Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File:                     phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier:          4Tv5U0LG8RCSj+WfzfROSpnjQz7QumbHYIn5Kvt2zfk=
Subject key identifier:   33:65:C5:C4:6A:E7:3E:D8:F0:7D:76:57:F2:AE:35:78:85:9C:2D:95
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer:       /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial:       019EB7A09F923FE7A110EC62DE37C6F18B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number:          1678
Signing time:             Thu 11 Jun 2026 17:00:17 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:17 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:17 +0000
Files and hashes:         1: Vd994I8OewATsGGSa4zEfrPZRM0.roa (hash: XSJbo9Wc3kl6cNjQcZjvVqM+NHSEiIeknkFve8lu2PM=)
                          2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: pBHCaiq1xxEGjxY7Lw45+3fM9NsSbdo9GWHd/s3x2rA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:9f:92:3f:e7:a1:10:ec:62:de:37:c6:f1:8b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
        Validity
            Not Before: Jun 11 17:00:17 2026 GMT
            Not After : Jun 12 17:00:17 2026 GMT
        Subject: CN=3365c5c46ae73ed8f07d7657f2ae3578859c2d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:c0:99:ff:69:e4:60:2c:8a:b6:23:7f:b8:
                    3f:c6:b0:24:31:a7:83:40:19:7f:63:75:d7:2f:45:
                    48:d6:8a:6d:f5:4d:b1:f7:a7:02:de:98:75:18:39:
                    ad:31:fb:d5:ee:17:c3:38:81:8f:54:5d:2c:40:77:
                    cb:84:c6:55:36:e5:c1:98:05:44:54:1d:01:b4:fd:
                    14:0d:6c:cf:6c:cd:c0:e7:e4:a9:cd:ea:3d:43:3f:
                    76:74:61:14:cc:82:aa:22:74:16:77:0f:53:cd:0f:
                    b5:41:4a:a3:e8:75:71:fd:db:9b:89:76:34:27:4a:
                    d0:83:73:71:fe:c8:cb:e7:4e:74:b1:14:a5:50:66:
                    5b:cd:44:06:a6:23:98:b6:33:6b:e6:75:c5:87:f1:
                    e8:cb:12:80:2d:38:30:06:19:37:65:9f:ee:9b:2c:
                    97:1f:0b:d0:43:7d:8a:ab:b6:23:d0:5d:69:c8:41:
                    51:4d:16:25:f6:02:9f:bc:4f:db:ac:18:de:89:ff:
                    ce:f3:02:d6:1a:3f:42:d2:05:e0:cf:89:b4:ca:aa:
                    06:ca:19:69:ed:5b:13:c7:c6:4c:53:b5:8c:eb:71:
                    7f:ee:10:a5:61:72:0b:ac:7c:a0:c9:04:75:1a:7a:
                    81:7b:88:4c:f5:c0:df:32:dc:75:14:c1:61:15:04:
                    8f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:65:C5:C4:6A:E7:3E:D8:F0:7D:76:57:F2:AE:35:78:85:9C:2D:95
            X509v3 Authority Key Identifier:
                keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:57:55:5b:b6:ef:9e:9e:7a:ca:d5:0d:bf:52:17:86:e1:65:
         c8:27:ba:6e:02:4b:5c:f8:cf:ae:c0:aa:6e:d2:f5:02:63:b2:
         5c:ab:df:a4:0a:08:6a:b9:73:a2:5a:11:35:9f:74:8f:0d:e5:
         97:0c:ad:e0:f1:64:90:3e:d7:67:71:9e:0d:76:57:be:5f:95:
         3b:46:cc:68:fb:ee:19:09:02:32:77:5b:eb:2a:2a:2b:e8:e0:
         dd:94:df:a6:ec:a0:56:6f:23:39:bd:6a:62:af:a9:8f:ef:b4:
         2f:d8:b7:e6:4a:52:5c:a2:b4:71:eb:ba:a8:0f:c0:7f:be:dc:
         b7:d0:69:6b:85:33:b1:fd:e1:88:36:96:23:9e:bb:57:a6:e0:
         84:85:c3:cb:81:b4:7d:56:ec:1c:27:33:1e:3b:3c:18:72:e0:
         3a:ba:a5:c9:da:ec:d3:fe:04:ee:81:a1:21:84:36:85:fe:df:
         8d:4a:95:f9:43:23:e6:e9:37:29:de:0f:d8:c9:d8:67:94:d2:
         a8:0f:4c:e6:7d:1a:64:4e:8a:5d:9a:a2:32:1d:89:69:d0:a8:
         4e:71:b9:d1:c4:4e:52:cf:32:13:97:41:8e:6c:26:b8:b2:ec:
         8c:bb:58:77:b4:d7:24:73:b2:31:d4:8b:82:01:20:4f:72:0e:
         64:fb:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:59 2026 by rpki-client