Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          roSGNyAs9bwtDRZX54gMQY8AbykHuUIt2NTjbJmWqlw=
Subject key identifier:   9C:57:84:D2:33:E0:94:11:12:40:B3:FB:CB:B7:7C:9E:4D:BF:5C:99
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       019E88DA8F97E808B4B671CAF44CA8EE1899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          1001
Signing time:             Tue 02 Jun 2026 15:01:25 +0000
Manifest this update:     Tue 02 Jun 2026 15:01:25 +0000
Manifest next update:     Wed 03 Jun 2026 15:01:25 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: 8tE1XoXALCHY82O8b8qmwszNbGs.roa (hash: Wenx4p8ARt+i0JB3aRNXys0FukN+g6qNblR6qJZ7KAY=)
                          4: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: PRl542vKWzERjZy8INPb-TgkXr4.roa (hash: EnUZ2TcojekWId1tvYvvKcumXfp94C7iBeo+v/ZBk5c=)
                          8: alg23em52u81qKf3TWMm9rQtp00.crl (hash: YocrRx4bppdz4/VzgoG4pax6+TMr8iwTnNqz3cFFsok=)
                          9: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          10: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          11: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
                          12: pnFO1a6gizeUc-Mp5yF3aD9GKrY.roa (hash: 12+yB/uNotyYBuazoRPVxuRnI9x9XM3niLtRN4n27c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:da:8f:97:e8:08:b4:b6:71:ca:f4:4c:a8:ee:18:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Jun  2 15:01:25 2026 GMT
            Not After : Jun  3 15:01:25 2026 GMT
        Subject: CN=9c5784d233e094111240b3fbcbb77c9e4dbf5c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a6:22:72:88:c4:11:0a:cc:a1:40:9d:0d:2f:
                    29:5f:04:76:9f:c1:87:a4:d2:0a:b3:fa:d2:87:7d:
                    4b:1f:f7:9e:b0:63:e6:74:8d:47:2d:62:70:4e:60:
                    58:9c:57:f3:93:61:24:b9:8b:82:9e:4a:87:22:7e:
                    40:96:ba:18:f7:b2:d0:dc:74:03:5e:ae:b2:c8:f5:
                    f0:a1:f2:29:9b:20:bd:d6:c7:5b:2d:e0:fc:d2:fb:
                    65:1b:bf:c5:09:b5:80:31:eb:1c:42:7d:6a:d2:a1:
                    04:ce:2c:e5:99:28:ec:98:b4:0e:0e:1b:3b:4b:c3:
                    bf:bc:f4:5e:15:d0:eb:99:89:9c:d9:b3:c3:0a:3e:
                    96:47:63:a7:6c:76:28:f5:f0:13:a8:d8:61:6b:3b:
                    81:e0:2d:ac:6a:58:0a:ad:ca:17:0e:5e:32:02:67:
                    d5:51:46:0b:f4:a6:63:1b:19:56:44:16:f6:37:b7:
                    4c:59:84:c3:bc:85:c2:f3:01:91:5b:ff:93:14:85:
                    f7:59:36:7b:62:72:03:0a:42:74:f1:49:46:a5:0f:
                    2b:e7:d5:a7:d0:5e:b8:eb:cf:0d:e8:0e:cb:fd:ed:
                    62:84:2c:fd:e1:de:09:9a:7d:e8:5d:70:dc:28:a4:
                    eb:ad:c1:59:69:40:20:e4:29:52:a0:b9:49:c5:40:
                    cf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:57:84:D2:33:E0:94:11:12:40:B3:FB:CB:B7:7C:9E:4D:BF:5C:99
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:82:64:e4:6f:ad:75:a8:a0:14:f5:26:78:09:a7:aa:36:45:
         5a:b8:d5:0b:62:69:48:31:1c:6d:92:61:26:ab:71:5a:e5:87:
         77:ff:f0:8f:ab:e3:7c:a6:1f:da:f6:3d:d8:eb:46:bd:be:c1:
         dd:d4:dc:f1:62:0d:6a:e1:f7:92:de:1c:02:88:29:d2:a4:db:
         3f:10:6c:62:64:e6:29:01:1b:13:1b:f1:30:c0:1b:14:b1:40:
         61:33:6d:52:fe:e5:71:4b:cb:55:17:da:4b:42:c0:b2:af:69:
         9e:13:9d:35:64:40:64:f3:20:67:85:73:98:11:5e:19:0f:1d:
         6b:48:f2:39:f9:df:c1:25:10:c4:fe:27:04:e2:1c:81:d1:28:
         30:e0:f1:2c:77:97:24:8a:d1:e3:11:d8:95:55:34:64:3d:7f:
         05:34:27:4a:46:0d:f7:16:c0:8d:94:35:a1:0a:ae:ba:2b:e8:
         94:12:2e:63:69:55:5a:b8:a9:93:a6:70:30:c0:4c:9b:0b:82:
         12:c6:98:a5:72:45:4e:39:94:75:4d:26:25:2d:7e:b5:9a:38:
         66:70:5a:86:e9:48:65:7c:8b:9e:bf:9e:af:75:09:d4:a1:b1:
         bc:a6:43:3f:60:70:8b:a0:cd:90:fd:bf:45:16:b5:60:29:3d:
         37:4f:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 01:28:39 2026 by rpki-client