:9d:8a:fc:36:62:14:7a:c9:7a:49:9c:65:69:
                    5a:f1:51:d4:12:47:a1:22:94:2d:11:85:26:e6:49:
                    b6:7c:e7:92:91:a3:91:00:2f:ee:40:8c:1f:8c:69:
                    e1:ab:80:89:4a:c5:7e:5c:4c:c4:7d:37:e9:e1:8e:
                    3c:e8:a1:ab:c5:40:74:89:8b:da:6a:2f:d0:ee:7c:
                    39:cf:04:77:d6:73:a2:f8:74:a7:7f:3b:72:2c:61:
                    0a:f7:d7:8b:9e:96:a5:46:12:cc:fb:c6:64:67:86:
                    24:7a:9f:d1:79:9e:cc:ca:e8:df:d4:88:c1:63:0e:
                    16:e5:1e:f9:37:4f:03:b9:6f:37:b1:67:4e:57:28:
                    70:13:77:5a:4f:15:4b:f4:4f:4a:ea:ef:9c:a7:ec:
                    61:f4:22:4e:fd:ed:70:2f:c0:80:32:1f:e9:2a:ae:
                    aa:5a:a2:fd:37:21:c0:56:68:0b:f0:06:a2:f3:20:
                    9b:af:96:f6:be:89:2b:1f:2d:bb:79:40:8b:c4:43:
                    95:50:44:22:59:69:dc:13:a3:1e:b9:6b:7c:14:8e:
                    af:80:3b:f1:fc:36:83:16:49:4b:c9:7b:48:9d:1e:
                    45:a9:1a:75:db:19:ae:91:bf:61:67:82:81:fc:42:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:36:FB:C7:51:D8:6F:0B:22:4D:28:B7:71:CE:E9:10:DE:06:1C
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1f:8b:2f:37:0a:e1:e1:c9:43:69:2a:27:16:e1:cd:0f:14:
         65:3c:b1:3a:47:a7:d8:33:29:76:73:3d:11:5a:9b:f6:09:5e:
         b2:6b:9a:0d:b8:36:3c:09:f4:1e:0f:c9:d9:5a:e6:4c:c7:a1:
         08:a0:dd:54:07:9d:2d:c6:d3:1b:f5:a6:8d:81:71:f0:58:73:
         c9:74:e2:a4:20:69:a6:68:92:c4:08:42:e8:fc:b4:2c:3b:2c:
         7a:47:a0:af:c0:67:b5:fe:4e:04:2d:6f:ad:21:96:96:99:8a:
         e2:c5:36:63:07:a6:24:73:8f:6c:a9:1f:03:e0:a9:b8:f1:5d:
         13:7d:f3:e6:30:35:3c:47:3f:62:16:9d:97:9c:97:5b:b3:d9:
         88:7e:44:78:96:c8:5c:ea:67:3d:28:b5:cf:24:19:ea:d1:bd:
         89:1a:12:d9:82:fa:7a:0d:22:5c:76:b8:a7:d6:c3:10:92:ae:
         64:d1:e9:89:b2:83:71:fd:28:cf:9e:82:89:dc:e9:94:cf:4c:
         7c:e7:1e:8d:b5:94:cd:43:9f:38:93:24:b2:43:e4:de:20:e5:
         cf:22:14:c9:89:b3:08:13:c9:a3:dc:7e:11:df:b7:df:bc:8e:
         ed:06:cd:47:14:dd:1d:a5:a3:ff:1c:71:55:1f:7b:a9:72:01:
         b3:6b:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 16:32:55 2026 by rpki-client