Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
File:                     tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json)
Hash identifier:          2q3KmGdpq/xxgVyt2apaVZC29YQVJXsK015iZTKNr94=
Subject key identifier:   75:A8:45:62:BD:69:96:75:F5:9C:57:0A:F2:55:29:60:BB:9F:7F:A5
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Certificate issuer:       /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial:       019EE857CD8C571B452D9D6C5F8A4DA35C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
Manifest number:          0795
Signing time:             Sun 21 Jun 2026 04:02:08 +0000
Manifest this update:     Sun 21 Jun 2026 04:02:08 +0000
Manifest next update:     Mon 22 Jun 2026 04:02:08 +0000
Files and hashes:         1: D1q3YLzj8lZ_AqtFs6QHKSAISFg.roa (hash: 4mLTnHJ65SEHMBkEh6tPiLrvo21+0C3dC/USJa8YdTw=)
                          2: FAR1JGDRfBlwTrXiCrjWu-9KPYY.roa (hash: ubnjQ9mTdiJtNsVEHvSHl8U6qYQGX98XEG0kwEFpsdo=)
                          3: OteesfxlXNW_6oy-uZPA0RjwQqs.roa (hash: BVMKBS9it+saptlczy0sxrdp/hGNaoRQGuAEe0tEzJQ=)
                          4: jJqmq7ctfCRljbEe-rA7H6MPeAI.roa (hash: O+1YuOF5X9Aph1d+IEQe3EcREqu8Qs7VAkwaJPtR+U0=)
                          5: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: 73Uqp2Yrhmp9H4Okf0WmXCZJ/JOYQGuSuLCuGOuY5J4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:57:cd:8c:57:1b:45:2d:9d:6c:5f:8a:4d:a3:5c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
        Validity
            Not Before: Jun 21 04:02:08 2026 GMT
            Not After : Jun 22 04:02:08 2026 GMT
        Subject: CN=75a84562bd699675f59c570af2552960bb9f7fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:8d:71:a2:f4:36:1b:1b:69:10:ab:69:9c:
                    11:97:84:5b:6e:a3:23:b6:f3:a2:d2:d7:cb:36:47:
                    4f:78:f0:7f:7e:1c:02:c1:e8:d6:02:a0:73:94:a1:
                    92:3d:04:80:d1:a6:3a:d4:dc:3b:fe:e9:33:17:e7:
                    92:08:ac:7b:f0:88:e9:e0:f5:30:fc:1f:ed:b7:c3:
                    fa:c1:3f:6d:2d:ce:34:bf:e3:00:cb:0f:c6:8e:29:
                    e4:b4:ed:a9:f3:96:c5:b3:04:c7:eb:82:a5:7c:64:
                    2f:f6:89:59:be:50:b1:bb:a2:6e:d2:05:b6:ca:36:
                    92:df:10:c7:69:55:e2:38:05:d9:c2:86:21:2c:1c:
                    d1:eb:3b:2c:98:70:78:67:1f:3c:8a:92:7b:d6:d6:
                    44:5d:7b:63:5d:e0:fa:d8:84:7e:7e:4d:1e:ca:5b:
                    c1:89:80:4f:43:c5:a1:13:31:be:0c:94:c0:b1:b6:
                    cf:16:9e:4f:22:5a:45:5f:47:9d:7e:55:3b:53:5f:
                    92:66:b2:38:38:3a:61:3e:28:d3:90:37:d8:ed:4d:
                    1a:d3:c2:4f:09:2b:02:4c:70:d9:ea:d5:a4:4b:54:
                    ca:2b:a2:3a:6d:99:97:f0:b9:5f:f3:06:39:11:d5:
                    40:1e:16:10:70:6c:58:44:30:98:21:8e:f1:47:eb:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A8:45:62:BD:69:96:75:F5:9C:57:0A:F2:55:29:60:BB:9F:7F:A5
            X509v3 Authority Key Identifier:
                keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9a:b6:95:7c:ca:21:aa:ff:f2:a2:e8:d8:f8:83:96:c4:ba:
         71:a4:71:3e:d0:93:31:e6:73:b9:11:81:83:10:a1:e5:b5:a1:
         db:25:4a:90:c2:40:02:f3:cd:36:71:7a:30:07:5a:90:2d:26:
         f7:22:4a:29:19:2c:89:b4:c1:f0:23:22:c4:67:01:a2:51:c9:
         8a:6b:ad:b8:4d:e7:bc:0d:4c:68:54:09:ac:da:ca:82:05:cf:
         a0:d4:f1:55:92:4e:f9:8b:16:47:b4:a4:0f:bd:ed:25:21:d8:
         f9:49:d0:01:4c:e7:31:d0:ea:0d:90:62:32:17:62:73:be:3b:
         b0:58:0a:34:7a:f7:3c:1f:d8:4d:08:d9:5b:1f:cf:f1:d9:52:
         a1:5c:f9:f9:9d:fc:71:35:03:2c:57:8a:52:41:d0:93:99:66:
         eb:9a:83:b1:0a:7a:5c:c5:ef:97:d8:fd:cc:d1:9b:b9:be:d0:
         1f:a5:a4:7e:da:a6:36:4b:a5:46:f3:f6:1e:a0:28:c3:18:91:
         2a:f5:a2:c5:fd:80:81:ce:ef:d8:70:77:51:f4:55:22:5c:57:
         cb:31:7b:09:5c:6e:36:f1:b7:b9:fb:fb:e5:42:ea:52:f6:ee:
         e0:d4:ff:eb:57:b1:27:31:2d:09:e4:32:5b:0c:af:58:da:7e:
         6c:df:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 09:59:04 2026 by rpki-client