Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
File:                     9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json)
Hash identifier:          4k6bf+0bFzDRH0yqmqKkWedD+INDFsspqvIsUL5eszA=
Subject key identifier:   BE:9E:C9:EC:4D:CD:6E:2F:AE:00:D1:91:1F:2B:77:9C:B6:B8:40:C5
Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A
Certificate issuer:       /CN=f5cb856d4269219ed3a0c0dc47333236f155953a
Certificate serial:       019EB92186B529ED2982723C9775755E2F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
Manifest number:          0421
Signing time:             Fri 12 Jun 2026 00:00:42 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:42 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:42 +0000
Files and hashes:         1: 7_zn84ybIr1uylkitwOR1cEu2dI.roa (hash: 2W6Vxmwk8XQBE6BnPj2SuKeyu76vgg2avkcyHjCtB64=)
                          2: 8qI5M9nt77vE4nTZuhI3O-_7Moo.roa (hash: bhOfxE1N9Q9DLTIZ9ruXl8yH7rMWdChvmxBcbOxnD1I=)
                          3: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: sF0gPRTO5jY7A4XjW7obisJ4A7S5cghg5qI4w/zslQ8=)
                          4: I-XIjRxgkdNZeZ6XgcxI96kMFwI.roa (hash: /L+nfUszoFluPyMyZo9VlBC8cE+Ie4cQ8KAxPH1RRAw=)
                          5: iCQOeluGzuF2H3yby0GDplaPkdI.roa (hash: FSXXrDNKGzru4cBB3J/wsVuN39ULCg+BCEi5BmI7ZZk=)
                          6: mzDYp7n26mDiWHNdtuApd9PtwRI.roa (hash: B9knfXLtUIlMboxQnejwbYi+kBKU6xfPLrCe2Bf2F4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:86:b5:29:ed:29:82:72:3c:97:75:75:5e:2f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a
        Validity
            Not Before: Jun 12 00:00:42 2026 GMT
            Not After : Jun 13 00:00:42 2026 GMT
        Subject: CN=be9ec9ec4dcd6e2fae00d1911f2b779cb6b840c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:58:2f:30:fd:4a:3c:23:71:3c:9c:b1:9c:
                    d2:ca:c4:63:d6:fa:59:b5:51:9c:c8:98:86:2d:52:
                    48:b6:3b:89:fb:a9:10:6f:85:05:a5:7c:88:19:95:
                    1e:7c:ab:33:50:88:16:bf:5d:e3:65:07:b8:0a:5a:
                    c9:e2:5e:6e:0c:a9:32:59:bb:a6:7a:05:8f:c0:b6:
                    17:37:9b:1d:97:e5:ed:a9:69:89:e9:a1:f7:4b:8e:
                    ce:26:1a:5c:89:9b:93:f8:1f:24:e0:80:06:1c:f4:
                    85:20:9d:51:82:f3:69:f1:0e:34:5e:1d:45:57:39:
                    11:ac:e9:a0:58:c2:25:ec:36:3a:c1:e6:bc:ed:e6:
                    fd:02:aa:88:b9:12:5a:06:58:c5:fa:8c:bc:90:78:
                    58:0d:d1:03:ed:af:46:35:02:68:80:16:6c:68:92:
                    31:3d:3f:35:be:dc:63:d3:5d:24:99:2f:fc:bd:55:
                    95:f2:71:0a:c2:4c:89:ec:0a:04:af:49:af:5a:24:
                    cb:41:85:17:fc:ec:4c:94:6c:0c:ba:15:68:ff:e7:
                    f0:4a:24:52:6d:f2:61:2b:65:64:c4:ae:e7:10:bc:
                    b6:60:b5:e6:fe:8e:67:e5:f8:21:05:85:70:66:fe:
                    89:04:4f:6c:32:2e:02:c8:1b:a6:54:57:7e:59:96:
                    72:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9E:C9:EC:4D:CD:6E:2F:AE:00:D1:91:1F:2B:77:9C:B6:B8:40:C5
            X509v3 Authority Key Identifier:
                keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:44:2f:c1:3a:16:5f:e0:bf:46:05:ec:a6:d8:df:da:8e:55:
         78:82:66:eb:86:6a:64:78:bb:f9:8c:d4:50:83:cb:d2:53:3a:
         5b:57:fb:28:e9:1c:ac:a4:37:be:ad:15:d3:f7:bc:99:f4:66:
         c9:06:ad:a8:c8:dc:ef:83:82:75:06:73:32:31:ae:3d:f7:ca:
         f6:ac:35:2d:45:14:45:ec:56:24:bf:2b:65:cf:89:58:71:53:
         63:0e:98:25:97:8c:f8:d5:6a:eb:3d:60:cb:b9:57:e6:55:c3:
         87:42:10:37:9e:8c:14:3e:94:6f:f9:3e:99:4a:62:63:78:dd:
         09:65:c8:0a:80:66:f7:2a:fc:2d:c9:e8:e7:c5:63:a9:a4:62:
         5f:09:1a:d9:7c:84:4b:df:01:4e:7e:92:66:62:79:80:40:60:
         db:8d:8b:47:9e:23:a1:0f:bb:81:5d:0a:7f:68:87:c7:2f:42:
         bc:6a:12:d2:13:31:23:70:68:31:c1:1c:90:dd:23:6a:38:20:
         47:ad:1f:46:42:ac:71:04:39:98:65:d2:33:64:c8:2b:e9:8c:
         a3:4f:34:ac:fe:29:09:fe:36:8e:86:62:a9:2b:27:67:86:15:
         b9:66:d5:a4:93:a5:a6:43:5c:42:bf:7b:cf:fe:5e:75:a9:d8:
         d9:e0:4e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:25:53 2026 by rpki-client