Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          U3ATenE2u2DwGlNBOSBIjvxa64E8jX1/KGDpPYxFE0Y=
Subject key identifier:   AA:8A:DA:B8:F3:09:31:95:01:A8:D0:71:CB:15:43:D9:FF:C0:49:99
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       019EB8EACE8C7F20217CDF2011DD67F23ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          0677
Signing time:             Thu 11 Jun 2026 23:00:56 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:56 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:56 +0000
Files and hashes:         1: 2AoCTJhqU5v6MlrbH3hvQy0Uf7Y.roa (hash: G3dIE6sYWPhy161h7oAdaMA3nB4HfJRUXVulVZyCG4Y=)
                          2: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: U9D7m41Q6eAG/SB8mK+OKV8CW5h3FTuQoHaMZyD1BXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:ce:8c:7f:20:21:7c:df:20:11:dd:67:f2:3e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: Jun 11 23:00:56 2026 GMT
            Not After : Jun 12 23:00:56 2026 GMT
        Subject: CN=aa8adab8f309319501a8d071cb1543d9ffc04999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:3f:fe:17:70:62:56:6a:ac:20:6f:de:f0:
                    88:97:ec:69:5d:73:ba:3d:5b:b8:2c:40:fe:48:13:
                    16:ac:b6:16:4c:eb:84:57:8b:b2:af:d9:36:6a:d4:
                    70:38:33:0d:2d:19:57:99:a3:7f:3b:9f:43:5b:49:
                    12:cd:17:0a:ab:d2:93:70:48:35:6e:0c:28:d3:b7:
                    96:98:49:91:a7:aa:be:6d:47:55:49:28:d3:f0:30:
                    33:c0:7c:0b:9d:fb:73:d2:44:f9:26:ca:20:9c:ac:
                    2f:b0:ab:6f:e9:63:99:24:31:56:84:91:45:ba:9f:
                    70:b3:9e:80:51:c0:75:40:9a:c6:f7:9e:cc:36:ba:
                    5b:c5:c9:07:ac:fe:8d:54:9d:b7:2e:0d:30:ec:9e:
                    0d:41:c3:03:01:88:c8:1c:88:63:ad:d2:34:c1:a1:
                    67:b8:69:30:80:c9:96:69:67:fc:01:85:c9:c1:41:
                    79:e1:22:b9:ac:95:39:2d:06:21:39:58:3f:4f:c0:
                    08:fa:a4:ea:2b:85:71:4a:45:ee:33:b5:eb:2f:58:
                    d6:19:ed:2c:24:9c:84:f1:4e:a5:a8:9f:5e:28:eb:
                    64:b7:96:20:c3:23:d3:b2:8d:13:77:ff:34:ed:77:
                    51:83:22:c0:e5:f4:b1:94:58:0b:ff:2a:0f:e9:cd:
                    22:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8A:DA:B8:F3:09:31:95:01:A8:D0:71:CB:15:43:D9:FF:C0:49:99
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2f:73:78:b3:74:a0:24:a5:ce:d8:9c:e3:03:de:a9:7a:67:
         3a:a9:77:4c:62:73:15:2e:46:31:f0:30:e0:36:ff:1c:6c:c8:
         df:2d:1c:3e:fe:6f:7a:1f:ee:13:65:d5:fb:e5:1e:53:80:7c:
         d3:cf:f7:69:a5:ef:6b:91:0d:aa:e5:c3:49:d9:66:aa:24:f4:
         b7:f1:73:60:49:18:66:6d:86:a2:d7:f3:a8:9e:3d:8a:47:bd:
         c0:50:d7:38:e3:36:00:15:13:30:82:ed:fe:f0:63:02:5c:a3:
         be:9e:c5:64:e4:92:cc:71:92:87:5b:99:8e:12:b0:80:39:64:
         d8:5f:ee:53:af:13:7e:cf:2c:20:db:6f:8d:51:00:21:7d:97:
         93:d5:7a:31:7d:44:8c:1d:bf:35:75:9e:91:ca:03:50:4c:78:
         a7:81:ed:0d:fd:b2:f5:6f:97:ba:98:bd:5c:a4:0f:67:47:b7:
         07:0d:13:8e:fc:d3:01:8e:0e:d0:eb:ff:5a:2b:ce:af:5a:50:
         5d:4f:24:9b:f9:ea:71:e5:a4:ef:3e:2c:52:99:22:c2:1d:09:
         eb:67:0e:b4:a8:a5:52:d8:95:60:cc:30:4f:23:69:bd:f6:cb:
         9e:3e:80:2a:a6:39:fa:68:d7:8f:46:db:6b:e2:d2:00:ff:3b:
         0f:13:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:53 2026 by rpki-client