Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
File:                     M7Zai666T_YhSS6-5vweiK2yGwM.mft (raw, json)
Hash identifier:          ysMUIfMnMWWIZV7ZlrVjjXM1JEb4rzWhajnTdNzu3A8=
Subject key identifier:   BE:93:95:2E:F8:6F:9F:44:73:4A:56:4B:9F:47:A7:24:44:F6:61:38
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Certificate issuer:       /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial:       019E9137EFC97EBAE4F3ED9C3B9E41425CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
Manifest number:          055F
Signing time:             Thu 04 Jun 2026 06:00:22 +0000
Manifest this update:     Thu 04 Jun 2026 06:00:22 +0000
Manifest next update:     Fri 05 Jun 2026 06:00:22 +0000
Files and hashes:         1: 1-_85ETz5jkHerkVT2dRSmXtqgNo.roa (hash: NQXJJj/OBTH49mc/x3onWdcUiAdq+Dhq5KpAVGXEyBc=)
                          2: M7Zai666T_YhSS6-5vweiK2yGwM.crl (hash: 3qNcbR0uitbTcqZo/0cMaskotLrHWSx1KtuTc9kyfHI=)
                          3: TTHbsr6S4A2WiT-5UCVCIBGXt7g.roa (hash: tSI1qiCrhqG5RTuDVwd5YnhpKn7WMz1SwKPqjeiWtZ0=)
                          4: qzOhEMjt0ER_QeMmWb_aSnbGqDs.roa (hash: ct6/7wueiN1cFlvuwHbO2g9uKG/7TkLJNxOWY9ajqoc=)
                          5: xR7LKB9cMx20WjaSYnBDWdIRF-g.roa (hash: vumkR84YsHI2dcyHQIVTL0w8JKyaUvc5rnjqJHi4+6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 06:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:37:ef:c9:7e:ba:e4:f3:ed:9c:3b:9e:41:42:5c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
        Validity
            Not Before: Jun  4 06:00:22 2026 GMT
            Not After : Jun  5 06:00:22 2026 GMT
        Subject: CN=be93952ef86f9f44734a564b9f47a72444f66138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:67:01:c2:b7:4b:68:7f:ee:16:4f:d4:1b:
                    1c:e3:3c:2b:fd:23:b3:b1:4f:d7:cb:e5:f5:04:86:
                    eb:4b:0f:5c:bc:1b:e1:3a:0c:ba:fe:37:59:c7:67:
                    c5:a6:7e:5b:7f:bf:c2:89:6f:d5:5d:f3:26:c9:95:
                    44:05:ef:3d:a0:ed:7e:d6:f8:52:bd:9f:99:bf:f4:
                    47:c7:3b:4f:a8:f1:cf:76:6d:31:28:3f:aa:bd:c5:
                    d2:ca:58:eb:05:94:6f:da:60:e5:ed:e6:0b:7c:4e:
                    59:aa:26:b3:16:5d:f8:1b:45:be:00:46:45:b1:b1:
                    17:c1:77:76:be:8e:69:e7:ed:8b:00:5a:2f:97:10:
                    13:e1:4b:8a:b3:25:04:30:b3:7a:bb:55:bd:cd:0b:
                    7b:09:50:6d:ff:e1:fd:0a:62:b9:39:01:81:88:6e:
                    78:44:76:24:ea:ce:f7:11:7a:2f:27:0c:78:50:28:
                    ae:43:02:b9:76:ef:1f:48:4f:34:08:67:be:0c:3a:
                    5b:de:67:7b:08:c9:81:5b:db:a8:dd:83:a7:25:5b:
                    83:bc:b4:6e:8e:5f:19:43:1f:23:20:3c:a8:04:d7:
                    ca:50:c0:13:5d:50:6e:9f:ea:47:ef:a8:80:74:4b:
                    08:39:f2:83:d3:0b:85:e2:1a:df:5d:14:86:ec:6c:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:93:95:2E:F8:6F:9F:44:73:4A:56:4B:9F:47:A7:24:44:F6:61:38
            X509v3 Authority Key Identifier:
                keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a7:c7:69:e8:ee:32:68:ca:5d:a0:ee:d4:39:73:25:e4:85:
         aa:39:d4:d2:a3:20:66:8a:8b:d0:6d:ff:9b:4c:40:bd:67:47:
         ff:87:d2:75:17:e5:51:a1:d0:0e:ba:de:ea:f3:50:0f:d6:7f:
         50:7b:9f:81:59:af:c3:18:ab:8d:d1:b2:5a:54:0a:8b:00:82:
         f0:cc:b0:35:53:b6:92:ce:bd:5a:81:bb:3e:b0:e2:c7:30:16:
         0f:f4:2f:7b:f3:59:d0:0f:1a:26:c6:21:78:6e:10:7e:6a:90:
         2e:af:80:74:1a:e2:77:51:31:2c:e5:c2:88:dc:5e:3e:c5:37:
         50:80:34:95:fe:15:4a:c3:51:f2:de:4b:d7:d6:cb:c2:85:d0:
         02:df:dc:59:bc:24:37:5b:76:d7:6e:de:7b:6f:1a:98:be:58:
         da:9d:94:ee:c0:b3:6a:62:19:ed:11:c6:09:36:f9:fe:12:2b:
         ce:f4:f4:c2:0e:18:b9:1d:f9:4a:2b:57:1c:2c:39:8d:cf:50:
         b5:aa:84:d7:b4:a2:3d:0d:14:2d:3b:bd:a3:1e:e3:22:d8:b2:
         49:7b:6b:fe:d6:b3:b2:fa:33:18:68:31:63:19:e7:9d:e4:64:
         ba:5f:d3:c4:a0:9b:03:75:d1:ea:27:5c:bf:8d:ac:18:b7:8a:
         c5:6d:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:18 2026 by rpki-client