Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
File:                     1fBlyL23j_KU98VFSXHb-r-2wYQ.mft (raw, json)
Hash identifier:          GDu1o1fPCgKT0a/xX18GMVtd4WNQIG/tqn/WeRcx+IQ=
Subject key identifier:   6E:FD:CF:66:B0:D4:D2:B4:7C:E8:1C:57:6E:7D:01:8D:85:3C:86:15
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       019F189E88AEBB0CEA10E9ADA5F62F0B1FE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
Manifest number:          148F
Signing time:             Tue 30 Jun 2026 13:01:10 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:10 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:10 +0000
Files and hashes:         1: 1fBlyL23j_KU98VFSXHb-r-2wYQ.crl (hash: ntkwPCy3kG7xurnglBUgyph4hMsDd0Lrg48yWCcLk00=)
                          2: L-k_SL_s92jHONTQ4_qtQMQ0hCo.roa (hash: Ktu7W01HQP3w+NwclsoGu7pxp+ATVr6cehyCqENMhvY=)
                          3: OyDJxa-IKI9M6DEab_QdT2ZiPxM.roa (hash: TllnG1yiPkW1Kik3L852N3VXwGZ/qaH7M72QCj3GUaE=)
                          4: UZ7ePce2V0p3ZbzWXJ1ZgbnwDMQ.roa (hash: 3DbxDok/x0GzcOvaTUOPhPb4K0GtiOZj5rAjknMwnN0=)
                          5: d1jX94cFd3tk-Hm1ODBJTQjIun8.roa (hash: oZLsTmKqfymcNdDKMx79yAPIQPeIgqvN0Dz2E55v24c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:88:ae:bb:0c:ea:10:e9:ad:a5:f6:2f:0b:1f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Jun 30 13:01:10 2026 GMT
            Not After : Jul  1 13:01:10 2026 GMT
        Subject: CN=6efdcf66b0d4d2b47ce81c576e7d018d853c8615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a4:3d:22:c7:9d:a5:3b:25:9c:ef:46:0c:6a:
                    52:75:b2:36:d4:f4:f7:b9:5d:7d:08:f7:82:b2:d2:
                    d0:5f:d6:fa:9f:c0:71:0e:44:32:f7:c1:7a:5f:0e:
                    ab:e8:6d:b4:d7:0d:24:fd:fa:75:c2:17:69:80:c1:
                    51:b4:a8:01:4a:5f:60:b7:46:0d:17:6c:69:0f:78:
                    cc:e1:37:ff:64:d0:89:fd:1e:31:ba:cd:54:e2:5a:
                    15:cf:5a:a3:0b:f1:c1:01:c6:59:19:06:52:34:52:
                    cc:17:d1:10:86:4e:71:ad:28:63:d4:73:a5:ed:41:
                    68:2f:e7:1a:b9:b6:1d:b2:da:b4:44:ab:91:33:eb:
                    64:71:90:88:2f:e8:6a:71:1e:08:d0:07:15:08:32:
                    42:64:36:6e:d7:7e:20:2c:62:3f:5e:be:da:fb:9c:
                    0e:3f:49:24:c7:8d:b3:73:19:2b:78:2e:6d:fe:2a:
                    ff:8b:35:d8:9b:07:25:2b:2b:ed:6b:30:65:ff:01:
                    a4:50:db:2e:f6:b9:37:b6:6b:df:79:3d:e2:88:60:
                    ab:45:b2:52:10:6a:83:10:48:0c:51:e8:7d:d4:61:
                    d7:51:26:26:24:87:00:d0:7a:d5:2f:75:d1:65:92:
                    41:e3:af:7a:da:1b:37:a8:37:8c:e2:eb:54:26:77:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:CF:66:B0:D4:D2:B4:7C:E8:1C:57:6E:7D:01:8D:85:3C:86:15
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:64:06:8b:83:97:6f:68:94:46:1b:5a:7d:a1:27:0d:c1:bd:
         96:ac:7e:cb:72:f6:f8:88:fa:de:fd:13:0d:00:d2:1e:ac:4f:
         f4:25:60:2e:17:2c:82:c2:1c:37:93:ec:8d:15:cf:97:9e:67:
         a4:64:5f:c1:27:89:b2:8a:2b:41:61:ac:11:3c:51:83:1c:8f:
         29:b0:77:40:24:b4:76:26:0c:fb:08:6d:4f:32:76:21:5b:78:
         ca:3f:ab:3a:d9:09:d4:48:07:93:bc:d7:04:e7:eb:83:e5:b2:
         de:e0:6a:38:ac:bc:72:41:85:81:6f:e9:6f:39:31:f3:d1:7a:
         ec:26:29:02:87:f8:55:31:d6:ca:d9:ef:1d:e4:e0:ed:42:b1:
         73:ae:65:b8:95:99:a4:57:05:b2:80:76:66:1b:bd:2f:3a:2d:
         b9:20:72:8a:3f:74:94:88:54:2e:f3:f3:fe:ac:22:e5:58:83:
         ca:42:d1:f1:48:ff:1a:bf:29:8c:c8:39:ee:c1:b3:7f:b7:c7:
         3c:16:22:e5:f3:7c:ae:76:dc:53:27:88:b7:ae:6d:bf:f4:d2:
         ad:4f:77:61:f0:b0:00:b3:24:43:a6:cc:8e:c8:57:3f:60:fa:
         33:53:ac:90:8d:a3:de:b5:a9:6e:de:9c:15:46:91:1d:ec:38:
         69:72:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:18 2026 by rpki-client