Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File:                     r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier:          MiaPcfm9qxo6uLnqQkLpN/UHEGIdSHEMeeolSkU05AQ=
Subject key identifier:   7E:BC:E2:E8:13:12:E2:9E:18:10:79:33:05:9C:11:65:CE:60:50:8C
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer:       /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial:       019EB845688F9FE68504903971FF83AE0E8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number:          1952
Signing time:             Thu 11 Jun 2026 20:00:16 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:16 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:16 +0000
Files and hashes:         1: 0WpGctn3iHwcCfz1HyZ1-r-vlc8.roa (hash: FHZ/JIyqvLJTAVxRV45KR0WJzUtCxqF4aecsFoB2jfo=)
                          2: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: Egfv7fmojKoooUads+JI43bo/9C4Yx5XLcQYM7i8qw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:68:8f:9f:e6:85:04:90:39:71:ff:83:ae:0e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
        Validity
            Not Before: Jun 11 20:00:16 2026 GMT
            Not After : Jun 12 20:00:16 2026 GMT
        Subject: CN=7ebce2e81312e29e18107933059c1165ce60508c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:b3:0d:7a:0b:1d:2f:45:b5:69:34:6c:e9:
                    71:66:9f:95:45:da:32:e8:f1:9b:88:08:db:fd:5c:
                    88:51:bd:7b:87:40:a4:3b:10:cd:ec:59:c0:e8:f6:
                    67:e5:b4:d0:ba:2e:0b:6a:1b:5f:0e:0e:90:ff:dd:
                    13:74:d0:00:16:e0:f1:99:c6:a4:8d:ea:ba:09:4d:
                    32:bc:50:7c:cd:f1:66:4a:de:c8:9c:03:5d:81:f9:
                    02:1d:ad:a2:8b:f4:2e:0a:37:d7:ac:5d:5e:a7:4d:
                    25:a8:e9:65:7a:de:61:3e:10:6e:7e:f1:a4:4c:f3:
                    de:9e:70:ec:b3:2f:6a:4c:13:3e:e4:10:be:00:88:
                    8e:d7:98:d6:e6:ce:57:6d:34:8b:76:ed:44:a8:00:
                    e2:e8:da:b7:c8:42:58:d4:bc:bf:d6:48:91:53:09:
                    89:7d:9e:67:d2:4a:37:88:39:2b:d8:a0:ce:35:42:
                    c1:56:48:29:2d:23:73:a0:8b:bf:38:53:ae:e8:19:
                    8c:80:27:fd:34:61:a0:b6:5a:f9:a5:68:87:9f:ba:
                    c7:53:8a:85:b9:74:2e:e9:d0:17:a6:08:2c:70:39:
                    89:ac:57:ce:0d:0d:b5:b2:df:05:82:43:5b:e9:15:
                    e6:0c:15:ca:36:8d:59:fb:7c:e5:f5:6e:b2:06:ae:
                    4d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BC:E2:E8:13:12:E2:9E:18:10:79:33:05:9C:11:65:CE:60:50:8C
            X509v3 Authority Key Identifier:
                keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:d8:3d:ad:ac:3b:b1:90:d0:38:5e:a1:8c:f9:c8:0e:43:
         13:d8:8a:77:0d:b8:33:7b:e3:6f:65:b4:c0:94:15:2a:7d:e2:
         99:74:51:fd:d0:eb:e6:21:1b:02:9b:02:da:a6:58:ea:bb:eb:
         ff:34:80:e4:ce:24:bd:06:94:e4:ad:a3:db:0b:25:b2:04:e3:
         ef:0d:15:2b:35:fc:d8:ae:9d:a5:6b:1a:11:1b:ab:94:42:78:
         75:7d:1b:45:bd:57:ea:be:3e:64:77:89:eb:2a:c4:e0:98:1d:
         22:86:3c:10:b2:3c:7d:fc:85:ba:41:e7:d9:51:a7:38:d9:e6:
         9a:d2:a0:d9:ef:1c:4a:97:e9:4f:e0:8e:42:21:44:3f:19:e7:
         41:ea:36:e7:9a:af:03:28:15:79:4d:43:57:1a:cc:71:c6:12:
         05:ad:be:0f:35:41:bf:49:e0:bf:9a:6e:ad:d9:73:85:88:6e:
         09:0c:50:7b:f9:0c:46:5d:d7:7d:1f:cc:75:b5:80:e8:33:09:
         21:c8:ed:1c:bd:9e:59:5e:21:a1:3e:71:47:fc:b5:8c:6c:c9:
         f1:6c:23:e6:2a:ca:39:4f:1d:e3:c6:86:74:7a:e6:ce:6f:73:
         01:ff:b6:e5:fa:fe:6d:2b:e0:5a:a1:d3:aa:a7:b7:34:4e:fb:
         d8:fa:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:00:18 2026 by rpki-client