Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File:                     X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier:          ISjLr6bn2qobroopvi6pSEYLpKLpOQ5rqpRD6puUP90=
Subject key identifier:   90:7F:FF:40:D6:0D:A0:ED:B3:DE:16:67:1F:08:B1:BE:C2:99:45:A7
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer:       /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial:       019EB8B4526BF05FFCBF36D221BACFEB0C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number:          1987
Signing time:             Thu 11 Jun 2026 22:01:25 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:25 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:25 +0000
Files and hashes:         1: 1e3KekH_6pDsdSbJKChbFqgwM64.roa (hash: kcR5DefkrtLdhNpAqQoaiAp5NeBNbTNXuk4C29Rdnm8=)
                          2: 9D820He12zEiGHJY2yEp95HuOYo.roa (hash: JgNweIsliEaUH1GQxpLBgGrSQ23iPTPHkKTdFr797ts=)
                          3: HPAT1MyeKAtUXfiwHelB0dU143I.roa (hash: MB/EaJsVrRQhtNPL6YNv0ijVFjc3MkwuTavJrFTSstk=)
                          4: P-jvPlaLL6rr2ui5e9D6YWxhu9w.roa (hash: DDSuenDK/kT9T6J/tQTGQwxbDy3mpq7Bc6isbXiDO5I=)
                          5: TieuC1DoyThjRQq3uG3ihjLScTo.roa (hash: vC9rnpVx2T8cbVOPfkfZTZYOxBuzPINUpSnwkUZDkSE=)
                          6: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: R4LTIiShMj2cl3PxwXv2IJt8hEP0DYkCzviwJ75dxjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:52:6b:f0:5f:fc:bf:36:d2:21:ba:cf:eb:0c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
        Validity
            Not Before: Jun 11 22:01:25 2026 GMT
            Not After : Jun 12 22:01:25 2026 GMT
        Subject: CN=907fff40d60da0edb3de16671f08b1bec29945a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:cc:5b:67:b6:da:40:d4:db:62:79:94:f7:
                    ea:69:2c:f3:56:4c:3d:15:27:a1:d7:8d:25:77:21:
                    7e:ce:55:7c:a5:be:9b:1f:9e:4e:67:95:e0:93:39:
                    c6:0f:ef:23:20:cd:85:88:6f:57:8c:29:10:ea:11:
                    49:08:a4:bc:49:63:30:39:ef:52:9d:58:f6:7b:e6:
                    b3:69:c8:f7:de:14:13:1d:95:66:93:d3:b9:77:64:
                    1c:fd:94:e3:80:fa:f1:24:60:30:cc:15:27:8f:c7:
                    cc:f5:b1:5b:09:91:a6:c1:fa:3b:dc:f7:10:4d:84:
                    9c:3e:12:c4:d4:eb:fb:c7:e4:15:c9:4e:a0:13:cf:
                    28:41:31:82:df:d5:af:1b:c2:14:ab:e0:c5:e6:05:
                    19:3d:5a:eb:af:a0:26:eb:66:92:aa:83:cd:9b:73:
                    6c:b6:06:f1:53:e6:5d:93:f7:6f:26:d8:f6:3d:84:
                    ea:8a:84:82:bb:6c:4f:c2:3b:3d:7c:bb:b1:a4:89:
                    b7:96:da:1c:b0:9a:1c:3e:26:b9:46:72:fa:5b:56:
                    f5:55:b0:11:77:0b:9b:5c:e5:6e:15:46:86:1a:b3:
                    80:4b:8a:49:e7:6e:76:9a:2c:95:f5:24:58:93:7c:
                    24:bd:56:ab:28:34:a9:70:ef:e3:9c:63:41:3a:c0:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:FF:40:D6:0D:A0:ED:B3:DE:16:67:1F:08:B1:BE:C2:99:45:A7
            X509v3 Authority Key Identifier:
                keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:27:6f:a4:b5:af:94:b4:08:58:c8:53:e3:ab:88:72:b7:85:
         82:9c:06:00:87:0d:3a:9a:62:53:6b:8a:3c:35:0b:cc:fd:dd:
         0d:18:d9:7a:8f:96:c8:62:11:86:03:1e:fe:97:71:a6:f3:4e:
         35:fb:e8:ae:97:7a:67:4f:93:be:66:35:e2:fd:3d:d9:26:dc:
         21:07:4f:89:78:6e:c7:d4:83:b7:17:ee:5b:48:10:db:84:1f:
         55:c6:02:c0:53:0d:cc:0a:17:bd:0b:5a:c2:b6:2b:40:78:24:
         ad:64:d3:f3:68:21:04:64:ef:c7:01:d6:f4:6b:55:0b:71:e9:
         13:db:96:6a:17:64:c8:78:fd:3c:bf:3f:a4:a6:ab:5a:a7:83:
         81:12:ec:c6:59:6b:c2:59:34:9d:3b:ac:8a:24:c6:b8:cc:be:
         b7:ec:6c:af:18:8a:25:5d:45:54:eb:9f:b0:73:b0:18:75:0f:
         f1:2e:ab:ac:6b:d2:08:cc:8b:4d:45:0d:12:a8:8d:b6:41:65:
         f6:31:d0:22:f3:7b:12:0c:e9:57:96:b0:71:4d:a9:2e:02:a9:
         7c:12:20:ad:79:37:ed:a4:97:a0:2b:c3:1c:1c:63:69:94:83:
         7e:a7:01:4f:ce:a5:d0:51:c4:71:12:b4:03:0f:0d:24:b6:88:
         ec:d1:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:45:11 2026 by rpki-client