Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File:                     iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier:          g1mqQdWby/zyGKYuA2VEwupqp6nZ++FZgSKPq69nxtQ=
Subject key identifier:   7D:6C:4D:56:25:7D:A4:ED:F9:CF:C2:99:2F:9C:68:76:46:78:39:C7
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer:       /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial:       019EB6FC4D9A54D3E7372B000F60A00989D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 14:00:48 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:48 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:48 +0000
Files and hashes:         1: 33ZsgU5AHkIb_3u_7p6IlSFFgCg.roa (hash: baStD7TfXhuGuW8n2xQfJJOjFkibkZZVuX/gIDwnSdY=)
                          2: IaXoeRFo8oZIZuTY3duOe59BUCc.roa (hash: 8fZ9vrPYI8jxQ4Q3pQ1/ew70xq1NmBM7Qvx8mbUZu5w=)
                          3: RPt5k7y-VAMu34YaCIIef-nOQII.roa (hash: bOuBKk/Rho1r5yGSQObXjtTLuWRCdzlQHlOjUnu9/wE=)
                          4: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: F7W9NkQqTYPFhbsEQ5no+8WXDOPpcU38KxMA7zyEgdE=)
                          5: lpRiSpVU7WkVK-wBgfs_oAGVrH4.roa (hash: MQZ0Y/f4J2tN35URQbJyIVwQHuBTWdjyvB5VP1KRnL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:4d:9a:54:d3:e7:37:2b:00:0f:60:a0:09:89:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
        Validity
            Not Before: Jun 11 14:00:48 2026 GMT
            Not After : Jun 12 14:00:48 2026 GMT
        Subject: CN=7d6c4d56257da4edf9cfc2992f9c6876467839c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:5e:0c:9e:74:16:84:b2:98:63:d6:d5:90:
                    c9:b9:7b:41:ff:d8:eb:e9:ff:a7:d0:a0:6c:da:e5:
                    cd:bc:de:34:31:c2:92:47:a8:36:79:cc:fb:ad:0b:
                    fa:01:73:16:f6:a0:bd:d3:84:b9:2e:e9:58:a6:4a:
                    5e:d5:ad:55:51:fe:a1:4f:cb:81:aa:b3:63:b9:3b:
                    f3:54:12:94:c1:26:14:88:6d:d6:09:2a:c3:4f:2f:
                    0e:c3:bc:b6:78:6e:54:5e:af:d1:e9:57:74:9c:b0:
                    f7:06:79:93:df:73:af:1b:3e:fe:68:df:f8:0b:bd:
                    b4:35:2f:99:4c:87:87:d0:ad:fb:77:f5:55:49:3f:
                    3e:d4:d2:1f:01:8c:8f:34:d3:d2:10:df:99:a8:96:
                    75:1f:fb:ca:e0:b0:3a:ca:4a:a6:70:3f:84:fe:08:
                    0d:41:d9:0a:12:1a:fb:65:80:d1:fa:68:8b:0b:9c:
                    c2:a5:2e:06:ed:2d:47:4d:b1:9b:03:2b:c8:d0:b4:
                    5e:90:90:64:0b:95:e6:57:c5:43:d0:f0:50:4a:29:
                    bc:5f:74:f4:3d:55:74:81:38:67:21:f6:58:6b:c5:
                    bb:c6:cc:76:08:13:2e:07:cd:dc:c3:ad:38:ca:1d:
                    85:fc:f2:ea:e0:2b:cd:53:42:83:87:60:4e:4d:a6:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6C:4D:56:25:7D:A4:ED:F9:CF:C2:99:2F:9C:68:76:46:78:39:C7
            X509v3 Authority Key Identifier:
                keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:d3:6a:54:cf:5b:46:4a:45:89:5a:b3:90:8b:25:51:09:
         8d:62:82:5d:e7:ae:e7:6e:26:30:bb:ab:54:2d:f7:c8:30:44:
         96:1d:89:bb:f4:60:fc:1a:cd:95:f8:4d:b2:2c:fd:9f:b0:7c:
         a3:ce:d7:d0:43:ec:3c:13:0f:b4:87:50:d4:7c:71:4d:ff:47:
         b8:4c:8b:a1:61:8a:93:c3:eb:27:1f:ed:02:4e:89:4e:62:da:
         ea:e5:ad:69:2e:8c:a7:67:de:c3:0a:f7:72:5c:bf:8c:58:3c:
         b8:73:e2:15:b6:f5:5e:95:ad:06:9c:89:9c:2a:fd:7d:31:e7:
         4d:76:0e:c3:65:07:da:be:3f:de:41:bd:95:03:c5:b0:ac:89:
         ce:4a:75:f3:23:a5:59:66:dd:b8:4f:66:9c:5d:3a:9a:57:72:
         3f:eb:7e:53:1f:a0:72:97:b3:ac:b8:4f:84:3c:ee:97:d5:2f:
         8e:e0:c3:b8:5f:d4:b9:9d:e0:e1:ac:7c:5f:e4:22:14:8c:39:
         37:a5:f4:6a:48:74:17:a6:80:59:79:0a:18:81:b0:5e:05:97:
         9b:31:b1:5d:1c:96:4d:5d:ff:a4:76:b0:22:cd:09:db:13:8b:
         f1:cd:86:af:5f:9f:a1:48:86:c2:a9:9a:ac:9d:63:5d:95:d8:
         6d:1d:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:56 2026 by rpki-client