Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File:                     fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier:          wVaD8woer0jd/kPiXS2adbIkfkbLql09KEQel+gV0UY=
Subject key identifier:   07:78:BE:5F:0B:06:12:4D:7B:3A:83:DC:4F:39:16:70:15:88:46:FF
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer:       /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial:       019EE8C56DE1A2DCE2B78248FE2189D70068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number:          1984
Signing time:             Sun 21 Jun 2026 06:01:53 +0000
Manifest this update:     Sun 21 Jun 2026 06:01:53 +0000
Manifest next update:     Mon 22 Jun 2026 06:01:53 +0000
Files and hashes:         1: E7wjJIpp_incFIPPoxFXkTVNOZ4.roa (hash: dWCBkyUED92Ky9/PvSo7QQdS38SvVtpgkoIQkxWKNdI=)
                          2: IuJcF4mH2-0BSlT6G6AhKea-qcA.roa (hash: T022zetJkpJSmZy29rCTHnD8e/gW5HPSAFMOxFPo87E=)
                          3: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: knkMKRQLeg/7RaBdi/qsdB/HhZ8My2zzTnI+/9xpzlI=)
                          4: i5uiOxUKql3E_IHTtTBz9-Sb4xc.roa (hash: tZ8uEFMzEFAwyadWPmY+Ye5B1UCKISaztWjCzXC/FxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:c5:6d:e1:a2:dc:e2:b7:82:48:fe:21:89:d7:00:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
        Validity
            Not Before: Jun 21 06:01:53 2026 GMT
            Not After : Jun 22 06:01:53 2026 GMT
        Subject: CN=0778be5f0b06124d7b3a83dc4f391670158846ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:5b:f5:a3:24:d8:10:b8:ec:92:4d:58:46:
                    9c:f6:07:af:55:86:71:8a:1d:e6:3e:5a:2d:a9:41:
                    93:94:4d:d4:7b:01:cc:36:ea:d4:7f:53:fb:85:73:
                    58:25:0e:ea:7a:99:de:ad:24:f2:0a:1a:44:25:d4:
                    5b:e2:79:6d:ef:e4:34:4f:ed:c2:e3:97:e6:35:f0:
                    7c:a1:62:19:19:96:ce:65:d0:93:f5:11:1a:97:3c:
                    b1:b3:50:bf:41:78:4b:64:b0:d3:08:5d:69:8e:d6:
                    d1:61:9e:e8:8e:6c:03:a8:1b:c9:dc:06:c9:5a:6b:
                    71:0b:fd:eb:bf:eb:d4:97:12:b1:03:f1:9f:1e:36:
                    a0:49:8a:ca:1e:fc:26:25:d8:f9:ed:9a:e1:18:4f:
                    46:23:65:8c:37:99:31:2c:4c:80:4c:23:4f:cb:a3:
                    a8:c4:65:f9:a9:67:c0:b2:e7:cb:9a:bc:cc:60:2c:
                    45:7a:4f:1d:5e:bd:70:aa:22:6f:0c:1d:47:d1:74:
                    77:36:e8:2e:a6:e2:26:fd:89:ea:60:94:fe:11:dc:
                    54:db:19:55:a1:ad:8c:5d:24:1e:07:43:7a:6d:0a:
                    d2:74:3f:c9:ef:54:30:40:fb:86:5a:d9:d0:a8:fc:
                    a4:38:6c:12:2c:af:47:2b:d3:1d:7f:be:6c:2c:e7:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:78:BE:5F:0B:06:12:4D:7B:3A:83:DC:4F:39:16:70:15:88:46:FF
            X509v3 Authority Key Identifier:
                keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:cc:80:92:57:50:36:2b:ea:62:5e:39:bd:57:92:6b:a4:e7:
         55:57:24:e2:7f:00:e4:af:3b:41:93:95:90:aa:a9:ad:83:09:
         cf:c2:1c:f0:25:24:e2:1c:1a:23:ec:3a:62:df:1f:ce:a4:60:
         01:2e:a7:f7:69:ee:ed:7a:99:e4:b2:cf:f8:ce:75:57:38:08:
         f9:81:92:ca:e7:3a:b0:f1:95:66:98:0d:7f:14:51:8b:da:ad:
         7e:2d:4a:bb:f8:15:45:2f:43:e6:bc:a0:4e:3d:2f:10:4a:2e:
         66:62:63:df:72:8a:71:71:23:02:6c:d7:83:f7:3d:b7:81:7f:
         15:32:e9:b3:56:e3:a6:54:71:2b:59:bb:25:0a:0a:58:0c:3d:
         f8:e2:43:99:45:40:42:0b:0e:1d:8d:e3:a9:1c:f7:f3:8d:8b:
         7d:4a:36:4d:87:89:c1:36:d1:43:24:e4:b2:2a:06:fc:a4:dc:
         e9:d5:cd:41:19:d9:46:9a:aa:5b:21:2f:55:d8:29:c2:a3:5a:
         71:d5:ae:de:d3:e1:3a:82:e2:f0:a0:0b:f6:e6:3e:51:70:81:
         5b:d1:8b:11:97:f4:4a:75:74:b5:60:23:17:f5:25:7d:1d:5d:
         bf:85:db:2e:a5:82:ac:82:53:10:28:36:0e:ad:dc:02:12:d3:
         a9:b3:2a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 10:14:59 2026 by rpki-client