Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
File:                     sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft (raw, json)
Hash identifier:          T/59ol7N7llu3sCLYaaoRZf6hx49BkjsYY2e7V/AiNY=
Subject key identifier:   7B:94:30:8F:37:62:AB:3C:19:AA:01:5B:9A:B2:58:26:6F:19:1E:C1
Authority key identifier: B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26
Certificate issuer:       /CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
Certificate serial:       019EBB46D7AA0FDCE41767FE7034F176140B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
Manifest number:          1959
Signing time:             Fri 12 Jun 2026 10:00:42 +0000
Manifest this update:     Fri 12 Jun 2026 10:00:42 +0000
Manifest next update:     Sat 13 Jun 2026 10:00:42 +0000
Files and hashes:         1: PUXWH5ErhkpTlX3DGsk45zeBJZg.roa (hash: xZcIxtVt0rhHswrnqiIOZ/p/5tyYj0LaAjYUyfrercI=)
                          2: k3bU7GJQGWmqllt3J0zrBV5kOFQ.roa (hash: FFe49A2byJNnvRF0qFtVbcLDcNCSlda3Ud81mS5eRtw=)
                          3: sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl (hash: xzlyWR1OhCejCP7hX2l+/dBqlWA6JGOEhKUHpTinXgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:46:d7:aa:0f:dc:e4:17:67:fe:70:34:f1:76:14:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02f0c2a2a51275bee2493a5656ecf1b612f1226
        Validity
            Not Before: Jun 12 10:00:42 2026 GMT
            Not After : Jun 13 10:00:42 2026 GMT
        Subject: CN=7b94308f3762ab3c19aa015b9ab258266f191ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:16:7a:9a:91:d6:c9:c8:47:d4:d4:f7:2d:
                    f9:39:8d:41:8c:21:84:9d:bd:c8:57:ba:86:b6:8f:
                    92:ad:bf:aa:2e:03:a7:1a:f1:4f:eb:e5:37:c0:f8:
                    a4:2a:ec:4b:ab:73:55:ac:66:f0:b2:cd:d5:a7:10:
                    26:84:81:85:1f:e4:d4:60:ea:30:f5:42:7b:02:26:
                    86:d5:a4:f8:8b:2a:20:a4:d6:72:15:0f:3f:ac:41:
                    9e:83:7d:9e:e7:6e:1e:66:1e:4a:de:b9:28:a7:0b:
                    bc:ac:7c:26:2e:4c:77:da:66:a4:90:b6:c4:e9:b2:
                    65:a7:f2:95:61:a7:66:c1:c1:a4:6c:16:0d:3c:6c:
                    4b:33:de:ac:a0:a6:8e:28:f1:c6:87:0a:d1:e0:da:
                    dc:0a:0e:15:59:72:35:c0:49:ae:9a:82:d2:ea:46:
                    0f:08:79:98:58:5e:58:b2:ed:4d:fc:76:27:fd:f6:
                    25:d8:6b:d9:0c:00:08:c9:78:cb:36:b7:da:22:14:
                    8f:49:35:97:12:b3:62:2e:6c:9e:d1:ea:ec:3c:2d:
                    e2:4d:a2:2f:01:bf:d1:47:de:cb:a5:02:6a:bd:df:
                    15:ec:e3:5a:a9:da:bd:06:40:2b:69:72:8d:22:31:
                    8e:d1:88:53:7c:a4:e1:15:2e:4c:23:d1:91:28:af:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:94:30:8F:37:62:AB:3C:19:AA:01:5B:9A:B2:58:26:6F:19:1E:C1
            X509v3 Authority Key Identifier:
                keyid:B0:2F:0C:2A:2A:51:27:5B:EE:24:93:A5:65:6E:CF:1B:61:2F:12:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sC8MKipRJ1vuJJOlZW7PG2EvEiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c59162-7bd1-4b8a-a9e3-21ff1120fb72/1/sC8MKipRJ1vuJJOlZW7PG2EvEiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:37:6a:6e:50:8b:69:c0:9b:16:1e:bf:8e:b1:ce:b6:c1:
         da:57:5c:46:6c:9e:62:21:46:a9:a4:be:a4:d3:49:fc:75:cb:
         37:e1:13:cc:2f:66:32:49:5b:7c:4c:ef:c8:22:c0:7a:17:22:
         6e:bf:7d:36:2b:ea:cd:10:1e:2c:73:cb:93:e8:4f:57:58:92:
         f6:c1:df:97:29:56:b3:80:00:64:5e:73:f0:dc:a9:d8:5d:fd:
         09:53:f3:a8:59:14:fe:0e:75:37:0a:c0:cc:db:f7:c3:d9:d8:
         21:f7:a9:d8:29:9b:0d:32:d9:e4:3f:df:df:cf:e7:65:20:a0:
         fe:fb:72:44:72:96:9e:80:48:68:ef:55:f3:f2:21:0d:98:13:
         af:d6:22:e9:c8:00:fe:db:69:64:55:b4:2a:9b:ba:c6:66:74:
         2e:47:ac:60:66:ea:03:01:a8:ee:c5:e4:51:8d:f8:94:0f:6c:
         45:e6:27:ff:27:be:7d:31:3d:70:14:01:b6:90:a7:2c:d1:3d:
         8d:77:ce:4f:49:00:b8:94:e8:3f:67:1e:2b:64:fe:68:40:5a:
         63:fd:c4:dc:ef:55:0a:8f:59:a5:09:54:92:f0:d7:24:e0:c1:
         e2:5c:7e:91:7b:85:94:96:4d:35:d3:bb:85:b6:29:eb:a5:67:
         21:2b:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:09:10 2026 by rpki-client