Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File:                     tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier:          V8TY1swtogxhY4sbZg2Yhss+lB9ZKFg/3slXqzktyvE=
Subject key identifier:   32:A3:48:53:33:20:38:14:7A:41:C9:7F:38:E0:8B:D7:D6:EA:6A:4A
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer:       /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial:       019EB9213C2C50DEA33578C8A7FA5F3E754F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number:          0981
Signing time:             Fri 12 Jun 2026 00:00:23 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:23 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:23 +0000
Files and hashes:         1: A_-h6j62GakTf8sVYSZUPDVBMR8.roa (hash: csIAxW9bXtziqhqyhaEg7C2GF8tHOgSMTxW10V1Xvoc=)
                          2: Bl3sRdVXNfJpY6b4S8cUpd5mA1I.roa (hash: Tra0gJRg7Sdu8UJqi6AHrAI7bigGVXmLkWidwg3C4tQ=)
                          3: LZoD34sDnrN3y_73QTX2kyN9b6k.roa (hash: IoZnnALkgT6FHthQCMqgOrKOzFNDYA7UUiSgGhGeNdE=)
                          4: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: D+tINcgNAw6wltrZ5iebAcFWgDSNyybIHhU23n8qHqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:3c:2c:50:de:a3:35:78:c8:a7:fa:5f:3e:75:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
        Validity
            Not Before: Jun 12 00:00:23 2026 GMT
            Not After : Jun 13 00:00:23 2026 GMT
        Subject: CN=32a34853332038147a41c97f38e08bd7d6ea6a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:2e:7c:bf:be:90:7a:29:b2:6e:d9:22:9c:
                    aa:f0:34:ba:b3:3e:4e:f7:75:0a:a4:92:84:f1:f9:
                    1a:7c:7e:a9:3d:69:a3:cb:1a:be:a9:01:c2:40:3a:
                    38:56:00:dc:7c:f5:f3:3b:b2:08:6b:cf:4b:a3:ee:
                    e6:11:4f:a9:3a:62:53:6f:d5:84:87:a0:ba:00:80:
                    fb:f2:6b:60:81:07:c6:7f:f7:72:69:f3:9b:af:d0:
                    6f:fa:7e:23:36:3a:0e:ef:71:50:46:52:50:70:45:
                    c1:f4:e6:31:55:d3:ea:9c:b6:9b:f9:03:8a:9a:34:
                    84:e5:30:6e:85:9a:d7:15:cf:89:c3:c5:c4:1d:70:
                    d3:bc:7a:70:7e:e1:8b:38:2f:b6:6a:22:b9:47:b3:
                    25:34:8c:8d:fd:de:aa:02:46:0a:ee:49:98:e7:cc:
                    37:56:fa:bd:fe:c0:b6:73:11:c9:4b:a0:37:f5:7b:
                    8f:f7:74:9e:72:c8:1a:6b:74:d0:55:26:cc:5b:75:
                    6b:79:6c:36:79:69:ab:be:89:c6:85:42:a9:9e:86:
                    cc:ca:18:17:b0:04:ef:a2:85:cd:49:5d:06:0d:ec:
                    5e:5e:5c:8c:f2:3a:c5:08:86:ef:10:be:b0:a3:42:
                    cd:88:27:26:2e:c8:d4:00:e4:b5:8d:86:fc:4f:d9:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:48:53:33:20:38:14:7A:41:C9:7F:38:E0:8B:D7:D6:EA:6A:4A
            X509v3 Authority Key Identifier:
                keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:81:f4:2c:11:a6:4e:21:d0:47:3a:b0:72:63:86:51:a4:ee:
         db:0c:ed:ff:2d:76:26:8e:38:61:79:ed:2e:e6:1f:cf:ba:03:
         58:74:b7:04:e9:d6:b4:c4:0e:a5:78:bd:5e:7d:22:90:82:be:
         6a:bf:b5:a3:7e:36:68:37:82:43:be:b8:ea:06:5d:4b:5b:87:
         e3:11:f8:42:c0:da:d0:52:b3:55:2c:b9:39:ea:8e:19:02:9a:
         7a:d8:64:d9:47:ef:49:ba:6a:c9:75:1e:72:e6:cd:30:ab:4d:
         b4:1f:dd:b8:cc:7a:71:e5:a0:25:a3:67:fe:b8:d2:7f:6c:1c:
         0f:64:d1:20:0b:cf:b4:4f:07:89:48:eb:7e:7f:f1:04:3b:8b:
         9c:97:eb:ca:fc:50:bc:3d:3b:80:21:a4:ae:97:e3:d0:2c:0c:
         30:16:4c:d9:70:38:0f:b9:81:84:84:90:c2:a5:1a:9f:19:81:
         7e:66:7f:c2:66:29:57:48:5c:3f:07:01:88:98:4a:fa:30:7b:
         2d:11:b7:55:74:e4:c1:ea:76:0c:56:23:fb:63:8f:9d:67:9f:
         ea:87:c6:9d:97:5e:46:26:c0:b6:d2:c6:36:80:80:11:d8:b0:
         29:ed:1b:81:1f:c8:2c:e1:e1:af:9a:50:9d:cc:48:97:b7:5b:
         67:a7:f8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:22:07 2026 by rpki-client