Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File:                     p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier:          zaURNZkDI2PmG/kbKVvaE7NBXFJ7DBA7138IeSNH7G4=
Subject key identifier:   D1:96:79:D8:B3:7F:A5:04:30:A6:C3:91:38:18:25:0E:1F:EF:C5:47
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer:       /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial:       019F186805E7AB639C079F83C7B53FCAB730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number:          1994
Signing time:             Tue 30 Jun 2026 12:01:38 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:38 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:38 +0000
Files and hashes:         1: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
                          2: Uxztf7U023GXGEUScmTqEO_gfGo.roa (hash: gGrsr7XyuRi6jd4l0HrWabkhCAVylFI6zYe23gYxDXw=)
                          3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: hM18HKvtOqPGLsfi2DqOGiQPpP4ZaORIEqE/wxLthRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:68:05:e7:ab:63:9c:07:9f:83:c7:b5:3f:ca:b7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
        Validity
            Not Before: Jun 30 12:01:38 2026 GMT
            Not After : Jul  1 12:01:38 2026 GMT
        Subject: CN=d19679d8b37fa50430a6c3913818250e1fefc547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:36:c7:ee:8c:3e:8a:de:8a:42:28:d6:80:b5:
                    96:6f:9f:18:8e:81:e0:91:48:78:9d:0d:31:84:26:
                    38:49:77:ce:4c:24:70:8c:8f:8d:1e:96:67:84:b5:
                    18:65:79:ae:27:01:d8:29:9c:fb:23:91:4a:a6:b0:
                    b2:44:84:c1:9f:07:bb:86:e9:61:06:0b:01:f0:5a:
                    4e:3e:9f:97:3c:c1:ba:1b:6a:74:43:a7:5e:26:99:
                    1d:c1:2a:46:95:39:55:d4:26:88:6a:40:99:93:b5:
                    18:99:8c:6f:e3:77:c8:c5:19:64:bd:9a:00:1f:df:
                    86:07:4c:b5:99:6f:14:f7:80:a6:63:d3:1a:59:06:
                    ff:77:b8:f0:6c:ae:f4:f3:0f:4e:db:33:c1:ea:9f:
                    8d:db:eb:5e:47:11:0b:b8:d4:c9:fa:e8:2a:6f:85:
                    72:77:38:0d:82:9f:2d:80:cd:73:d8:56:49:d3:86:
                    5d:59:0e:b3:c9:b6:53:c8:3f:9e:d1:35:b2:1c:0e:
                    a4:e2:2c:3b:ff:21:0d:66:be:03:20:7c:2c:b8:b2:
                    e6:53:28:d5:b9:2c:53:4d:b3:ab:b4:7e:48:64:9a:
                    27:80:94:c4:95:52:c1:b2:30:a3:c1:ad:78:79:17:
                    eb:f2:45:57:6c:64:fd:1e:1a:3f:4a:a4:d8:e3:2b:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:96:79:D8:B3:7F:A5:04:30:A6:C3:91:38:18:25:0E:1F:EF:C5:47
            X509v3 Authority Key Identifier:
                keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:69:3a:1d:99:b2:8f:22:5d:5a:8c:56:a9:30:ad:db:e7:d6:
         29:fd:2f:c6:18:8d:b5:32:98:ef:bc:a8:1d:22:46:5e:c3:17:
         f7:b1:9a:5e:ba:21:40:db:03:ab:3a:fa:d6:d4:7b:be:11:82:
         95:0f:ac:c8:d5:ae:e6:d5:6b:24:15:2f:3c:fb:da:9e:4c:b9:
         96:e1:ea:74:37:10:5a:b5:37:65:1f:b3:74:53:93:78:2f:3b:
         92:eb:c3:a2:d7:62:ca:3e:f4:8b:d7:38:65:7c:75:1e:5c:3f:
         31:af:d0:1b:cf:7f:9c:05:31:61:e2:68:2a:60:93:e4:09:eb:
         e4:91:3c:ab:6a:09:9b:0e:e3:e5:1f:27:a4:14:82:ac:9b:e8:
         40:a4:4b:81:a9:46:07:0f:ee:ba:7f:ea:9a:c6:b3:bb:e6:21:
         35:1e:c5:f3:a9:cc:78:64:21:fb:a7:2e:fd:03:90:ed:26:9e:
         87:9a:9b:7e:f6:1a:84:60:d2:12:31:cd:18:1c:3d:d0:31:0e:
         8e:d3:d0:ee:1b:36:91:02:ac:b5:bc:d9:7c:d7:af:c6:48:f3:
         fd:d5:31:80:dc:68:e6:8e:55:45:a8:54:6e:02:41:92:d5:6d:
         ec:3b:b2:52:db:65:4b:6b:3a:63:49:8b:61:d9:10:74:b7:24:
         19:5b:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:57 2026 by rpki-client