Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File:                     87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier:          WtVPtKwuBalmQzP1xzOEBNhnre0XbIZmlbozDBt0UTA=
Subject key identifier:   2A:93:57:81:21:83:F1:65:AC:FD:57:C4:28:EB:CB:1F:A5:B0:28:3E
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer:       /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial:       019F11F83F5B5359319EBCBBAEEFA3859848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number:          04F1
Signing time:             Mon 29 Jun 2026 06:01:49 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:49 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:49 +0000
Files and hashes:         1: 3GSfCOp1qnomvR3CmYO9EsBhC7o.asa (hash: xfoU+Ips6oEaOKv6Fib2vuh0GAZn1Zkx/WZm05j9NRo=)
                          2: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: iOhLEcL58XQzTL8SlbVFUJDArJj5mTFTqokB31y5NSE=)
                          3: kvsR5vGqCUlad7hcwSexC9HOmQU.roa (hash: BQWcBL0pNsLmhZ/6jOKzXhoMqdBErbR1kzhV9E5bnP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f8:3f:5b:53:59:31:9e:bc:bb:ae:ef:a3:85:98:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
        Validity
            Not Before: Jun 29 06:01:49 2026 GMT
            Not After : Jun 30 06:01:49 2026 GMT
        Subject: CN=2a9357812183f165acfd57c428ebcb1fa5b0283e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c3:80:89:77:28:7d:b2:60:0f:8c:55:96:9d:
                    fe:94:ff:38:ee:2e:26:82:71:9a:16:f0:ae:02:4c:
                    50:69:2b:d8:3b:c6:ce:9e:1a:ea:18:39:33:94:30:
                    1b:3d:60:ff:b2:05:82:5a:00:4d:8d:f7:53:a0:74:
                    83:b6:45:13:61:bc:d4:be:7a:fb:60:53:86:fc:cd:
                    f8:8f:af:f6:05:39:ac:80:1b:99:c3:5d:32:80:54:
                    18:41:1d:df:46:ed:8c:d2:64:6c:39:12:7b:24:5e:
                    8c:98:e6:d3:f8:c3:10:79:03:03:56:78:5b:a3:8b:
                    a7:d7:c4:f3:97:72:83:9f:15:58:df:f9:8d:d6:bf:
                    b3:b1:f5:e7:a1:82:1f:a7:ec:f2:35:c6:7e:f6:d2:
                    14:52:a2:79:a0:40:34:f3:37:b3:9c:b5:98:31:d5:
                    dd:5e:cf:a2:f8:b1:e2:aa:d2:a2:e5:c6:ce:aa:15:
                    9a:23:2f:ac:c4:0d:60:51:d5:71:61:89:e1:e6:fd:
                    79:b5:06:9a:bc:f3:f9:7b:87:3f:70:80:3e:6d:62:
                    1b:54:aa:a5:ae:46:1c:68:90:3e:08:ec:5d:15:ae:
                    98:a5:26:74:c1:db:6f:ed:48:6a:a5:12:36:c3:a6:
                    64:9d:8c:4d:bd:8a:ec:e4:a8:35:e5:25:00:50:2b:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:93:57:81:21:83:F1:65:AC:FD:57:C4:28:EB:CB:1F:A5:B0:28:3E
            X509v3 Authority Key Identifier:
                keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:4a:18:14:37:13:62:bc:47:65:95:14:32:f5:74:83:73:82:
         0e:42:9b:e4:58:e2:d0:60:04:1b:e7:70:3a:ad:f2:9e:b2:4b:
         2a:a7:4d:94:8d:1a:3f:55:2e:db:59:64:3d:43:a0:a7:ce:27:
         65:19:97:2a:e6:03:a3:b5:14:90:97:8e:15:92:9b:6f:b4:1a:
         99:70:7d:7b:fa:b9:81:44:eb:eb:80:c1:52:0b:ac:d0:7b:a5:
         b0:a6:fa:25:83:0c:3b:35:b9:a4:10:5f:a4:40:12:5c:62:8b:
         53:a9:3c:40:8b:a7:36:bd:a3:c9:db:20:6d:26:1c:de:fc:f8:
         aa:1b:a6:d0:7b:83:94:b5:06:b1:75:d7:8a:8a:e6:a7:f6:99:
         90:fa:e7:ab:5d:4e:6b:40:cd:0a:83:4f:a6:22:4a:4e:50:fb:
         76:59:01:a0:03:b3:be:d8:02:cd:18:aa:db:1e:df:92:97:4c:
         12:98:e2:85:33:11:93:a0:87:f8:fb:e8:e2:a4:f5:d6:3d:cf:
         e0:b0:09:81:c9:7b:69:fc:b8:7e:36:c1:58:ed:ac:4b:a5:6b:
         4a:6f:c7:f8:c2:85:2d:47:f7:6e:be:c8:52:e3:ff:c8:9c:4d:
         c5:4c:22:b9:e5:fb:07:0a:ee:1d:fe:87:81:8f:a0:8f:e1:0c:
         28:d1:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:45 2026 by rpki-client