Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File:                     p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier:          H/ays+iTIE5PcxgsxfGjUTFK3MHEd1gZuoT7UTqr5Nc=
Subject key identifier:   9D:4A:27:EA:20:9E:00:42:A9:BD:87:2D:7F:48:9B:53:1C:36:D8:FD
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer:       /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial:       019EB7A0B5312A593B9402B46F62ACDC1B6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number:          1970
Signing time:             Thu 11 Jun 2026 17:00:23 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:23 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:23 +0000
Files and hashes:         1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
                          2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
                          3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: kbxAoUwUZV95bCI+mn+4G9O91RNPUEVp/PqMkQg/pUk=)
                          4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a0:b5:31:2a:59:3b:94:02:b4:6f:62:ac:dc:1b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
        Validity
            Not Before: Jun 11 17:00:23 2026 GMT
            Not After : Jun 12 17:00:23 2026 GMT
        Subject: CN=9d4a27ea209e0042a9bd872d7f489b531c36d8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6c:6f:26:6c:ad:01:c7:ce:d5:02:31:df:4f:
                    24:7c:b2:47:f0:ad:81:e7:c6:c5:4a:82:ec:fd:42:
                    43:79:ff:74:47:a7:c9:d2:bf:69:42:99:88:00:79:
                    26:bf:2e:fb:18:6c:af:64:6b:2d:01:41:3b:47:b0:
                    76:4c:bd:55:49:0b:a3:20:06:f1:18:a5:76:fc:2a:
                    d2:74:07:81:8c:9f:60:ff:52:86:21:c5:b2:02:9a:
                    e0:9d:96:1a:be:eb:5b:f8:e1:85:d3:76:9a:5a:2f:
                    0c:eb:66:5a:f0:e3:ea:e6:5e:65:2c:41:96:ae:2e:
                    bf:97:0c:c1:d1:3a:37:45:44:43:59:97:cf:6c:43:
                    18:98:aa:24:a5:87:81:bc:06:24:c2:3a:ce:f7:4a:
                    70:b0:ec:cf:14:09:4d:cf:13:2d:41:bd:7e:1a:bc:
                    34:92:ea:17:b8:1d:ae:e6:fc:88:2e:69:6f:e4:5a:
                    04:e1:31:a5:2f:d9:3d:9b:51:18:11:fc:d4:7c:11:
                    4c:55:0c:20:9b:fa:c1:e5:72:94:38:00:56:5f:5a:
                    0d:0f:22:98:40:1f:f8:ad:0f:ba:c3:ca:af:16:e5:
                    1e:2e:9d:de:31:03:18:c5:75:5c:cc:cb:f1:53:cc:
                    8d:e2:5c:ba:f3:ab:8f:8d:53:2a:58:b2:f5:d3:86:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:27:EA:20:9E:00:42:A9:BD:87:2D:7F:48:9B:53:1C:36:D8:FD
            X509v3 Authority Key Identifier:
                keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:a4:dc:33:81:36:df:f6:4c:94:a4:e6:93:72:f9:a1:74:05:
         60:24:e8:32:73:59:9f:2d:93:91:55:e8:e9:a3:c7:da:83:f9:
         9a:1a:ba:81:06:72:d3:bf:23:d7:b3:7c:c6:5a:2f:1e:14:70:
         f0:db:9b:9a:6e:33:73:0b:aa:af:1a:c7:0f:8b:0e:9c:7d:2c:
         48:09:4e:1f:41:d4:00:c7:86:e3:73:01:a0:63:2a:69:8e:c6:
         a0:d2:45:c7:ed:f8:eb:16:2b:7d:59:e8:b8:78:53:55:03:65:
         8f:d3:ef:9d:f9:64:40:8e:92:95:85:0b:23:ed:d0:f4:f8:a4:
         99:37:4f:27:23:16:5d:48:f9:80:67:4e:0e:66:c0:b2:75:59:
         24:0a:00:ca:e1:96:58:e2:56:92:63:71:9f:98:c9:9f:6b:92:
         b2:03:68:49:6c:d3:01:17:36:d3:a1:8d:24:5b:51:af:a7:e4:
         2b:a4:7c:a8:d8:4d:e9:71:3f:5e:1d:39:26:64:3b:c5:b8:47:
         dd:dc:12:b2:94:0c:c1:13:14:1e:51:b8:84:5e:1c:bf:41:c6:
         e2:ca:21:46:a8:c8:cd:79:70:59:a8:a6:40:61:d4:60:6e:ab:
         bb:e8:72:f4:54:b3:44:76:b2:26:bd:2b:0d:33:5c:d4:6d:0e:
         8d:c2:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:38:47 2026 by rpki-client