Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
File:                     v66jWK7ut9C54Pk9I_Z9KafsYsg.mft (raw, json)
Hash identifier:          1glvi7QNnEVLuPmoImd+PMNDW2tmo1lVYJ+yrk67KwU=
Subject key identifier:   DA:1B:75:BD:5D:67:56:A7:ED:A3:0A:3D:B3:79:CE:EE:50:F8:28:46
Authority key identifier: BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8
Certificate issuer:       /CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
Certificate serial:       019F10E55D3EB2D980C08F530D95912C9303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
Manifest number:          1259
Signing time:             Mon 29 Jun 2026 01:01:34 +0000
Manifest this update:     Mon 29 Jun 2026 01:01:34 +0000
Manifest next update:     Tue 30 Jun 2026 01:01:34 +0000
Files and hashes:         1: 4cK2toKGStLvtVpJDp0UztrPgH0.asa (hash: ZNY72R7qVZc/Zu94pUGocbYyKhf7trhy+TL1EY5kc7Y=)
                          2: CHYxKsoN6IeVA10L6kUmg387K4E.roa (hash: mPumrjNcFYvdRL5bdDvvsuVOxWBNEvLLvkR9dRXxG+0=)
                          3: HEYAnN_9hlNawT0gfEq7cBceqz4.roa (hash: I1MGXqqgieCZdZAjgnAyAg80Pf2U7lhaBnlyBhpIJso=)
                          4: SDoF-WCqCPjknLT2mM2_4GQ1V00.roa (hash: 9DCTVTfRoXNgWVh36MOAbrslGxs/tC2WsKyt8y4+r+o=)
                          5: gDYEALi2Hj-tupJ_rsL3s8tznlE.asa (hash: 68FX2IHGNZcEoY9bCkB81Lljsq+1FZmQtZVe4paP9Q4=)
                          6: uWtL-ZUWThEBX2Kk-wgOPUghIXk.roa (hash: 5DR/R0A/IU4wtB24PmXGRhwrZ3nwhIVVut65+Q4hkXk=)
                          7: v66jWK7ut9C54Pk9I_Z9KafsYsg.crl (hash: 8hFbE++0gO9VxB6qSGcNeQ0R7Pk3EuOP5QJsFlSBM/U=)
                          8: wshhYohjqXbtPI9N4_VP7v1zc_4.roa (hash: K9LIAOWThDljnJHgTvgI98ZZwaUx513/nLgNGKabvmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e5:5d:3e:b2:d9:80:c0:8f:53:0d:95:91:2c:93:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfaea358aeeeb7d0b9e0f93d23f67d29a7ec62c8
        Validity
            Not Before: Jun 29 01:01:34 2026 GMT
            Not After : Jun 30 01:01:34 2026 GMT
        Subject: CN=da1b75bd5d6756a7eda30a3db379ceee50f82846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0f:bf:57:bb:8d:38:c5:d2:16:57:e2:da:7d:
                    ed:e7:77:b5:29:31:86:04:47:0f:d0:5a:d9:29:47:
                    d3:7c:f6:af:b4:41:d5:38:e4:7a:40:d5:de:22:95:
                    41:33:8c:79:95:ac:03:6b:c5:ed:a5:11:e8:97:97:
                    0c:97:d0:5d:42:32:c1:39:fd:c7:00:c2:40:08:9e:
                    b6:37:df:22:a4:a0:72:30:bd:3f:11:48:fa:fe:63:
                    06:ac:a6:22:e5:a6:64:12:6a:2c:38:9d:e8:c0:a3:
                    71:66:0a:38:d3:83:da:a5:9b:30:bd:c1:f0:39:75:
                    40:6e:09:4f:31:6b:f8:73:fa:00:e6:2c:7b:77:22:
                    2d:4b:3b:f2:24:c2:11:2d:11:d7:0f:c4:e9:57:63:
                    21:67:6a:9c:1b:d3:83:b6:3d:05:f0:56:26:49:72:
                    77:19:5a:f2:03:6f:25:2c:bf:fd:09:57:ed:a0:3e:
                    50:24:15:2d:04:32:38:cf:43:97:5a:f1:db:a6:55:
                    64:16:59:78:97:fe:0a:de:de:5e:eb:44:20:9d:c6:
                    9c:09:60:dc:66:a3:99:96:1e:05:37:58:c2:93:55:
                    26:af:e6:68:98:91:4b:07:1d:a9:7c:4c:b5:e3:fd:
                    15:79:30:01:16:d5:51:29:15:af:d0:00:7e:54:8c:
                    36:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1B:75:BD:5D:67:56:A7:ED:A3:0A:3D:B3:79:CE:EE:50:F8:28:46
            X509v3 Authority Key Identifier:
                keyid:BF:AE:A3:58:AE:EE:B7:D0:B9:E0:F9:3D:23:F6:7D:29:A7:EC:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v66jWK7ut9C54Pk9I_Z9KafsYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/288416-a46e-49c3-9337-249ce0c312b3/1/v66jWK7ut9C54Pk9I_Z9KafsYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:33:39:04:c0:fa:40:31:6d:77:41:28:0c:a7:92:02:f5:4e:
         7e:d4:57:df:ce:ff:91:c9:77:32:87:ea:b5:8f:82:6d:bb:19:
         28:ae:70:c0:e4:38:84:9f:9d:3c:19:2a:6d:94:b2:3f:7e:0b:
         4b:af:a0:50:4a:3d:86:b9:29:60:80:7f:96:b0:22:de:71:5c:
         14:10:63:59:43:64:9a:d2:92:24:66:58:52:4f:48:ee:58:eb:
         c3:01:bc:9d:1c:e9:0e:fe:49:df:ed:d5:28:ee:99:46:55:5a:
         2a:f7:d1:55:e8:e4:e0:23:05:25:b6:a2:34:aa:7f:4b:66:a0:
         82:a3:4e:b7:4a:a6:72:9f:67:2a:3f:b5:6a:74:26:0d:c1:6b:
         24:6d:a1:4c:6f:ea:47:a4:63:a8:bb:44:db:fc:87:06:6a:68:
         81:9e:93:89:f0:eb:0a:98:74:79:ac:d2:c7:ca:b3:92:0e:b3:
         6f:0e:14:17:d0:c8:16:0d:60:08:42:a9:40:49:5b:38:83:31:
         0c:03:07:08:e6:98:f3:fc:99:f5:d4:8a:46:13:41:c4:8b:9d:
         81:45:d0:1f:65:25:b5:80:de:ec:34:9f:d9:79:8a:09:00:f7:
         8e:e4:49:fe:7e:2b:c1:b5:b7:43:c1:64:f8:ab:36:9d:79:9d:
         e7:ef:be:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:31 2026 by rpki-client