Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          wOZqrgqYicpdKV+Uwegv7OOcNu9rJUMiTWs9EhzOCd0=
Subject key identifier:   F6:B9:4B:F1:54:53:A2:22:A6:1D:95:4E:6B:A8:32:90:91:4A:E1:1C
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       019EB7A17A87ACA8E6CB24DC2FE539CF9F54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 17:01:13 +0000
Manifest this update:     Thu 11 Jun 2026 17:01:13 +0000
Manifest next update:     Fri 12 Jun 2026 17:01:13 +0000
Files and hashes:         1: 8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa (hash: ouWFvShqIiSVhc7XwLMg1RvjjhIXPIC2TEXQAFnoIdY=)
                          2: NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa (hash: CGIiGH/Yy5fY3u/pl6DzCecfrnnhokhuxjI5pup6gIw=)
                          3: W0KBm5HEcFXtVXifacsZfmIqvhY.roa (hash: W8Izm3ucgflTtw/kXP/v/wyRWH1PXzlBhUPfbe4tfxo=)
                          4: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: in+4HisB2gSU6p/mDtlgncJaZffUq1Rbawye88oZkuk=)
                          5: hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa (hash: 2ZVK7MUTm4O+cKvEyp+XBJuaZn8IX75XJYPFZQbyyqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:7a:87:ac:a8:e6:cb:24:dc:2f:e5:39:cf:9f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Jun 11 17:01:13 2026 GMT
            Not After : Jun 12 17:01:13 2026 GMT
        Subject: CN=f6b94bf15453a222a61d954e6ba83290914ae11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:3f:84:48:26:40:f9:c0:17:e2:dc:b1:31:
                    84:dd:07:36:6f:67:e7:31:c1:04:a7:96:f6:d5:e7:
                    c0:45:3f:d8:c4:0b:c2:e4:21:4c:7d:9e:d8:46:fc:
                    1e:d6:5a:c5:16:f0:6c:ba:85:03:05:04:c3:86:01:
                    02:af:67:27:9a:e9:10:33:fa:32:9b:4a:e0:40:01:
                    a3:0d:75:60:2e:85:0a:80:15:cc:89:f7:46:c1:16:
                    78:81:fd:ec:6f:c7:82:69:2b:7a:1b:3d:86:2d:4c:
                    31:3c:75:01:2c:c0:4e:b9:0c:81:a4:9e:4c:47:2f:
                    68:8a:bd:a6:5e:5b:63:45:8f:9e:fe:86:85:0c:cc:
                    12:c7:ac:91:59:9f:63:9d:ff:46:94:c6:1a:d6:e6:
                    4e:4b:cc:d6:b0:6c:60:8a:c6:07:c3:18:70:bb:e8:
                    b8:1d:f8:6a:c8:6d:44:64:f4:88:c7:ec:84:8f:0f:
                    ff:fc:91:91:6b:c4:6a:30:5b:a9:28:64:1a:6e:45:
                    d5:cb:8a:18:b7:07:30:18:eb:e0:27:e7:f2:4c:73:
                    77:6c:cf:b5:cc:38:df:18:9b:c8:59:85:31:6f:0f:
                    77:61:98:17:06:aa:26:72:40:c8:2d:72:47:f5:04:
                    97:ea:d9:d7:ae:90:4f:86:38:82:c0:ce:e7:05:7f:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B9:4B:F1:54:53:A2:22:A6:1D:95:4E:6B:A8:32:90:91:4A:E1:1C
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d2:b8:81:6b:a9:4a:f7:66:5e:34:dd:6d:4a:75:c9:b2:66:
         f8:e5:d2:67:7b:95:a5:25:f8:68:06:74:34:18:dc:6d:5e:4a:
         2a:c3:33:38:0e:7e:e6:e3:e7:37:90:6d:71:1b:cf:6d:72:a2:
         36:0b:fd:c0:d3:d2:ed:49:52:d2:6a:44:a9:af:6b:2a:b6:ff:
         e4:74:f2:6e:01:0d:b4:f4:3b:95:f2:23:11:c9:81:f0:eb:22:
         c3:4e:3a:e2:6c:cf:cd:3b:bb:e8:40:0f:e7:4d:4b:b0:cf:ad:
         01:e9:ae:00:02:fe:5b:db:39:33:f3:5e:88:ca:74:3c:5a:8e:
         e8:cc:3a:89:cf:d7:d1:96:ca:a1:65:ad:b1:52:54:d6:40:ac:
         b0:41:38:26:66:6f:8b:45:b7:c5:cd:a7:38:ab:a5:4a:85:4a:
         bd:43:96:d3:b6:7c:91:28:0c:c4:3e:fb:4e:c4:a6:0a:86:c4:
         ca:0f:7e:38:3e:4d:e4:9a:31:3f:b6:c9:7d:10:ac:2b:f2:25:
         00:2f:4f:84:9c:98:8b:d2:dc:a8:02:3c:5e:fc:20:6a:12:f2:
         5f:81:70:5d:ff:d9:f4:c5:eb:ef:67:03:6e:55:3c:ea:3b:86:
         bc:d7:0b:02:ba:c2:69:be:5c:bb:ba:32:ef:1b:2f:57:a7:c9:
         8b:2a:43:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:11:42 2026 by rpki-client