Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File:                     t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier:          fD3lH9YaLKWx3BWF/puXDzLEFSTX5GmGVP5vYa4+fvk=
Subject key identifier:   BF:34:EE:4B:E9:0D:F2:27:06:20:CF:D5:27:26:D7:D7:4A:5C:CB:92
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer:       /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial:       019EB87CE7608E716B1780723319EE855931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number:          11DB
Signing time:             Thu 11 Jun 2026 21:00:53 +0000
Manifest this update:     Thu 11 Jun 2026 21:00:53 +0000
Manifest next update:     Fri 12 Jun 2026 21:00:53 +0000
Files and hashes:         1: BPWonk1YJrq5k0grAOFs28a78ys.roa (hash: vH3GEq/JyMlXOt+FXRkIPXcscRxAUxYgLT+/b2jWLHo=)
                          2: kZq33BHakZDY4YJudXNmheZzloo.roa (hash: KtUW+9Vb1TNUqTSbu6bQAx1rz4MVZIFaAepB6yKKaic=)
                          3: lU2W_hLzu6vcwdz6WKfVv3aZoVM.roa (hash: Dg4GJqlJxEyMu+sRyXwo6uu0nTdiNWkD77joS0KB4X8=)
                          4: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: y12hCYikspqKmR3jmNLiJff3xdBE0GLrL5aUXKpl97Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:7c:e7:60:8e:71:6b:17:80:72:33:19:ee:85:59:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
        Validity
            Not Before: Jun 11 21:00:53 2026 GMT
            Not After : Jun 12 21:00:53 2026 GMT
        Subject: CN=bf34ee4be90df2270620cfd52726d7d74a5ccb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:7b:e5:7b:3d:63:ae:74:47:08:58:1e:f2:
                    82:dd:e0:43:de:7b:03:74:62:68:ca:de:61:d4:8d:
                    53:41:c2:bf:f1:93:c0:97:0b:76:d3:f1:32:47:23:
                    08:0e:8b:b9:32:87:40:f0:48:06:d3:bb:57:e7:5b:
                    05:90:be:27:ff:22:47:63:fc:b9:80:60:ad:9e:32:
                    83:ec:74:f9:6c:0c:8a:6d:03:3e:8c:68:e7:2e:98:
                    75:11:36:82:28:82:47:88:3e:76:73:1f:06:15:09:
                    5b:ff:dd:8c:f9:78:15:b0:da:10:15:8d:f7:61:d5:
                    31:15:12:d0:35:6e:62:d3:c9:ad:d5:2a:19:8e:86:
                    ba:b5:01:81:ac:7e:ec:98:8f:56:23:9e:e7:74:5b:
                    9a:fd:5e:92:ab:de:7a:3c:12:df:e8:16:68:23:29:
                    09:f4:42:cd:29:b4:11:1b:35:8d:5a:00:19:1e:cf:
                    1d:9e:53:eb:15:d4:94:79:40:40:5c:b8:49:79:80:
                    4b:76:9a:2a:a6:01:5e:ca:01:5c:ac:da:93:a1:6c:
                    ba:e6:bd:00:a8:a1:74:8c:9f:2d:33:17:b9:ba:ba:
                    ed:a3:c6:24:97:19:57:91:60:95:0f:3e:f4:a0:01:
                    d3:d6:cf:73:bf:c6:43:91:1a:9f:c5:17:b9:32:66:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:34:EE:4B:E9:0D:F2:27:06:20:CF:D5:27:26:D7:D7:4A:5C:CB:92
            X509v3 Authority Key Identifier:
                keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3c:7a:15:3b:07:e9:9a:f9:da:07:8e:17:9f:04:31:29:b1:
         d8:49:cf:f8:f7:09:32:f3:98:f2:20:e4:76:de:53:94:69:f8:
         03:bf:7a:d3:1a:fc:01:0c:f0:5f:8d:36:ce:3d:7c:44:4f:5f:
         21:b9:9d:0f:62:08:2c:1f:7c:3b:a3:3e:1d:62:9f:ac:10:86:
         50:53:f2:4f:a1:76:2a:4c:f4:cd:18:f1:8e:f1:7e:26:8d:58:
         0b:91:23:35:e8:7f:37:c3:38:9d:1c:1d:14:df:c4:7b:b0:61:
         30:3c:77:6b:68:75:4b:ca:31:fc:3f:b7:57:c8:fb:67:33:77:
         c4:b7:01:34:46:c6:8d:5a:63:8c:7f:f2:2d:02:0b:cc:28:03:
         71:65:d5:38:63:ac:d1:21:b2:23:e5:df:61:89:67:4a:27:d1:
         e9:2a:4f:4c:b6:e4:9b:98:03:47:8f:51:2a:f5:e9:90:d4:a8:
         0e:f6:68:2c:a0:59:e6:58:b5:f0:87:0f:91:29:dd:09:50:8e:
         e5:70:b1:eb:fc:c2:6a:09:a8:ac:1c:b2:f0:7f:10:d9:18:5e:
         40:ba:a9:1e:39:b6:3d:ec:49:33:32:db:f3:eb:6f:c1:25:ef:
         aa:bf:26:4f:fa:68:0b:e4:47:88:f7:74:bd:6c:ff:66:85:16:
         a6:bb:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:07:51 2026 by rpki-client