Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File:                     dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier:          dlS4NwO5E2nAMZprpgvbiB49H3gGmMGqeMjt8fY1Bvs=
Subject key identifier:   B9:96:85:53:FB:6A:E1:81:FD:53:3F:8C:A2:66:12:66:DC:3B:DC:99
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer:       /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial:       019E9DAA7A91585185403FDEEA6A23089AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number:          1952
Signing time:             Sat 06 Jun 2026 16:00:55 +0000
Manifest this update:     Sat 06 Jun 2026 16:00:55 +0000
Manifest next update:     Sun 07 Jun 2026 16:00:55 +0000
Files and hashes:         1: BJ7HazHaGccfvxTQc_w6SKWhZEA.roa (hash: Pl+4ZXeFDCtsyZiimkR12UecWLcE8XYpnlEtA132eQ4=)
                          2: OkIPJfQ3ucjtNqmllyrXBPtOzcY.roa (hash: +8DQv1DEa2PzagZPd8ytxiVCfNd5z5SM1U3gJ24YFyI=)
                          3: ZadCjVxR3AIOm7k0nj6w8KvV6h0.roa (hash: RXuAVNn7DereOcaWIChil7CPM5HE7+AP2XZkUq1hg+s=)
                          4: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: rzminxAiXvhNoesUGIngzKe4waVcR8WoYKH5Gqg5bWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9d:aa:7a:91:58:51:85:40:3f:de:ea:6a:23:08:9a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
        Validity
            Not Before: Jun  6 16:00:55 2026 GMT
            Not After : Jun  7 16:00:55 2026 GMT
        Subject: CN=b9968553fb6ae181fd533f8ca2661266dc3bdc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:f3:42:f2:35:51:f2:d7:03:1e:34:35:4a:
                    c5:47:23:98:21:3f:8c:a6:7a:47:86:3d:66:62:01:
                    7f:66:82:18:32:f2:fa:a5:ae:d0:08:b0:1c:a5:85:
                    e1:a4:be:e9:17:5c:01:dc:89:84:b2:4e:1f:b2:ce:
                    bc:a8:26:50:d9:53:ce:89:ea:30:4f:bb:6f:2a:e5:
                    62:a1:ad:23:8b:b7:b6:f1:4d:87:12:d2:83:c4:17:
                    b0:b3:f9:dc:66:e8:39:0b:10:03:9c:02:a6:c4:8b:
                    c8:d8:91:d6:28:c2:62:0a:00:5b:62:af:fb:5e:e6:
                    00:5e:75:28:6c:01:58:9c:82:fa:ce:5c:88:48:9b:
                    0e:eb:a2:d1:50:ba:f2:e7:f8:cf:dc:ac:cd:a6:19:
                    04:4a:ab:18:e3:be:ef:4b:00:f5:68:d1:60:b6:fb:
                    13:fa:28:1a:81:26:58:45:c1:3a:3d:0e:1a:17:10:
                    12:78:36:35:fc:2e:b1:84:8e:d2:a5:f3:08:c2:8d:
                    b2:dc:38:b4:2b:84:ba:5a:31:ad:b2:c7:ab:3f:de:
                    a6:8d:1e:61:32:71:02:4e:94:07:23:92:26:13:9d:
                    6a:45:7b:23:93:db:3a:71:23:8d:1f:38:b5:ce:71:
                    aa:a1:5e:79:aa:13:cf:88:b3:c6:0d:2e:88:e6:a2:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:96:85:53:FB:6A:E1:81:FD:53:3F:8C:A2:66:12:66:DC:3B:DC:99
            X509v3 Authority Key Identifier:
                keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ab:be:79:a2:b3:2f:cf:2e:2f:5c:8a:62:f8:56:95:8c:84:
         95:6a:a6:33:74:98:29:d4:16:2b:98:75:3d:cd:b7:ed:65:fe:
         68:70:1c:b0:c4:02:f6:fe:0e:a0:c7:8b:a7:c6:ac:9d:da:1e:
         35:02:03:03:87:8d:3d:0f:31:82:a9:d6:de:cc:e3:b0:81:e1:
         6b:8b:dd:d8:63:14:fb:8b:76:08:ca:0e:c2:2c:68:be:f2:c6:
         65:a0:8f:ee:a8:78:e3:89:b7:ce:04:73:7a:b7:63:e3:31:e8:
         cc:df:5e:77:29:10:97:9d:57:30:ad:48:18:43:a0:d4:8e:c4:
         88:2a:5e:24:8d:2e:6c:47:e3:d4:54:c3:4c:70:ef:1a:47:de:
         41:89:05:dc:8f:0b:dc:4a:16:c6:8e:54:6c:95:fd:ca:f9:4d:
         ad:d6:3f:71:e4:7f:b3:f0:98:c5:24:35:92:e4:29:9b:1b:80:
         8f:10:83:cc:04:3e:2a:91:15:0f:59:bc:28:fd:e1:18:c1:f4:
         f8:91:70:c8:7d:04:91:73:1d:4c:1a:38:ce:5c:5d:42:f3:09:
         1c:84:80:34:f8:9d:fd:12:36:ff:66:05:74:83:6c:31:d0:c9:
         af:7c:42:a8:07:d2:b9:f0:f0:42:fa:2f:e1:12:2d:a8:e6:a4:
         49:24:dc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 20:36:33 2026 by rpki-client