Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File:                     prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier:          JxuLr2B/fXxAvLieVSSja5l8wsttG3hdRtfa86DFd6A=
Subject key identifier:   8E:20:5A:2D:E9:AC:EE:F4:7B:7E:CD:8A:21:08:B3:B6:7D:36:99:C7
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer:       /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial:       019EDC1C27184A831FAE63E93577F7935D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number:          0CC4
Signing time:             Thu 18 Jun 2026 19:01:32 +0000
Manifest this update:     Thu 18 Jun 2026 19:01:32 +0000
Manifest next update:     Fri 19 Jun 2026 19:01:32 +0000
Files and hashes:         1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
                          2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: V1dMkE2C/0hMcQb8oBhWCyCszISHf3wX0YYGi8Yjnpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dc:1c:27:18:4a:83:1f:ae:63:e9:35:77:f7:93:5d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
        Validity
            Not Before: Jun 18 19:01:32 2026 GMT
            Not After : Jun 19 19:01:32 2026 GMT
        Subject: CN=8e205a2de9aceef47b7ecd8a2108b3b67d3699c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:c9:8d:2e:f9:ac:71:e6:b4:6b:34:a3:68:
                    28:b0:8d:70:e6:c4:fd:af:5f:e2:90:d3:a7:06:44:
                    71:cf:04:b6:5b:c8:a8:48:69:df:61:d6:0d:70:28:
                    1b:ce:5d:33:d2:89:40:21:7e:0e:34:cc:ce:99:87:
                    e4:46:93:bd:1a:25:ed:41:66:a7:0d:af:d6:5f:71:
                    f8:4f:79:7c:78:2d:20:1f:df:25:45:59:43:5e:44:
                    b3:4f:70:a9:38:fb:1d:81:ff:98:71:6b:17:ca:25:
                    26:da:6b:19:a3:23:a3:0a:e8:72:81:cc:f4:83:aa:
                    cb:99:f7:aa:50:80:c8:21:15:b5:5c:bf:17:4c:02:
                    a4:db:42:a8:13:ca:8f:56:eb:45:de:78:52:ff:f4:
                    10:e6:66:10:74:7c:19:f4:64:1a:a3:f7:7b:2d:51:
                    ca:c1:77:87:de:18:68:b0:92:18:13:d3:ca:72:36:
                    73:18:0f:04:e8:c8:54:42:6f:cf:41:b5:41:4b:59:
                    f6:7c:f0:b6:66:30:11:39:83:80:66:c6:17:65:74:
                    ea:11:a7:e8:99:10:b9:04:bf:a9:78:55:45:2a:57:
                    da:ca:d2:30:1c:18:50:37:b8:98:68:1e:7f:02:5d:
                    af:4c:c2:c3:d3:ac:d9:3b:fe:82:37:67:4c:84:33:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:20:5A:2D:E9:AC:EE:F4:7B:7E:CD:8A:21:08:B3:B6:7D:36:99:C7
            X509v3 Authority Key Identifier:
                keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b4:84:71:1f:c0:cb:bc:32:55:21:e6:f0:a2:23:e9:a7:77:
         ba:c6:5d:d8:2b:4f:50:18:58:91:a4:c9:f0:f2:5c:fd:7f:b7:
         85:52:92:73:0f:7b:60:f9:fa:13:23:6b:2a:43:15:94:3d:d3:
         01:f2:9f:ef:58:1c:b9:c4:d0:a7:9b:f8:b7:94:c0:25:4c:0a:
         0f:98:16:82:04:6d:02:03:f5:3b:be:c2:6b:0f:a2:f8:5d:d3:
         66:65:a7:5b:5b:f4:88:a3:6d:c3:b1:18:dd:00:b5:77:4b:25:
         43:16:6d:83:c8:27:a8:f9:d8:b3:87:c9:5f:05:0e:9d:cc:fa:
         60:28:db:7d:ae:25:56:f8:53:63:de:69:08:cc:c3:63:4d:89:
         ea:0a:15:39:92:17:64:5e:ca:27:e0:92:7b:2a:04:08:ab:49:
         48:06:5b:2b:8a:5d:41:b1:02:b2:4c:87:e9:73:c3:b1:01:99:
         ed:2a:3c:cd:7c:20:37:04:ec:48:48:bf:ec:1d:d5:10:52:eb:
         b5:5b:c0:c3:b8:08:ca:1c:bc:02:f5:03:7c:bd:67:f0:93:14:
         6f:89:30:cd:d6:0f:4f:e1:a7:fe:b0:42:4b:82:f5:fd:03:2a:
         38:e5:59:a8:e2:ff:9a:cc:75:46:d7:35:94:65:ee:2f:d7:4a:
         bc:1d:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:34:08 2026 by rpki-client