Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          ALzZjcZWXvjboo4HGOTmElQoOwKD506zMd7NtPE/AUc=
Subject key identifier:   0C:9C:BC:23:44:B0:FA:2D:F0:19:76:05:05:D8:63:A7:DB:E3:A1:FE
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       019EB8B413C96C5EB396B3EEB873460F2E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          1992
Signing time:             Thu 11 Jun 2026 22:01:09 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:09 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:09 +0000
Files and hashes:         1: AxrRs_0G1xHNDlwe2LgLLni1Tms.roa (hash: S3Hp+QgVYkCIxPs9hAjo43fJN2kqAExvs7uW28uJEac=)
                          2: IEHhAsm6Xmdej2oCP8axb9PFCII.roa (hash: HMNMX3CTbZjbh0WFm8CFNKQuDtEwRiZo1B5DzDBXjYE=)
                          3: QH92-KbfL63ctZl3QrX0nIExypM.roa (hash: aa3zpeOKy0KyaOR31LacRMZS9fLi4Tzjtg5JgfAnbwk=)
                          4: WGAML1YjI5zAxq5PEqT3x_V8_tY.roa (hash: 8+17DXSjFxcEUdFqGfGDD9sHzlrlToFKTDXRvABhK4A=)
                          5: bEcjbcp-y9JIahihmtoi9EK0TiQ.roa (hash: ASxCyz+NX/m3cMBGmbT/xXqWc8knXBuHgU1BoVV8rW4=)
                          6: iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa (hash: kcjtUwCY22q3aM/qdCSkN7N8FHGs5xCi5hpXiJukyWQ=)
                          7: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: fQq2G2xGqHD96anMLnytdbh7KnbLrjhzDzF8x4rHxWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:13:c9:6c:5e:b3:96:b3:ee:b8:73:46:0f:2e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Jun 11 22:01:09 2026 GMT
            Not After : Jun 12 22:01:09 2026 GMT
        Subject: CN=0c9cbc2344b0fa2df019760505d863a7dbe3a1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:c1:77:53:13:78:81:d6:ed:21:bb:fa:c9:
                    0b:79:b5:35:1c:74:ef:5f:34:5f:d9:d3:6b:c3:37:
                    87:d5:52:64:e2:79:d7:0a:1d:aa:f2:5f:18:b9:c1:
                    ba:28:e5:3a:4d:34:a6:38:3e:21:11:1c:7f:6b:b5:
                    39:74:1a:fa:f0:9f:15:54:af:fd:e0:5a:76:b1:8f:
                    d4:0f:b7:66:32:d4:13:6b:1a:40:20:3a:08:a9:3f:
                    10:89:88:50:0d:21:aa:ea:39:b8:50:c3:3e:0a:ff:
                    a0:30:ff:ba:b7:71:c3:f2:cc:c8:c4:89:bb:ac:d5:
                    52:5f:3c:27:7c:30:5d:fe:f6:43:fd:80:85:1c:3f:
                    0f:13:bc:4c:63:f9:3a:67:78:92:23:3c:87:12:f9:
                    36:8a:0e:9a:67:bf:25:f4:7d:25:41:9a:ee:b7:4f:
                    bf:9e:7e:f9:c5:b4:61:4c:6f:cf:c9:25:14:d2:f9:
                    58:d5:be:ce:2f:d3:68:c4:8d:1d:21:d2:03:7c:0a:
                    0f:b9:58:ce:ad:de:d4:3a:86:fe:a4:4c:37:0f:9a:
                    44:28:0b:43:fb:d1:d9:eb:41:ee:98:7a:d1:62:41:
                    c6:00:23:05:7a:31:95:99:29:88:26:3f:1f:be:fd:
                    5a:3b:34:62:d9:02:82:9a:9c:23:d6:bc:04:f9:7a:
                    06:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9C:BC:23:44:B0:FA:2D:F0:19:76:05:05:D8:63:A7:DB:E3:A1:FE
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:57:9b:ca:b7:38:0c:8c:11:17:1a:76:a3:ce:79:d6:70:0a:
         12:7b:a0:9b:65:41:1c:0c:7d:a1:27:1f:a5:2b:de:a2:7a:11:
         84:d3:33:ce:a9:76:e2:01:06:e0:cf:8c:d2:3c:8d:68:70:ce:
         8a:45:8b:b9:01:89:0b:11:57:75:06:01:58:c3:77:7b:aa:ca:
         cf:c9:d2:d8:05:2f:92:cd:4a:a0:76:ae:76:f2:b5:f8:59:fb:
         46:1b:51:9b:68:ed:49:1f:91:e2:5a:c0:bf:4f:db:2d:c0:29:
         14:79:ea:68:67:59:62:37:52:f1:fa:40:18:3b:9f:5a:68:2e:
         ac:87:70:94:5c:34:31:7b:6e:7c:9b:26:a7:14:51:50:b5:ea:
         2c:ad:f0:bd:fc:48:ce:ae:c2:a5:51:c6:af:69:9e:82:01:64:
         46:ce:d9:71:55:cf:bb:ae:38:5a:9c:4b:bb:b8:9e:cf:79:bc:
         05:60:8c:94:13:3f:96:51:b4:df:77:6b:94:ed:46:17:04:d5:
         ce:07:9f:4f:ec:8a:68:04:e3:70:a5:5d:6f:31:ee:54:e8:24:
         4d:b7:df:68:a5:de:28:4b:f3:72:be:0e:75:a3:d7:19:13:2a:
         4b:f5:0f:e6:9d:de:d7:28:dd:2c:36:71:99:e3:46:09:e2:d5:
         e2:b9:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:29:52 2026 by rpki-client