Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File:                     _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier:          0xuX0ZdYkY0wnj6mmAvi21RV9U+bbICQcdAOf0riq8g=
Subject key identifier:   07:88:39:DD:47:AD:1F:D1:66:FA:67:DE:AF:6D:65:15:16:08:16:8B
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer:       /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial:       019EBA349C513398CC471024336952D8C167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number:          1957
Signing time:             Fri 12 Jun 2026 05:01:10 +0000
Manifest this update:     Fri 12 Jun 2026 05:01:10 +0000
Manifest next update:     Sat 13 Jun 2026 05:01:10 +0000
Files and hashes:         1: 6e2vKhHmL-ZebC_h3M0uX9UQPQE.roa (hash: MuJkDaToFHy1onqOvnRia1v4P6X9FnZyEUR50zhW13E=)
                          2: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: +AuJl3lvCKke4vDa/NyizhUkl2hDc7FiuTBu+XJcq5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:34:9c:51:33:98:cc:47:10:24:33:69:52:d8:c1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
        Validity
            Not Before: Jun 12 05:01:10 2026 GMT
            Not After : Jun 13 05:01:10 2026 GMT
        Subject: CN=078839dd47ad1fd166fa67deaf6d65151608168b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9a:aa:f1:1a:39:ce:66:55:91:bd:53:62:e4:
                    30:40:19:8c:b2:be:a8:68:52:12:c9:4f:df:ca:18:
                    4c:8d:c6:dc:08:e5:67:77:3b:fe:a5:9e:3f:56:15:
                    4d:ee:e7:9f:e7:54:7c:7d:34:4c:e0:fc:c6:35:22:
                    d0:3d:c3:d2:bc:1e:8c:cd:a7:1c:a7:ff:17:dd:60:
                    bf:eb:7b:37:ee:0a:f0:dd:7c:c8:05:47:73:c6:92:
                    0c:d9:bc:52:27:4c:97:13:2e:a8:e1:8e:51:04:c2:
                    7c:e3:0f:af:87:60:90:7c:50:4a:4b:e9:78:68:b5:
                    01:91:42:d6:a2:8e:0e:9e:3f:cd:05:38:dd:c9:0a:
                    c6:1c:60:5b:e4:8f:c7:fe:e9:08:9d:16:61:33:37:
                    73:20:ae:57:46:4f:7f:4a:47:3e:5c:d4:54:7c:31:
                    d3:b4:c6:e3:ce:85:20:2c:05:ac:7d:42:d7:96:ce:
                    0c:37:78:4f:c9:d1:78:79:51:a5:fd:00:7f:22:31:
                    7f:8d:64:c0:3c:72:0c:10:00:c1:6d:0d:91:f0:5b:
                    f0:c4:10:6d:ed:67:b9:07:7a:38:1a:9b:33:53:6e:
                    65:35:41:45:d3:a3:d6:bc:75:bb:6d:5a:3f:66:4d:
                    73:b1:d5:73:49:e6:a6:70:f4:60:13:29:92:cb:ac:
                    4d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:88:39:DD:47:AD:1F:D1:66:FA:67:DE:AF:6D:65:15:16:08:16:8B
            X509v3 Authority Key Identifier:
                keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:a1:78:6f:2c:0c:b6:3c:56:06:53:0e:74:ca:c1:03:00:ab:
         e4:28:b5:bb:12:0d:73:4b:7a:77:9d:a7:9c:af:5d:1b:ae:3a:
         38:b5:fd:ed:e5:b1:b2:0f:5d:49:03:05:f2:f1:e0:be:c3:4b:
         4b:72:b1:d3:2d:8e:c6:0b:67:34:4b:fe:1e:7b:cb:bb:34:19:
         d3:16:f6:af:78:c9:f6:81:a9:c9:df:3d:a9:ac:f3:c8:01:ce:
         87:a0:42:04:9d:9f:e5:e9:72:e1:e8:a3:e1:11:9d:00:93:6e:
         f8:b0:da:3a:52:a3:84:66:f6:21:cf:f4:25:23:48:e2:85:ac:
         a9:9d:18:e6:88:bf:5f:fd:ba:80:a7:ef:10:50:46:a0:f5:54:
         15:e2:f2:c3:6a:c5:a2:5b:05:9e:5f:9d:bd:8e:76:c0:86:32:
         ff:76:55:fa:22:58:39:07:08:b5:35:12:ce:6e:47:07:e3:59:
         18:27:dc:1f:22:8a:c3:20:30:21:5d:97:df:d5:4d:95:12:42:
         0c:d6:90:de:8f:51:af:de:7c:61:5a:56:45:be:2d:c5:6f:1a:
         13:82:68:32:87:ad:2d:c2:64:0b:75:d0:b8:54:b3:ea:99:5b:
         d6:cb:d9:df:00:dd:49:57:5c:21:18:9d:3c:52:85:64:2f:a3:
         93:56:ff:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:23:51 2026 by rpki-client