Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File:                     1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier:          hzTq/rC0ByWw8iGbIXhved30EOdkmmfje3FTZOYrpLM=
Subject key identifier:   0D:5C:2E:77:E0:0C:C6:4A:62:F7:72:3A:21:77:35:9C:37:73:17:33
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer:       /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial:       019E8FB7F9BE07AB59F2B091AAAE760C6CFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number:          1948
Signing time:             Wed 03 Jun 2026 23:00:59 +0000
Manifest this update:     Wed 03 Jun 2026 23:00:59 +0000
Manifest next update:     Thu 04 Jun 2026 23:00:59 +0000
Files and hashes:         1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: 5ovLY1kpdA34x8aDfAh0X9UZYrf/sFM/p6rdSqTjhhQ=)
                          2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=)
                          3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=)
                          4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=)
                          5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=)
                          6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=)
                          7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=)
                          8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=)
                          9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=)
                          10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=)
                          11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8f:b7:f9:be:07:ab:59:f2:b0:91:aa:ae:76:0c:6c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
        Validity
            Not Before: Jun  3 23:00:59 2026 GMT
            Not After : Jun  4 23:00:59 2026 GMT
        Subject: CN=0d5c2e77e00cc64a62f7723a2177359c37731733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:78:6d:8f:66:85:be:c3:e4:1c:a9:e0:6f:
                    83:db:15:7f:b3:b7:c6:2c:b2:80:94:79:33:c8:e8:
                    b6:ac:b8:25:37:92:78:a0:94:5c:6c:fb:67:50:5c:
                    09:80:87:8c:83:cf:6a:a4:61:0e:db:59:11:28:48:
                    64:99:87:42:73:1b:6c:2f:a6:89:ca:12:df:de:90:
                    41:11:2d:88:7c:10:f2:27:47:34:1f:1f:97:86:a8:
                    4b:d3:94:0d:17:8e:59:a5:1d:8d:bc:b9:02:68:85:
                    dd:80:ce:24:c0:4a:bf:58:1c:57:c1:40:92:9b:5e:
                    38:9f:03:e2:5a:f6:3f:ba:1a:13:36:9e:81:4f:28:
                    0d:26:38:24:5a:91:13:3c:9c:53:51:25:24:6f:f1:
                    03:5f:7c:b9:cf:d0:ac:c4:3d:fa:df:23:c0:f3:98:
                    c8:04:a6:74:bf:dc:72:0a:f0:63:17:da:d9:a8:0d:
                    64:26:24:d1:c7:bb:32:e6:64:42:64:7d:5c:4f:0e:
                    15:99:9f:97:4a:20:a6:5e:0e:01:17:f4:41:c1:53:
                    ff:7a:10:4c:93:bb:fe:05:a2:b0:31:a8:fd:c0:d7:
                    12:e7:3e:24:3a:b8:90:92:36:09:cc:48:18:24:2c:
                    dd:54:aa:d8:20:0a:80:6c:27:e4:b0:94:fb:e1:0b:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:2E:77:E0:0C:C6:4A:62:F7:72:3A:21:77:35:9C:37:73:17:33
            X509v3 Authority Key Identifier:
                keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:54:96:55:b4:de:6d:1b:72:54:f4:58:90:2c:5d:65:3b:
         bc:f4:05:9f:0f:47:8d:f7:9a:7d:8a:16:4f:96:ca:b7:19:c9:
         33:0d:8a:86:79:d9:84:c3:9d:d9:4c:50:4e:73:48:b8:ac:62:
         43:a0:46:e2:c8:a5:a3:46:65:de:0c:f2:32:b8:46:da:e0:2b:
         cb:10:06:c5:49:89:08:15:80:b8:f5:f3:8c:34:bb:18:07:c9:
         9e:29:69:26:d0:b2:2b:00:c1:c1:93:96:f4:69:ee:9a:a7:02:
         7d:50:49:b0:c5:37:d9:0d:a4:63:1d:5d:46:ee:73:10:8c:ea:
         44:35:e3:71:10:32:4d:39:ef:70:d6:1a:55:22:1c:a7:e6:34:
         56:18:b0:5e:2c:44:2a:9f:97:34:b9:fe:27:53:0d:35:04:f5:
         87:af:52:50:29:f4:0d:9f:f3:c8:fd:83:46:20:33:98:c4:2d:
         01:94:2d:3d:cc:e6:30:60:1a:2b:dd:c7:02:4a:d0:01:8a:3b:
         78:62:82:2b:79:4c:fb:2d:49:92:49:20:0d:3f:70:50:54:dd:
         bd:87:69:bf:ea:a9:99:59:89:f9:c3:bf:c3:4d:4b:d0:8e:3c:
         78:bc:c2:c0:60:65:eb:b2:ef:70:e1:a6:ea:d4:63:6f:df:c5:
         c9:d9:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:00:52 2026 by rpki-client