Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          LYOWG0DV4M2cw/neqVPPXPGzvgqZuOfZeVUn3+c+AYg=
Subject key identifier:   B9:F2:B1:53:85:D0:11:14:48:89:2A:63:0B:32:85:86:86:39:83:82
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019F0E51839DFA06C07D8AF444743239589E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          1987
Signing time:             Sun 28 Jun 2026 13:00:50 +0000
Manifest this update:     Sun 28 Jun 2026 13:00:50 +0000
Manifest next update:     Mon 29 Jun 2026 13:00:50 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: Vn1oZG79v2cI9lqwGjFTavO4PzeIEBxwK1S0yAtmcrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0e:51:83:9d:fa:06:c0:7d:8a:f4:44:74:32:39:58:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Jun 28 13:00:50 2026 GMT
            Not After : Jun 29 13:00:50 2026 GMT
        Subject: CN=b9f2b15385d0111448892a630b32858686398382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:81:06:de:76:0f:aa:ca:e1:a1:c4:dd:cd:
                    6b:66:b9:1b:c9:5a:d2:60:92:14:37:6a:70:ec:2c:
                    1a:32:9f:76:a4:7d:40:8b:1d:d4:21:21:5b:d9:94:
                    df:2b:bd:3c:89:bd:e4:4a:e0:f2:35:c1:ab:71:3f:
                    3b:18:db:5e:6b:f9:cd:f6:cb:f1:4a:ef:b8:18:1d:
                    31:b7:39:23:08:9f:64:39:98:22:69:72:b2:64:4c:
                    d8:3f:2f:04:46:7c:92:73:8e:11:a6:d6:e5:0d:98:
                    a2:5d:17:19:2f:a9:59:55:f7:a7:69:b2:e0:ec:d0:
                    0e:80:2d:d5:23:9c:a6:f2:92:1e:89:7e:75:95:ef:
                    9a:2b:28:ec:1b:63:e1:50:5d:54:c0:0a:50:35:ef:
                    2f:28:69:fd:9f:e3:54:4a:33:c6:40:a4:51:37:68:
                    5a:a7:14:0d:e6:36:87:aa:9a:5c:63:19:eb:ad:5d:
                    61:09:b0:7b:ef:ac:f8:9c:cf:18:ba:10:74:96:d2:
                    75:f4:3c:2c:ee:37:47:23:5a:ac:c8:cd:55:a3:1f:
                    e6:fd:39:9c:f0:2f:85:5e:a6:14:4e:71:fe:9b:b5:
                    25:64:66:89:fa:0d:0a:3b:59:25:45:17:c9:57:07:
                    20:47:bd:fe:9e:82:cd:86:6a:49:58:7d:a7:35:75:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F2:B1:53:85:D0:11:14:48:89:2A:63:0B:32:85:86:86:39:83:82
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:6f:cb:76:60:77:d0:c2:ed:61:d7:05:a1:e3:f3:e5:24:
         ea:c7:4c:a9:00:dd:d0:81:a7:39:df:f6:33:c7:55:bf:d8:39:
         2e:5c:c8:04:ad:6d:d8:75:0e:e2:36:55:ec:0e:4e:94:d8:72:
         37:41:c4:f6:f9:bf:7a:fb:cc:20:cd:5d:e0:4b:c8:1b:f5:64:
         0a:fb:6d:6a:ef:eb:65:93:fc:68:b4:72:a5:2f:23:ec:38:0a:
         94:5d:2a:ce:10:6e:fc:48:1c:d1:02:ae:9e:31:3a:22:74:b8:
         28:9b:f2:78:e7:62:ca:63:dc:eb:28:38:8f:a4:e3:17:13:b6:
         d7:11:19:d5:28:da:38:e9:2e:66:fd:7b:ef:3d:b1:18:0f:fd:
         6d:97:7d:4c:f2:7d:92:81:b3:3f:d5:e9:7e:d0:b9:3c:dc:c0:
         c7:20:b2:81:84:b2:ec:7d:e0:d9:33:85:98:f2:5a:64:17:47:
         0a:16:c9:11:e9:fc:8a:02:26:da:e0:7b:cf:79:9c:b3:d6:c7:
         47:34:3b:a5:9c:29:2b:8f:42:84:67:45:cd:23:15:12:02:d6:
         7a:02:c4:34:78:4f:eb:a4:64:ac:a8:57:d1:82:82:1b:8c:03:
         2b:33:49:25:69:23:e6:46:32:76:c7:f7:9c:bd:24:a6:0f:cf:
         f3:a9:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:18:55 2026 by rpki-client