Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
File:                     f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json)
Hash identifier:          NiyLVGJ0wY1Tj3nw/PMOYlpTKVMpIckSaWN3O2JcKXY=
Subject key identifier:   FE:11:32:58:B5:70:8D:AE:B1:18:EE:8E:EF:DC:5E:33:3B:B2:7F:D9
Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87
Certificate issuer:       /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
Certificate serial:       019E9A048631BE225A6A065AC951BB318C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
Manifest number:          0689
Signing time:             Fri 05 Jun 2026 23:00:48 +0000
Manifest this update:     Fri 05 Jun 2026 23:00:48 +0000
Manifest next update:     Sat 06 Jun 2026 23:00:48 +0000
Files and hashes:         1: IajiWY47KC-xdpE9hl7yXBD40Wg.asa (hash: IS6lAdyQVb+yyai130Xpo7eEvQJV9ci/S8WJsFcymho=)
                          2: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: KUmBUifFUddOtA8/IBN90xQWFfvlBQQqlGmmJ1+yGZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9a:04:86:31:be:22:5a:6a:06:5a:c9:51:bb:31:8c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087
        Validity
            Not Before: Jun  5 23:00:48 2026 GMT
            Not After : Jun  6 23:00:48 2026 GMT
        Subject: CN=fe113258b5708daeb118ee8eefdc5e333bb27fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d9:59:62:9e:1a:67:12:b7:76:9d:d5:ab:45:
                    41:bf:3a:03:ec:69:45:38:c5:bb:df:3c:87:66:b7:
                    86:16:c8:ee:71:1f:64:66:6a:df:93:f4:be:bd:d2:
                    3d:68:38:65:1d:53:6a:00:f3:62:9f:5a:a1:74:e0:
                    b1:76:07:24:06:88:3b:92:b0:25:e4:82:ed:77:e7:
                    58:17:64:5d:ae:3f:71:0d:34:9e:77:d4:bb:4d:e8:
                    86:db:be:9e:ca:7b:82:a6:9f:a8:d2:7e:c6:db:c9:
                    dd:10:59:ac:37:8a:29:72:27:f6:f2:cd:07:7c:31:
                    42:7b:f3:bf:97:17:38:7a:78:ca:af:0e:2e:8e:fd:
                    dc:af:7f:3b:3c:83:49:f0:39:9c:6b:7c:34:56:41:
                    be:2a:e4:72:53:1e:d4:30:f9:40:8a:32:ab:fa:89:
                    53:43:43:61:96:65:a4:a9:9f:29:86:6e:9b:6f:05:
                    06:0f:fd:92:ee:ad:b5:af:05:1d:d6:54:28:7e:03:
                    49:50:de:8c:2e:d9:28:47:b5:a6:95:dc:b7:c5:2c:
                    15:a5:86:7e:f8:b9:fb:2c:a6:54:1d:76:82:21:0b:
                    75:2b:4b:3f:c1:d0:91:20:1b:61:41:0e:56:1b:57:
                    97:96:82:4c:1b:0f:86:b2:41:f4:eb:a4:cb:a5:ea:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:11:32:58:B5:70:8D:AE:B1:18:EE:8E:EF:DC:5E:33:3B:B2:7F:D9
            X509v3 Authority Key Identifier:
                keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:08:8e:67:94:0b:9e:73:9e:8f:9e:d8:80:f0:e7:36:da:57:
         39:bf:7d:8a:05:c9:8b:33:d7:26:da:7e:79:91:0b:10:a3:88:
         2d:49:eb:83:4f:04:32:fd:86:82:a0:f1:20:5f:ee:3f:6e:37:
         59:7d:1a:ae:82:ea:96:25:a0:55:43:a4:cc:e8:ad:d4:ba:fd:
         4b:08:fc:bc:57:51:1a:7b:ff:bb:07:2e:10:61:f5:df:7e:4d:
         42:26:7f:41:33:d2:dc:38:2c:de:48:4f:b9:9f:77:7e:98:34:
         7b:52:1f:46:ff:49:bc:27:4c:ca:94:a5:21:9d:e9:45:61:03:
         48:00:ea:bb:14:e2:fc:03:5c:1a:fe:e0:32:e5:f8:ca:6d:38:
         de:76:f6:b8:23:50:16:1f:e1:4d:37:ee:d6:c1:50:71:f4:23:
         de:97:cf:5e:bb:73:ef:fb:b6:07:df:1e:94:34:49:3f:5a:4b:
         d6:27:28:fd:94:aa:c7:f9:ef:d6:db:c4:9e:c9:8d:fb:e4:4b:
         59:62:5f:85:e2:e3:b0:b6:7f:72:4c:79:96:ea:be:ee:6c:52:
         30:dd:e3:2b:f1:b2:7d:ea:0f:81:d6:bc:08:87:58:79:bb:71:
         dc:c1:53:42:14:05:06:2c:a2:43:67:7e:a9:c5:fc:0e:e4:40:
         b0:02:3c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:11:32 2026 by rpki-client