Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
File:                     86yMfjK693i4xFGi0kzGgZaWS_w.mft (raw, json)
Hash identifier:          y/hnOQxbRJviUeuSZ+JQFFga7MCv7u5jTzhJUWfPLsM=
Subject key identifier:   BE:C4:8D:DA:2E:30:99:61:33:CB:D8:C9:15:D9:4A:A7:0A:45:28:BB
Authority key identifier: F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC
Certificate issuer:       /CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
Certificate serial:       019F129C8E13223996A648A1078EC81BD803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 09:01:17 +0000
Manifest this update:     Mon 29 Jun 2026 09:01:17 +0000
Manifest next update:     Tue 30 Jun 2026 09:01:17 +0000
Files and hashes:         1: 86yMfjK693i4xFGi0kzGgZaWS_w.crl (hash: Xgp/EnEHz72XNUVOOjEyNkXjiyHQ+ubSUk/SpWJrRdo=)
                          2: A1svWquksBLsw1tkAPvMH2GC1KE.asa (hash: 4sQBLnDGVPqeYFwcrtC8bPxXhKO1F6JM2AclKYKY30E=)
                          3: cdYFH7FndPkk9XFjLmZWMdC-X34.roa (hash: X+oP6qr3yuDKLXewVnLvgNrAI77qSCbRkzjQ0jlv6zQ=)
                          4: sL_kO6glXhgKCKzZJakKCk1w7pw.roa (hash: QnUXfnVCoxqWyTYKHVanM+qXpxh9bvdVjRpLXx6NLxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:8e:13:22:39:96:a6:48:a1:07:8e:c8:1b:d8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ac8c7e32baf778b8c451a2d24cc68196964bfc
        Validity
            Not Before: Jun 29 09:01:17 2026 GMT
            Not After : Jun 30 09:01:17 2026 GMT
        Subject: CN=bec48dda2e30996133cbd8c915d94aa70a4528bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:b7:02:ae:e0:b0:82:55:ae:cd:85:fd:ea:
                    0c:93:43:5d:fb:05:ac:d8:f4:2f:76:8a:9e:5a:9c:
                    bd:5d:cc:22:38:3b:ef:64:d0:7c:dd:62:ca:c7:9c:
                    62:e9:57:9f:04:23:77:35:62:2a:9f:c1:3c:19:04:
                    6b:9c:dc:24:42:cf:71:8f:3f:6b:71:bf:e1:c4:e4:
                    ae:5d:8a:7e:a8:6b:e5:1b:49:30:e1:b1:58:02:d6:
                    f3:17:28:d0:fa:c2:46:14:ca:94:ff:50:9b:78:f7:
                    ee:9f:5e:91:81:6e:1a:b8:07:eb:1f:77:ac:82:bb:
                    35:de:5d:fd:94:d6:3a:32:61:c2:ea:95:d3:36:e4:
                    7e:b2:ec:4f:2f:5c:f7:a4:e6:69:eb:1c:df:39:be:
                    5c:d3:bd:6e:cf:fd:a6:ba:cc:23:b6:9b:9e:35:4d:
                    5d:62:ca:2b:f5:10:52:0b:fe:8c:35:ac:a4:67:d9:
                    27:f5:03:fc:96:10:e6:8f:e0:17:56:3d:c6:06:a4:
                    1d:2d:7e:41:a6:9a:d4:96:cc:05:97:5b:d4:22:4b:
                    d7:ee:6e:79:21:1d:2b:b2:32:14:b6:06:58:10:a7:
                    26:be:82:4c:00:c4:3b:ac:85:4d:a2:60:f0:50:ad:
                    e1:0a:a2:77:11:4b:6b:80:47:d3:92:da:0d:fa:ea:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C4:8D:DA:2E:30:99:61:33:CB:D8:C9:15:D9:4A:A7:0A:45:28:BB
            X509v3 Authority Key Identifier:
                keyid:F3:AC:8C:7E:32:BA:F7:78:B8:C4:51:A2:D2:4C:C6:81:96:96:4B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86yMfjK693i4xFGi0kzGgZaWS_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5c5859-75c0-4345-bd29-45c568f8a27c/1/86yMfjK693i4xFGi0kzGgZaWS_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:61:fb:b1:e1:b7:47:c9:2e:dd:36:b2:4b:38:98:05:8c:5f:
         30:57:6a:16:78:35:04:4d:16:2d:b6:a3:01:1b:c2:22:41:94:
         de:58:0c:fe:80:61:5e:68:63:78:ba:55:99:68:4f:7c:af:0f:
         3e:47:d4:5f:2e:ef:a4:5a:54:0b:a2:a5:06:d6:d7:02:92:39:
         86:74:17:d0:1f:03:b6:e1:1a:19:9a:7e:76:1c:be:40:9c:ce:
         98:10:ae:83:3e:35:c5:3e:89:70:b7:24:e2:99:4d:8a:01:56:
         16:cc:dd:b6:70:5e:55:7e:8b:b3:14:a2:fb:07:1a:5a:ce:19:
         5b:c2:dd:14:cb:36:f2:2e:cf:09:c9:e2:02:0c:a9:52:28:74:
         27:8c:4c:17:06:b6:89:cc:dc:44:e1:30:59:ee:26:71:2e:d2:
         d0:7a:d2:19:4d:93:fa:83:77:f6:19:f9:2e:a3:cf:b8:fd:07:
         8a:6d:ce:9b:d5:5c:4c:57:07:d8:25:96:00:6c:4f:23:f7:74:
         e7:ea:61:2b:cc:b6:fc:07:f9:d6:53:45:8f:e7:ac:30:4f:de:
         9b:65:ff:75:60:31:ed:58:79:a4:14:6a:c9:65:f9:11:4c:cc:
         f6:26:7b:ac:05:55:5d:d7:bb:fb:f3:02:5a:d1:0e:59:6f:d1:
         7d:6e:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:45 2026 by rpki-client