Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          kIUIB5sgkn1G8zKMsC38L7r4MR0tlmaeEy8OeSrj/xA=
Subject key identifier:   4E:B1:CB:69:78:F1:50:8F:E2:43:EE:E5:4C:F4:53:29:2D:FD:61:19
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       019EB8EA9B5A49B4E5428B4151A1A988C542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          1978
Signing time:             Thu 11 Jun 2026 23:00:43 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:43 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:43 +0000
Files and hashes:         1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
                          2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
                          3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
                          4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: MFUeM0+nO8u2wNqbJe9Jb15QE7AjYu3rxShUYogUpUg=)
                          5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
                          6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
                          7: eJhW9z5ku9_qhNiO6iw_ATXoEHw.roa (hash: EPkgNIk6bKUUZeeYQssHTaftEyd1+IqUJt3qVX40j0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:9b:5a:49:b4:e5:42:8b:41:51:a1:a9:88:c5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Jun 11 23:00:43 2026 GMT
            Not After : Jun 12 23:00:43 2026 GMT
        Subject: CN=4eb1cb6978f1508fe243eee54cf453292dfd6119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:84:d6:d5:55:83:fb:bb:8e:67:4f:ad:c2:
                    14:14:6d:06:1b:f9:e7:62:41:0a:fc:47:26:ad:c6:
                    4e:c1:67:96:c6:27:6a:e4:35:fd:64:ba:0f:64:c7:
                    e5:df:9f:cf:a8:1f:c6:de:ec:11:e4:a2:d1:23:c3:
                    a7:42:37:4e:bc:c1:80:82:95:36:25:62:b1:6a:54:
                    b1:9f:6c:a4:ae:68:91:48:b4:53:94:4f:90:6b:06:
                    c2:33:1f:e7:82:5f:e2:16:92:0b:3d:bf:a3:0f:5e:
                    1c:b2:1b:a2:12:d8:ff:b4:ac:db:39:2e:50:c4:9d:
                    65:a6:85:66:e1:0a:c2:06:a7:ae:8f:c3:29:6a:df:
                    0a:6d:04:6f:ed:f0:a5:91:89:cf:49:69:88:aa:b9:
                    09:5e:74:a7:5a:17:f0:42:e1:6c:7a:27:6f:d1:cc:
                    c9:c6:e6:27:e9:d5:d4:7d:bf:d5:c1:3b:95:59:37:
                    19:2f:57:51:b7:57:33:11:19:dd:3f:44:a4:0f:e8:
                    a8:54:01:ea:35:3a:12:76:d5:8d:04:bd:78:cf:0b:
                    a7:81:dc:86:fa:1c:9c:e8:86:16:c8:25:b5:39:ee:
                    79:6a:2d:35:ec:18:d5:e0:0b:6b:72:12:b2:76:b1:
                    07:f7:b7:b2:3e:22:31:6b:3a:16:95:d0:03:8b:40:
                    e7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B1:CB:69:78:F1:50:8F:E2:43:EE:E5:4C:F4:53:29:2D:FD:61:19
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b9:ba:a6:c4:29:be:e5:24:e0:89:47:65:8f:16:ae:9e:ab:
         9a:5d:3b:8a:a5:15:ce:f8:b7:ba:7e:b6:3e:03:32:96:7e:9a:
         41:b3:b0:37:d7:91:13:8d:86:20:3f:f4:bf:cd:fa:73:57:1c:
         68:e1:d0:08:52:8c:69:07:86:aa:58:aa:c7:3b:95:0a:04:82:
         ee:55:c0:d9:a6:b6:84:81:3f:02:6a:a3:b0:c6:f9:cc:21:d3:
         6d:ae:2c:57:12:db:0e:87:ba:21:bc:17:5b:73:e7:20:81:f1:
         f7:f8:c1:b7:43:c1:a4:a8:ab:8d:bf:cf:70:ac:38:bd:e8:25:
         8a:71:94:39:6e:01:7f:2f:80:bd:24:0e:46:a1:2c:e9:2e:68:
         3c:e2:c0:25:36:8e:b0:05:b8:66:34:97:97:96:52:09:e8:f0:
         94:08:fc:63:1b:15:68:f9:44:ed:5d:c0:b3:5c:d5:e0:d4:53:
         35:34:42:fc:2d:96:8f:37:35:a3:70:09:84:05:69:c0:ba:71:
         be:25:19:4c:a9:e6:8e:0a:ce:33:46:e2:90:2c:0b:b6:5d:ce:
         39:78:ee:c2:0c:32:97:fe:a1:68:1c:db:ee:9f:c5:72:1a:d4:
         2a:ad:5a:71:21:4d:f9:55:3c:98:c8:94:16:53:9f:9e:56:83:
         6a:f9:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:19:23 2026 by rpki-client