Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
File:                     MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json)
Hash identifier:          5HsG36MrmoDQgdgd/Kznn42cmhVuDWRccBCqWuqraV0=
Subject key identifier:   B5:D2:AA:8B:59:D5:25:A0:5D:0C:80:42:7D:05:4B:AD:35:AF:A3:B5
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Certificate issuer:       /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial:       019EE21EE3995FD1F58CCCA58FAE295AF995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
Manifest number:          1978
Signing time:             Fri 19 Jun 2026 23:02:15 +0000
Manifest this update:     Fri 19 Jun 2026 23:02:15 +0000
Manifest next update:     Sat 20 Jun 2026 23:02:15 +0000
Files and hashes:         1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=)
                          2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=)
                          3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: T98Wr+HCzoD6YXDVzDvNnM1rwri4bKJnjjuicYiydBk=)
                          4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=)
                          5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=)
                          6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=)
                          7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=)
                          8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=)
                          9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=)
                          10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 19:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e2:1e:e3:99:5f:d1:f5:8c:cc:a5:8f:ae:29:5a:f9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
        Validity
            Not Before: Jun 19 23:02:15 2026 GMT
            Not After : Jun 20 23:02:15 2026 GMT
        Subject: CN=b5d2aa8b59d525a05d0c80427d054bad35afa3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:24:7b:c9:5f:54:de:df:90:de:06:40:8b:
                    b9:c4:63:d5:42:5a:ea:b7:f9:d8:b0:39:ac:c2:a8:
                    99:44:ec:48:09:49:04:5e:ec:d7:90:1a:ee:a7:29:
                    e2:33:8f:be:99:f6:7e:51:57:9a:b6:1f:aa:eb:1d:
                    3a:bd:49:37:84:fd:7a:1e:34:46:be:29:5b:8f:84:
                    0a:b8:27:5a:98:77:c0:2d:0c:a8:c5:60:b9:0b:3b:
                    6a:4e:15:c0:73:41:27:43:b6:0a:fe:91:38:0d:cf:
                    ce:d1:d2:07:71:c2:f4:92:54:58:b7:b5:1c:af:81:
                    d3:09:55:97:a6:13:8f:4c:b8:1d:0d:0c:54:0e:99:
                    d5:06:09:6c:3e:b2:8c:d8:1b:84:86:e6:0e:f6:58:
                    27:72:35:19:77:f8:ad:f8:b4:6d:71:7b:1b:78:53:
                    85:f0:b4:db:ad:37:cd:b1:f1:3b:c4:6f:d8:c0:f2:
                    b0:1a:9a:9f:c4:89:4a:a0:b0:35:3a:af:4e:ca:dd:
                    22:2a:cb:ca:6f:be:1e:f1:1b:6f:69:27:8d:ab:1a:
                    78:36:ed:92:2a:cb:ba:15:b2:81:48:35:cd:66:79:
                    dc:a3:d5:41:bf:8e:1f:ec:6a:8b:58:e2:1e:ec:af:
                    e0:65:52:13:67:31:18:de:ed:ed:8b:90:f7:1a:99:
                    4c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D2:AA:8B:59:D5:25:A0:5D:0C:80:42:7D:05:4B:AD:35:AF:A3:B5
            X509v3 Authority Key Identifier:
                keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:dd:28:9c:d6:ca:cd:7d:59:fc:7e:b7:22:5a:9c:ce:8c:20:
         9e:64:37:4e:76:da:53:67:05:32:19:b0:ee:4b:6d:dc:1a:91:
         4c:f0:e6:bc:d5:94:7c:39:54:8e:be:1f:79:73:fb:7b:a6:1b:
         a7:50:6e:90:d7:55:09:0d:aa:c4:22:bf:1e:2b:dc:e0:1e:6f:
         63:fb:e4:2f:6c:b9:e4:8f:ed:80:25:06:db:45:b9:0f:db:08:
         59:26:70:ab:b5:79:31:4b:78:dd:dd:84:6c:68:c6:50:16:40:
         c2:61:46:9a:6a:90:39:94:bf:88:0a:74:71:c3:cd:5c:b6:d3:
         f5:f3:dd:0e:b1:ec:e7:8d:41:89:95:e7:48:49:9d:22:eb:bd:
         65:3d:e8:17:d4:fb:36:e9:76:d6:6d:82:8e:41:9f:ef:d1:71:
         47:74:b6:db:ea:63:52:83:1b:8f:56:a4:e4:fa:b4:44:b7:04:
         1e:85:8f:c3:fa:1b:2f:b7:74:fa:58:91:15:4b:77:fe:68:b3:
         09:75:fa:04:07:59:49:63:c4:43:61:5f:84:0a:49:c6:0f:d3:
         5d:34:da:78:36:28:89:41:a6:3b:1b:88:07:9d:09:59:cf:f0:
         be:3a:2e:f3:5b:76:f0:ca:9f:5f:72:eb:72:78:24:a8:58:15:
         4f:a0:6f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 03:18:09 2026 by rpki-client