Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File:                     tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier:          2AgbbuT44KChdeGXLdc9lsDEOuJmj/BLpazoHXfue9U=
Subject key identifier:   20:61:C7:C5:E3:D6:15:CF:79:72:AD:1D:E0:55:15:B5:BE:29:5D:45
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer:       /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial:       019EB6FBD745C7331EC1721461626A08E53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number:          1021
Signing time:             Thu 11 Jun 2026 14:00:18 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:18 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:18 +0000
Files and hashes:         1: 6_uqscAUqLl-U-FOdnB8b80ymVs.roa (hash: 6iIxj8hFU1rpgiG9WHmnrQdt6HoHVlv0NufbYcZmLKU=)
                          2: Asdq0CBEIsgp9XnIZOINz9u9Cp8.roa (hash: nOKPYxisoFhulj9H3B7lMkY5LfDFsGYXQ3OYtNKl888=)
                          3: I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa (hash: v4p0Y6w9BB4bsfMbtUIZ8Y6YLTCCJcFeqfZJdPcFyGU=)
                          4: Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa (hash: vFhA2KjCPdOcJsVjA7uGx7jrzbvsOL97jtv5aYxWqgs=)
                          5: rFMfSzn-n7nZRas5UlWT_V3b0wE.roa (hash: BT3wbqOQUe0s9zLkAX65/Pmrb3QAkF3u9va25+8RZ8s=)
                          6: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: T6eRHXVFZPtsB+6+sDtVawk1ZHYB2mWASWOuMKdRM+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fb:d7:45:c7:33:1e:c1:72:14:61:62:6a:08:e5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
        Validity
            Not Before: Jun 11 14:00:18 2026 GMT
            Not After : Jun 12 14:00:18 2026 GMT
        Subject: CN=2061c7c5e3d615cf7972ad1de05515b5be295d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:8b:99:d5:39:50:33:28:73:b0:ef:3f:94:
                    3f:42:49:c8:ad:b9:86:10:07:48:0d:76:2e:36:f5:
                    57:b0:61:0c:48:c5:37:a4:78:70:92:33:b9:4b:9e:
                    29:6f:50:98:03:f1:c3:37:bb:1b:7b:b2:46:4c:a8:
                    4f:2b:4c:b6:a9:1f:2f:ba:92:ba:c4:9c:2f:2d:ce:
                    12:92:48:e1:1d:7c:73:f2:dc:fc:a2:6a:d7:5a:86:
                    f7:7d:f2:bf:c1:a4:e5:70:55:78:c4:2d:16:60:48:
                    1c:cf:5d:4d:fd:74:ab:b5:9b:b9:7c:f5:8e:92:90:
                    6d:49:5e:88:a1:8f:1f:f0:fa:8e:c0:55:5e:5a:5e:
                    8c:f0:18:64:de:75:8a:7c:f5:53:8a:f0:19:d6:a9:
                    ee:fa:2d:b5:d7:fa:07:85:6e:72:f1:93:eb:df:be:
                    f7:3b:92:b4:89:f4:55:0c:c0:80:74:86:60:dd:09:
                    f9:9e:7b:d4:39:29:a7:d8:c9:fe:8f:02:e1:80:20:
                    12:91:d7:71:8e:9c:05:e7:42:49:56:7b:b7:ee:1d:
                    2b:65:a8:33:72:bc:42:74:97:b5:ee:44:0f:26:f1:
                    b0:d9:d4:8b:eb:50:5e:d7:a5:ad:7a:4d:03:4a:6a:
                    25:06:d2:1c:58:70:32:98:06:ad:35:fa:80:88:73:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:61:C7:C5:E3:D6:15:CF:79:72:AD:1D:E0:55:15:B5:BE:29:5D:45
            X509v3 Authority Key Identifier:
                keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:c3:ec:63:96:7b:59:03:bc:61:f4:27:9b:af:9b:b9:bf:
         7c:fd:ac:c7:25:b3:7b:2d:ac:29:62:6b:45:f8:69:32:0a:de:
         1d:25:c9:8a:57:33:5a:49:ca:95:21:13:d8:d8:35:fa:31:7e:
         f6:62:db:f1:c4:01:84:03:5d:eb:de:c2:6e:9e:30:8c:ee:79:
         35:7f:c7:0a:73:44:99:7a:ee:66:54:58:ad:ef:16:3b:8c:48:
         ec:4b:5b:70:87:7b:f2:58:24:48:0d:78:a0:bf:fa:ba:eb:e8:
         9a:9d:fd:74:61:76:1d:eb:18:7e:f1:e8:4a:dd:a8:33:ac:aa:
         09:3b:b1:de:c6:8d:15:61:01:30:ec:0b:2c:5c:0f:4e:72:aa:
         44:e9:f3:71:30:5e:a8:13:e4:ab:ba:0d:10:53:9e:6d:0a:66:
         c2:27:66:61:df:c9:5d:70:20:b2:8a:cb:21:b9:5e:6d:2c:ad:
         fe:8e:f4:76:8b:62:cd:85:7c:2c:88:43:59:4a:db:34:0e:10:
         2e:91:1a:61:93:b0:22:2f:73:25:af:4f:c1:8e:a7:d8:1d:21:
         91:e1:49:43:f7:47:08:e8:39:e9:79:9a:31:41:93:65:3f:26:
         33:8f:f7:f1:ee:c5:11:68:99:9b:28:7a:dc:a7:02:31:35:72:
         cf:7e:9d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:58 2026 by rpki-client