Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
File:                     gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft (raw, json)
Hash identifier:          olZgLEtUZirwfcW9HuAKqaRwSIiWePBAKfWuOZqHuMU=
Subject key identifier:   1D:DA:72:EA:62:D5:A3:74:01:95:2A:08:24:0B:E5:3E:37:2E:AD:47
Authority key identifier: 81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E
Certificate issuer:       /CN=816aa91ab1274e475397b907a655f91e9d605e0e
Certificate serial:       019EB98F3024259ADB92F1F3EA318C35DBC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
Manifest number:          0463
Signing time:             Fri 12 Jun 2026 02:00:29 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:29 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:29 +0000
Files and hashes:         1: DSegnNq3yKblQGxIHXTZ5tulaHA.roa (hash: dLv+A/vc7m1UxOoLmUkd/IJPf2dtcdjA2GKS9KV/zrs=)
                          2: gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl (hash: SIA84tcxKibKfu7k6SdBNLmPUkYbYMaIDb28msJIDzA=)
                          3: tWypDnBAIWwZKWJj3d2zrshtc2o.roa (hash: VfkZmkJUOwrgNq3Ww1lzNtYXvW7fLaLXy/GNgbgT52k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:30:24:25:9a:db:92:f1:f3:ea:31:8c:35:db:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816aa91ab1274e475397b907a655f91e9d605e0e
        Validity
            Not Before: Jun 12 02:00:29 2026 GMT
            Not After : Jun 13 02:00:29 2026 GMT
        Subject: CN=1dda72ea62d5a37401952a08240be53e372ead47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:6b:ed:81:e8:52:d6:a6:73:1b:f4:45:da:
                    13:0f:a9:17:f4:1e:57:7b:46:e9:3a:4a:8f:96:de:
                    1a:5b:4f:cb:1f:a6:3c:38:53:b8:12:a2:ef:73:31:
                    b2:c2:64:69:c1:2c:f8:96:8c:ce:71:52:27:a2:21:
                    72:83:3f:54:51:47:99:a1:39:f9:cd:77:f0:72:be:
                    7d:88:2e:0e:3d:d5:f5:53:d3:ab:2c:3c:04:02:0b:
                    38:46:a0:38:01:a6:36:85:48:6c:f5:b7:a3:d4:c1:
                    c1:01:7a:6d:54:3b:10:61:78:fb:90:42:f6:d5:54:
                    5a:7a:6d:be:f7:66:19:eb:e8:cf:82:f2:f7:a8:eb:
                    19:d6:73:bf:f2:98:cc:7d:a9:27:99:b1:a8:12:f3:
                    7c:2c:a8:86:96:7c:48:5e:ad:6b:4a:46:b8:8d:7f:
                    1f:60:7a:41:88:c5:b9:e0:ff:af:bd:6b:4c:27:d8:
                    d4:98:e6:25:f9:62:5e:64:fa:59:71:f1:7e:a2:49:
                    7c:60:21:50:1e:de:ff:48:51:dd:0f:e6:07:13:46:
                    16:4d:74:93:1c:86:46:e8:72:bd:de:09:ab:c9:10:
                    3a:9f:94:92:85:e7:0d:a9:98:7e:50:e3:01:e1:6f:
                    34:31:a8:26:7f:f3:cb:c3:01:82:26:c1:78:d7:ee:
                    57:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DA:72:EA:62:D5:A3:74:01:95:2A:08:24:0B:E5:3E:37:2E:AD:47
            X509v3 Authority Key Identifier:
                keyid:81:6A:A9:1A:B1:27:4E:47:53:97:B9:07:A6:55:F9:1E:9D:60:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWqpGrEnTkdTl7kHplX5Hp1gXg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/2a7fd4-5de0-4a11-a253-dff3bcee6b66/1/gWqpGrEnTkdTl7kHplX5Hp1gXg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:70:e5:0a:4c:99:31:62:2e:0e:94:8a:a3:8b:0e:ee:e0:04:
         8a:14:fd:ce:94:be:60:e9:e3:a3:92:07:a7:fb:e2:ae:d4:59:
         e6:94:42:4d:8b:a0:f1:a5:e5:98:47:05:c6:e2:b0:fc:65:e5:
         c7:18:6f:11:f6:1d:f4:91:03:86:4c:ba:38:a8:0c:dc:be:fb:
         ca:1a:a6:f6:05:71:e0:70:f3:65:10:ec:6d:8b:03:52:3d:f3:
         22:af:49:48:44:04:b9:2c:89:73:f5:28:f2:73:e7:2c:65:d2:
         6c:56:46:ca:08:a4:eb:a2:c7:b1:62:48:0c:b6:d4:22:9e:0b:
         8b:5e:d5:5b:5a:63:f5:d1:07:8e:4f:47:60:e7:45:cf:ea:b1:
         d6:ad:e4:6c:be:3b:92:4c:e9:76:d2:67:7d:3d:9e:d5:1e:0d:
         27:20:74:d7:4d:92:30:97:62:5e:dd:f5:ce:70:8f:90:e4:5e:
         c0:95:3c:88:f8:89:ae:ae:8b:77:e2:b0:0f:57:d7:28:98:4b:
         00:31:96:4f:03:67:b8:a2:33:3e:8d:05:a6:37:1a:54:74:a8:
         b4:84:c6:bd:e9:f2:6c:17:e2:6d:fb:60:a4:c7:f0:6d:43:61:
         bb:cc:d5:82:ed:85:22:be:3d:22:23:9e:ec:bf:7d:93:c9:33:
         c7:63:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:22:53 2026 by rpki-client