Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File:                     4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier:          gvCrSTVrOgsuBBKFooTBnxVXgTd8tR1XJUS6bpZ02ro=
Subject key identifier:   73:92:05:7A:76:D7:53:D5:20:67:A5:0D:5A:9F:9B:30:79:FE:6C:55
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer:       /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial:       019EB87CAAA91E347BC3022DA4805542D504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number:          0309
Signing time:             Thu 11 Jun 2026 21:00:38 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:38 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:38 +0000
Files and hashes:         1: 22I2cj4bCDfR9vz_ePYstKdwD4U.roa (hash: FxTlXylYoYVdkOf3xENo9usIi1S/HAiA8pntP5Agzg4=)
                          2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: bfyM9sRoEvEWJxGpKRe/RT5msQMg5qQsbp5HMGX9CHQ=)
                          3: LVY1BQwCkSSiNK5x8OqdlyI-5zA.roa (hash: 2tdaTlXNcKe8v5naZFKPxbcAy2upyH8fTFwQTyL1WUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:aa:a9:1e:34:7b:c3:02:2d:a4:80:55:42:d5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
        Validity
            Not Before: Jun 11 21:00:38 2026 GMT
            Not After : Jun 12 21:00:38 2026 GMT
        Subject: CN=7392057a76d753d52067a50d5a9f9b3079fe6c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:73:e1:12:3e:6f:76:f2:2d:7d:d7:2a:90:1d:
                    d9:86:3a:66:83:fc:23:a5:13:3e:38:ca:bf:72:1d:
                    f3:fb:ba:4e:60:61:c8:00:b4:fe:c0:2a:a9:39:2d:
                    2b:08:61:94:21:a3:ca:7b:8d:3b:6a:f8:3d:34:04:
                    bb:3d:cf:74:ae:f7:49:74:3c:6f:ce:98:d9:dc:b3:
                    13:4e:1a:a8:e5:7d:78:f7:b1:36:f9:39:f5:f2:ce:
                    54:eb:c5:5d:65:46:37:23:1f:09:64:c6:d5:46:2c:
                    01:5c:61:62:d3:ca:e2:c1:97:af:00:db:25:ff:64:
                    76:b4:1c:af:71:73:f0:7f:3f:c8:06:e8:ba:9a:74:
                    4a:3d:27:76:dd:49:1c:f3:4c:bc:43:0e:9f:8d:12:
                    33:d8:d4:2f:e7:d6:57:e7:46:f8:31:c5:d2:a1:09:
                    93:9e:ff:c1:f6:db:30:58:c1:1f:e6:d1:02:0f:ec:
                    78:1d:6f:fe:73:b0:96:b6:09:c4:3f:97:a5:f4:2d:
                    45:ec:61:46:04:87:f6:90:d0:95:31:10:a6:b0:93:
                    a2:40:67:12:b0:d9:19:32:3c:33:2d:ed:33:2c:a9:
                    59:cb:15:11:f7:58:21:07:b5:c8:bd:46:68:40:7c:
                    00:9a:a9:ca:ad:8d:35:5b:2b:af:48:08:6e:66:ff:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:92:05:7A:76:D7:53:D5:20:67:A5:0D:5A:9F:9B:30:79:FE:6C:55
            X509v3 Authority Key Identifier:
                keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b7:2f:94:ee:b1:b3:01:e7:b7:ef:bf:cf:e1:b9:74:62:d9:
         06:26:d3:d4:1c:ee:07:59:d3:5f:8d:eb:3a:df:36:62:a7:9b:
         75:2c:8e:d5:6b:b2:61:2d:49:71:3f:ca:2b:a4:00:d4:ba:d0:
         16:5d:4d:da:b5:94:ae:b0:1b:eb:84:6b:d4:93:28:7a:98:01:
         76:62:d5:e4:41:67:f4:fa:59:e3:e5:2b:7d:fe:fe:96:4a:2e:
         5f:f9:80:c8:02:4c:29:ea:9f:e6:4c:57:41:a9:69:77:43:50:
         f0:0a:07:2f:55:9c:ae:f3:75:e9:ca:f7:3e:8c:03:67:d3:6e:
         21:29:24:7e:b7:78:88:9b:9c:7e:b8:31:00:be:2f:5c:99:10:
         44:08:28:04:4d:19:5c:77:21:b9:97:bb:05:30:b7:a2:0c:1b:
         28:ac:be:4f:45:54:15:87:ef:e0:8b:ec:b1:3c:9c:7e:a6:39:
         66:2f:0d:e6:cd:63:59:c0:81:26:c1:84:d1:b5:7d:bd:ab:7f:
         da:fc:2b:31:09:01:3c:c5:73:30:4b:4b:e3:b8:46:04:4e:9a:
         48:14:86:76:13:89:ce:ce:4d:8b:bf:bf:99:04:cc:11:d0:81:
         15:13:13:8f:0b:f6:26:e6:9e:07:73:00:cb:c7:ae:d6:93:64:
         14:51:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:45:15 2026 by rpki-client