Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
File:                     3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft (raw, json)
Hash identifier:          pFszmdiiROiyA46fRkBRIXyGpwuyofc/4OxEGHPypZg=
Subject key identifier:   75:BD:82:C5:B5:07:D5:36:D8:5B:17:85:16:DE:BF:CE:57:57:0D:67
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Certificate issuer:       /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial:       019EB80E98550482EE324EDF97878C53D57E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
Manifest number:          1959
Signing time:             Thu 11 Jun 2026 19:00:24 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:24 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:24 +0000
Files and hashes:         1: 2JMB4vX5_LWb8Di0KSFc_SxsfMQ.roa (hash: dw7y8zA3sA5szHuqDv2uyqn6EpUQJ2K7C7ypgd+rvIE=)
                          2: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl (hash: 5grS8+sk+GSlcxez2aiUdbmoZCc7fyJ4e/vLvLQmlRo=)
                          3: CswGKxkqLF2K56RMZcAVfe9a0EU.roa (hash: hewKf3yw07raHqllDTQ2zpeQ/c61PGbRWAmkSyR4Mm4=)
                          4: VWgMGoCtSQiDf6Oxqso0znZVdkg.roa (hash: cES9lyT0GA0HJi+kOwho+MFDqONbyPHoFudSfF39z3o=)
                          5: YASHHhVdIkN4neMHuFamS3yuAUc.roa (hash: S1iGddEvlw+wRojrklSWL7s8nzR3Q8VGgYslXWevRa8=)
                          6: b6n89VnFa6q8VXBafEvSx4WopXw.roa (hash: 98DSxjPdzxUaiNoEdZnwgLFO2xgbZNgVeSk7tVbYXbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:98:55:04:82:ee:32:4e:df:97:87:8c:53:d5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
        Validity
            Not Before: Jun 11 19:00:24 2026 GMT
            Not After : Jun 12 19:00:24 2026 GMT
        Subject: CN=75bd82c5b507d536d85b178516debfce57570d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:99:61:f9:37:fc:fb:82:2f:14:ea:e8:e4:
                    88:88:8d:fe:07:78:03:99:bd:e3:9e:d3:ac:b2:05:
                    81:6b:86:d2:32:5e:9b:b8:09:f2:59:80:f8:3d:a2:
                    11:6d:0b:5a:c8:a0:f8:ef:3b:d0:f4:35:7a:5b:d5:
                    af:23:64:bb:df:f7:0a:1c:ac:33:11:95:b6:a6:18:
                    5c:3e:1b:9e:42:e6:bd:90:ea:55:55:ae:69:53:b0:
                    35:2f:6c:35:4e:4a:95:5b:22:50:fa:57:c8:29:16:
                    ac:55:20:b4:39:6f:71:8c:ea:9e:b3:73:48:36:e8:
                    87:5a:46:7c:1e:16:a3:a3:e6:1b:ee:22:7d:96:f0:
                    fc:30:ab:cb:8d:a1:b2:8c:ec:d9:64:f5:e0:d3:50:
                    a3:99:81:76:97:6d:0d:60:da:b7:4b:01:8d:20:e1:
                    b0:7a:e1:02:21:29:7b:81:f2:ea:f2:b0:27:54:7f:
                    02:7a:d4:50:4f:ba:76:78:da:8a:8a:c2:7d:cc:43:
                    4c:6c:1b:6f:b0:59:11:03:a5:14:13:33:b9:73:f2:
                    28:7e:6b:b4:6b:51:3a:85:e6:d6:0d:4f:89:38:39:
                    9d:20:ea:01:fb:ea:fa:eb:06:51:63:21:31:ea:da:
                    84:f0:cc:e7:62:80:d8:4c:bd:a9:4b:41:54:34:cb:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BD:82:C5:B5:07:D5:36:D8:5B:17:85:16:DE:BF:CE:57:57:0D:67
            X509v3 Authority Key Identifier:
                keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c8:c2:3e:e3:db:d0:1d:f5:14:0c:57:45:9d:66:6f:43:21:
         4c:e0:a0:24:ce:e2:af:37:48:44:1e:c7:83:24:6d:18:8c:69:
         f2:9d:6e:29:a8:94:41:0b:82:bf:eb:04:b5:4e:3d:1d:dc:c7:
         7c:b5:9b:11:f5:8e:f0:3b:1b:81:92:73:ce:0d:0f:a2:46:0a:
         18:35:d6:a1:99:7c:8c:e9:a2:1c:05:09:a8:2e:a9:5c:1b:b8:
         8a:0f:c3:31:b1:ee:c1:a7:b2:cb:0b:22:05:4f:8c:2b:ea:c3:
         55:30:e4:5e:fc:fc:86:1c:ee:a5:71:61:ef:c6:b9:16:0b:ed:
         92:89:2e:50:06:f5:3d:5e:e0:88:f5:40:e9:b7:44:80:01:df:
         5b:12:cd:b8:9f:1a:a7:72:4b:4c:b9:b1:62:32:ed:76:a2:39:
         f3:2e:dc:8b:cf:39:2d:79:b1:88:6b:18:3d:3a:b0:73:66:cc:
         c6:f5:08:fe:ec:06:e8:fa:83:65:cb:c8:4d:d8:2e:e1:eb:d1:
         73:ec:a6:3d:73:0c:56:90:be:3d:8e:84:02:9d:b5:35:ae:b7:
         b5:2b:35:72:eb:ea:13:af:fd:4c:d4:d1:60:1f:a9:7f:42:33:
         71:e8:7f:7e:a4:6a:3a:d1:77:f1:4e:df:0d:72:c4:53:d5:80:
         da:28:17:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:31 2026 by rpki-client