Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File:                     edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier:          jJ7bEXV1iSCfFRUiqF63iQEENLOcQ6EofROSSF8MS+M=
Subject key identifier:   74:E8:69:4D:D7:C4:75:9E:2A:88:C7:A3:6E:30:1E:1F:0C:8A:4C:94
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer:       /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial:       019E9CCE1E24672B1555344B673DB7FDB1D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number:          1946
Signing time:             Sat 06 Jun 2026 12:00:14 +0000
Manifest this update:     Sat 06 Jun 2026 12:00:14 +0000
Manifest next update:     Sun 07 Jun 2026 12:00:14 +0000
Files and hashes:         1: 1oQnHtziYZUN1dZc7QkQQyuqMPE.roa (hash: j6nJzk5ZsSd6XpFmMvEADhEDlPdaRY5G9ebbRW3253M=)
                          2: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: XHZBEDe4iheXWQIPglx/eLKjfoM21eAiiGruMdAY6tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:ce:1e:24:67:2b:15:55:34:4b:67:3d:b7:fd:b1:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
        Validity
            Not Before: Jun  6 12:00:14 2026 GMT
            Not After : Jun  7 12:00:14 2026 GMT
        Subject: CN=74e8694dd7c4759e2a88c7a36e301e1f0c8a4c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:4d:01:74:93:f3:36:6e:69:4c:3b:08:07:
                    4c:ce:8d:1f:a3:b9:24:f0:d0:84:a6:ab:61:33:a0:
                    d6:72:37:ea:da:60:0c:b3:14:13:bf:cd:d9:00:1c:
                    54:29:57:95:44:81:f1:7a:58:41:0d:31:65:ac:69:
                    22:fd:ba:ec:e5:9e:cc:05:2c:6e:77:ac:09:2c:52:
                    19:4b:b8:ae:27:bb:82:42:6f:fa:e0:7b:9f:bb:2a:
                    1b:29:60:e0:5a:71:b4:52:b6:29:49:c0:51:58:d1:
                    60:bb:39:38:4c:15:b2:a8:c7:6f:74:dc:e3:37:db:
                    a8:c9:ae:87:60:fd:94:f5:01:6b:2b:29:4d:f1:a3:
                    2b:02:35:1a:85:70:51:01:61:ae:f5:83:9f:aa:fa:
                    1b:19:b6:53:40:01:2e:ac:7f:86:6e:b5:93:67:a8:
                    ea:37:3c:4f:54:11:33:17:5d:6c:39:f0:5b:93:80:
                    b5:e9:03:4e:96:cb:c4:50:b5:de:d2:8a:ff:b8:70:
                    1a:5c:0d:ab:04:9b:21:94:4f:08:de:a9:f4:04:88:
                    ac:04:2e:36:c0:c1:21:08:7e:94:19:de:c7:80:d2:
                    e7:5e:bd:87:1b:ef:20:c6:77:ee:8d:94:3c:0d:d9:
                    68:ae:83:0b:ba:7d:ed:93:10:e0:c3:44:cc:10:fb:
                    d8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E8:69:4D:D7:C4:75:9E:2A:88:C7:A3:6E:30:1E:1F:0C:8A:4C:94
            X509v3 Authority Key Identifier:
                keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:79:9b:cb:64:a1:21:18:93:77:a0:ed:2a:ce:2d:84:ad:2f:
         d8:f7:a2:56:ee:c3:9e:43:d4:d0:82:75:5d:69:70:89:07:7a:
         26:40:25:5c:06:97:cc:e5:de:f5:d1:f1:2b:19:92:b4:91:14:
         26:5e:14:96:6e:cf:63:9d:8d:c2:18:b6:a2:bc:e3:41:95:ae:
         bf:16:8d:7d:9b:9a:d5:ef:9b:80:e3:77:29:1c:41:d4:ba:b5:
         41:e0:e2:54:b9:41:6c:30:31:f3:3a:63:6a:36:43:71:a5:14:
         5a:8f:f1:ec:92:d4:b6:d3:d4:31:b4:6e:a6:08:94:55:98:dc:
         a6:9b:e2:8d:34:18:e5:cf:46:89:cb:70:2e:f0:da:11:d1:8b:
         41:0c:42:b2:51:18:0f:af:53:a4:9c:fe:f9:26:58:d1:96:1f:
         9e:77:ca:34:e6:74:b6:a6:07:ef:eb:a3:c8:c3:5e:0c:73:59:
         af:24:bc:be:1c:0a:6f:9a:87:99:93:fa:a1:f9:c2:ac:a9:72:
         5b:ac:01:60:4d:28:e0:55:fc:f4:6a:1f:6c:04:dd:3f:cb:ca:
         92:3c:7f:c3:13:55:ed:ae:22:24:47:43:ad:6b:5e:2b:a2:9b:
         33:b2:71:4e:59:d3:0d:49:f5:4f:11:03:98:eb:f8:3f:d8:52:
         15:c4:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:29:39 2026 by rpki-client