Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File:                     svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier:          UmOFm9nLJDet44LpZZXjPi43Zdd9q8AhZ6mY6TF+ni4=
Subject key identifier:   11:57:50:70:B2:F8:34:43:38:72:74:64:84:94:4C:CC:BB:35:16:3B
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer:       /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial:       019EFBDDBC8740E65380B6C6770C44F15C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number:          1309
Signing time:             Wed 24 Jun 2026 23:01:13 +0000
Manifest this update:     Wed 24 Jun 2026 23:01:13 +0000
Manifest next update:     Thu 25 Jun 2026 23:01:13 +0000
Files and hashes:         1: ObNZb8WcPYnp4vym-GNDnVBbhRc.roa (hash: cB7fQ1+Il9kNcY3mzLGz4gNtT9PoEWbZCafUMp1Ym5Y=)
                          2: WSWSZ5HnExf16ja-7wBmWbN2JQM.roa (hash: N8qjQNMkd309dGRmp5jGiVmond6LS7+l8O8FW5pyrZw=)
                          3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: SXcSAtqmyJtdwebeTS84DRzAu1X3OVZKQwKq5zbiUbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:dd:bc:87:40:e6:53:80:b6:c6:77:0c:44:f1:5c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
        Validity
            Not Before: Jun 24 23:01:13 2026 GMT
            Not After : Jun 25 23:01:13 2026 GMT
        Subject: CN=11575070b2f834433872746484944cccbb35163b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:ae:b5:af:df:32:47:93:b1:56:fa:a1:5e:
                    80:43:f6:a1:22:3c:08:51:fd:40:40:00:e0:7e:fe:
                    c0:fb:73:7b:c4:89:48:24:fa:b6:a6:a0:91:3e:37:
                    56:07:47:f6:5d:02:1b:0e:d9:13:e5:df:b7:f8:e6:
                    c4:ea:cf:fe:15:f4:0b:d4:f7:38:06:ba:01:2e:a3:
                    17:ea:90:ed:32:d5:74:1e:68:87:b4:0c:67:f2:62:
                    82:53:58:5a:61:08:c9:01:34:89:ef:bb:c3:60:c1:
                    02:78:06:19:af:f4:20:a8:74:0a:4c:74:03:25:5f:
                    fd:fc:4f:2e:43:bb:be:6f:d5:00:55:0a:75:b3:e4:
                    e2:bb:6e:58:21:6a:66:c6:3c:c7:dd:f4:25:cc:85:
                    4c:b6:9c:54:b3:3f:91:c6:74:e5:86:85:b7:4f:d2:
                    06:6e:1b:9a:ec:c3:ff:75:b4:6d:d9:ca:2c:57:23:
                    61:15:37:28:28:e5:91:88:60:1a:b6:62:1e:de:b2:
                    b1:05:b9:67:c4:5b:56:aa:96:8d:0f:7f:db:92:2d:
                    c0:e2:4f:56:83:d5:a9:5a:39:54:c2:8b:43:8a:c9:
                    5f:b4:92:51:be:5a:d1:13:22:81:a1:f3:0b:d9:f3:
                    77:d2:67:dc:9b:39:32:b7:17:02:f7:ef:ad:a1:50:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:57:50:70:B2:F8:34:43:38:72:74:64:84:94:4C:CC:BB:35:16:3B
            X509v3 Authority Key Identifier:
                keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7e:db:35:88:2d:ac:63:b7:cb:85:71:ff:21:8e:60:83:34:
         4d:ac:ba:96:62:77:8b:c0:fb:5d:36:b2:db:9c:f4:52:3b:12:
         93:85:f1:3b:49:91:93:d7:c5:df:f0:a5:11:52:b9:ea:91:72:
         f5:c4:d1:5d:42:a5:0b:92:a9:46:03:5f:24:6d:ed:5f:db:a4:
         a8:2f:1e:32:9d:c5:db:70:15:63:5d:e6:0f:ca:d2:17:f7:27:
         f2:b6:01:c4:61:72:2a:2e:6c:f1:b5:b2:d5:92:37:e1:5a:fe:
         31:94:4c:2d:44:db:ab:17:cd:6a:9a:92:3c:c1:6d:79:00:5f:
         1e:71:13:a5:a3:ad:26:8d:54:8e:9d:2f:2e:a1:60:b8:4e:46:
         28:37:70:c9:82:de:51:37:f3:a3:0f:a4:d5:72:f9:9f:ce:d7:
         ee:d6:f4:e9:e3:81:f1:05:1f:48:78:a8:f6:28:53:22:eb:3b:
         5c:bd:c8:14:a0:12:21:87:da:73:ae:ea:0c:7f:52:e3:f6:66:
         4d:02:b6:17:d6:4a:4e:ad:20:c7:8e:ba:c5:22:f8:9f:eb:aa:
         b1:18:9e:d4:74:70:17:1c:10:4c:18:8c:60:ce:52:6a:f6:04:
         e0:b1:01:7d:06:64:3f:eb:d8:2d:1a:1b:e9:bf:e0:5c:10:a4:
         2a:e3:ed:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 07:14:27 2026 by rpki-client