Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File:                     _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier:          0UW58kJCqIcbrGiHzXxAUtfzJOlNmgDUrrPnU7IGwEs=
Subject key identifier:   20:EF:89:6A:B6:59:34:6C:49:02:50:D7:3C:64:29:95:BA:22:0C:12
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer:       /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial:       019EE6D6E1AEC180D40FF1B3F352E5DFABCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number:          104F
Signing time:             Sat 20 Jun 2026 21:01:42 +0000
Manifest this update:     Sat 20 Jun 2026 21:01:42 +0000
Manifest next update:     Sun 21 Jun 2026 21:01:42 +0000
Files and hashes:         1: 3quKn702Vi5YqrEVXzFPYc93s0o.roa (hash: Ux1SJ1+gpjARAxZ3o2ImnrNmQoc+jmNEaDOBhy8YXGc=)
                          2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: k6pAcbR8Bt32Yxg+hC6rgbfEPiMPphys09A2Xv9MUEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 21:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e6:d6:e1:ae:c1:80:d4:0f:f1:b3:f3:52:e5:df:ab:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
        Validity
            Not Before: Jun 20 21:01:42 2026 GMT
            Not After : Jun 21 21:01:42 2026 GMT
        Subject: CN=20ef896ab659346c490250d73c642995ba220c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:17:d5:3a:99:2a:de:f5:2a:ee:4f:fe:b2:c7:
                    cf:d8:12:52:5c:41:54:d4:9f:5f:6f:3c:b6:83:de:
                    63:3a:0b:63:ab:ad:b5:70:a9:ff:ce:96:18:9f:c0:
                    34:19:ee:53:25:6b:4f:aa:a4:fa:52:d7:c6:84:04:
                    e8:e8:9a:f8:6f:71:c8:85:f2:e8:d2:fe:b7:9b:d5:
                    9e:ee:69:cb:13:85:7a:80:1f:7e:16:a4:0c:0f:55:
                    7a:05:89:64:e3:dd:da:93:0c:fe:42:ca:65:ff:95:
                    d6:23:5f:64:c0:14:e2:60:19:7e:30:3c:51:1e:22:
                    66:d8:87:6a:84:90:30:a0:98:33:39:e3:47:f7:fe:
                    1f:15:82:6b:fc:b7:ba:bf:a2:9e:04:e6:cc:48:6d:
                    84:1d:75:50:13:c3:b2:4d:90:cc:5a:17:ee:10:e1:
                    88:03:f9:a9:d6:8a:bf:5a:c0:35:1e:3e:45:ff:36:
                    f7:9f:e8:74:db:91:80:c0:2b:3c:31:4c:83:55:63:
                    6f:75:04:59:68:7d:c5:36:5e:95:e2:00:42:95:71:
                    16:11:b9:c9:7d:9c:2d:32:de:a6:34:e2:ce:32:d4:
                    31:b6:5d:c0:97:b5:13:da:a1:0b:d7:26:aa:e2:eb:
                    03:c5:b5:d8:43:29:d3:fe:12:e1:f9:a4:1e:28:31:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EF:89:6A:B6:59:34:6C:49:02:50:D7:3C:64:29:95:BA:22:0C:12
            X509v3 Authority Key Identifier:
                keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:ea:46:f0:cb:db:b0:aa:c0:10:6b:eb:27:3e:e2:b3:28:
         df:8e:a2:b9:b9:2a:06:88:04:cb:7c:00:e6:05:9c:98:51:bc:
         d6:9f:ac:35:58:b7:46:60:b6:0f:bf:0f:e2:d8:5e:82:be:92:
         6c:bd:bc:c5:2e:fd:2c:6d:6f:f6:3a:4d:24:87:59:7b:76:1f:
         8a:37:82:e1:7c:7f:1e:f0:1b:b7:5c:9a:8d:5f:55:9d:2a:ac:
         78:54:92:60:55:06:d9:f1:8e:e7:41:ee:d2:8e:64:9c:29:3f:
         79:01:af:97:cd:ff:4b:9d:35:27:6d:89:ed:c3:7b:d8:5d:00:
         1b:d5:dd:ad:d4:73:22:e1:2c:b0:d2:ea:45:d2:d6:6d:b0:29:
         93:cb:3f:37:46:26:3c:4e:0f:f2:25:6c:a4:cf:2c:a1:05:69:
         e1:90:c5:43:dd:94:5a:78:5b:26:a3:42:d3:52:46:1c:b8:e4:
         71:4b:86:da:08:0d:b0:db:6e:9b:9e:8d:6f:ee:e6:f2:3c:00:
         99:92:bb:09:88:fb:e3:fa:60:02:67:60:92:cf:13:27:32:48:
         48:bb:05:40:87:f8:9e:ca:16:56:67:7f:e2:d8:23:fb:b7:c5:
         15:b2:5b:52:57:c4:6e:6f:20:ba:84:ff:bf:f5:ef:90:b5:cc:
         5d:2c:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:06:32 2026 by rpki-client