Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          U3z1ZZMvTRnjac7ENVsXrBGdY+Qsuo3zk8tweGx/rew=
Subject key identifier:   92:49:46:11:76:75:7B:61:55:55:9A:C4:63:37:25:FA:25:B0:09:97
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019EB38D0AA9F6E30EA6473E0C979EC9D3A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          1958
Signing time:             Wed 10 Jun 2026 22:00:25 +0000
Manifest this update:     Wed 10 Jun 2026 22:00:25 +0000
Manifest next update:     Thu 11 Jun 2026 22:00:25 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: G4Wybn/Sm2nIc7LETyqvC2Dj0MhfyjEgjwuaZzQuFfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Jun 2026 14:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b3:8d:0a:a9:f6:e3:0e:a6:47:3e:0c:97:9e:c9:d3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Jun 10 22:00:25 2026 GMT
            Not After : Jun 11 22:00:25 2026 GMT
        Subject: CN=9249461176757b6155559ac4633725fa25b00997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:32:37:ec:18:3a:34:fa:40:02:34:03:bf:
                    b5:27:e8:1a:08:a3:9d:38:56:dd:b0:f2:ca:7b:a6:
                    48:73:b1:1f:dc:ae:23:f3:91:bc:ad:0b:95:13:fa:
                    d8:22:68:d6:d1:9b:cf:b2:f0:93:71:23:67:fc:3e:
                    d3:94:4d:36:cf:8d:14:22:73:52:ce:3f:95:cd:d0:
                    62:c4:97:1f:b0:a9:9b:22:b2:a3:6a:cd:b2:d7:4b:
                    fe:7b:30:3b:4f:36:52:f0:06:bd:ab:43:2d:88:fe:
                    24:87:51:4e:db:c3:87:2f:4f:1d:cc:f7:09:b7:74:
                    7a:66:7a:cc:80:c1:4e:68:d4:d1:77:03:fa:a1:84:
                    48:c4:5f:54:f5:d5:8c:d0:cf:87:f6:7f:e0:9f:45:
                    dd:31:4b:37:90:e8:0b:69:99:a2:82:72:92:29:7a:
                    b0:24:e8:25:f0:b9:ee:78:c3:67:28:26:6b:b0:27:
                    7a:f8:a5:de:01:e4:3f:94:3a:0b:e1:56:32:c6:6e:
                    a9:0e:b2:da:25:93:57:bf:fb:e1:5c:a3:73:90:d7:
                    f8:da:ac:82:a3:ab:fd:0d:15:6b:04:c0:a3:1a:26:
                    27:24:fd:d2:97:d8:58:3e:30:0b:45:9f:f3:0d:3c:
                    d3:2f:0e:df:d8:5d:15:ce:f2:a1:7d:94:ba:1a:c8:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:49:46:11:76:75:7B:61:55:55:9A:C4:63:37:25:FA:25:B0:09:97
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:51:67:2c:28:7a:de:c2:e1:09:61:b5:03:75:d5:14:38:c5:
         97:14:fc:95:e5:e4:09:bd:51:c4:32:be:40:40:76:92:34:b5:
         55:d7:7d:1a:68:82:c7:93:19:45:46:10:4a:70:45:79:d3:04:
         89:b4:a4:87:03:49:2f:68:45:21:59:d7:c1:fa:cb:e6:4c:bc:
         a7:50:c5:fc:3a:cb:3c:26:8d:3a:98:fd:e9:35:63:00:72:d2:
         81:30:a0:4b:3e:d3:5a:7a:96:f0:ff:b6:c4:fb:b5:5b:a5:0f:
         d1:ba:5f:ee:49:d1:d0:52:db:95:ed:66:d7:25:0d:63:69:eb:
         6a:e2:2d:87:ae:d0:21:d8:49:a8:52:88:69:a6:1c:06:98:a8:
         76:05:b6:f0:5f:b7:f6:d3:91:a1:5f:39:bb:a1:a5:66:c3:95:
         ec:d2:6b:7f:78:55:bd:6b:16:3e:79:90:19:28:2b:59:a1:8c:
         a8:12:5d:97:02:00:d7:90:58:04:10:e7:4a:22:7e:9a:fd:a9:
         5f:50:a1:12:9d:9e:30:59:ab:cb:9b:96:2a:1e:78:b6:d3:06:
         31:e3:9e:01:53:e7:29:dd:82:7e:e9:e6:3f:c6:b7:2e:ca:3a:
         ba:84:e9:0b:ee:4f:6c:cd:c6:c8:d2:10:1f:14:e3:a1:91:4f:
         f3:c8:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 00:51:52 2026 by rpki-client