Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File:                     aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier:          j10x9UgvtfmXmVX2k5AOXmxjkmG0cpXdCKjynQC3oh4=
Subject key identifier:   F8:84:A9:F1:E9:8C:9B:4D:5B:A4:C3:73:28:34:82:43:63:9E:95:C5
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer:       /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial:       019EB845631BBEEA03EB7FCEF69A79F6E211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 20:00:15 +0000
Manifest this update:     Thu 11 Jun 2026 20:00:15 +0000
Manifest next update:     Fri 12 Jun 2026 20:00:15 +0000
Files and hashes:         1: MFYkRU3grNRPvLbyPaISwxG8sRc.roa (hash: Kn7dq6VQMBUK2el7CpBxhmeZzkXVRbxFBsXov0HWD6Q=)
                          2: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: LGoZGriXBOnWLfo3Koxvo5YHnCFjA/twF/mrH504gn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:45:63:1b:be:ea:03:eb:7f:ce:f6:9a:79:f6:e2:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
        Validity
            Not Before: Jun 11 20:00:15 2026 GMT
            Not After : Jun 12 20:00:15 2026 GMT
        Subject: CN=f884a9f1e98c9b4d5ba4c37328348243639e95c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fc:55:b6:be:b2:a9:8b:ff:a2:cf:0b:5a:67:
                    fa:8b:a3:14:5d:a9:f3:63:e3:82:e5:31:b9:ea:bb:
                    f6:0d:5d:f8:a9:86:26:9a:92:d7:a1:b0:29:af:32:
                    0b:96:05:3e:74:79:f5:02:86:51:c8:d7:5c:ac:c4:
                    03:5a:b5:76:00:0c:ac:c4:60:e3:14:28:ab:49:8f:
                    8c:ad:11:83:55:e1:54:aa:58:55:96:d4:99:b7:4b:
                    34:ef:ec:f9:cd:e8:41:31:d6:6d:78:e4:19:dd:10:
                    ba:a4:33:16:03:a8:f6:e8:00:de:c4:4e:10:ed:59:
                    a5:f2:98:3b:4f:c7:58:db:51:f5:3c:28:d0:c7:c4:
                    8e:5c:81:c5:02:44:81:87:cd:72:71:5e:ff:0c:2e:
                    2a:19:b9:3e:3f:0a:a5:ed:68:84:9f:4a:e9:a7:61:
                    ec:74:24:fe:b0:fd:19:b9:45:25:e4:6e:31:d9:05:
                    b3:08:ae:40:b8:b6:5d:e9:07:04:71:6c:2c:11:79:
                    32:92:c4:09:66:d3:c4:e4:7c:4d:00:2f:06:09:c3:
                    20:7a:ca:8f:13:f8:0f:8f:a7:a7:0f:6f:75:e7:2e:
                    07:f6:bc:a7:5d:3e:ae:09:6f:73:9f:6d:dc:90:52:
                    0b:70:6a:06:8e:6a:92:74:f3:d5:ec:98:b6:86:db:
                    ba:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:84:A9:F1:E9:8C:9B:4D:5B:A4:C3:73:28:34:82:43:63:9E:95:C5
            X509v3 Authority Key Identifier:
                keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:1a:03:7b:94:49:19:83:91:17:ec:ad:27:a9:ca:bf:08:
         6b:77:a9:6b:2a:83:71:26:44:1b:f2:48:ee:88:5e:f7:ce:c2:
         0e:55:15:1c:04:0d:16:c3:2d:88:8e:6a:a6:2c:e5:26:bf:c0:
         e5:f4:c7:c1:ec:aa:85:d3:94:5f:c6:2b:8e:3f:87:1e:ea:dd:
         39:4c:fa:f9:72:2c:fc:76:f8:2e:f0:a0:13:fa:a6:fb:7b:cc:
         4b:3c:82:62:6a:e2:2d:93:47:85:1e:ae:aa:c1:44:a8:af:f3:
         84:aa:ae:5b:3a:18:8c:bf:93:98:94:79:ae:4f:62:e8:a6:d6:
         e4:b5:19:36:2f:87:5c:c8:be:97:8b:bc:23:ac:72:88:6a:95:
         bf:ec:7f:1b:e9:6a:58:29:3b:01:a7:1c:cd:9e:0a:be:78:f7:
         9e:67:16:23:db:87:b1:49:e1:d1:81:8a:95:5b:b7:ad:04:97:
         ed:32:44:15:a4:78:1d:b1:cd:9f:57:a0:a7:fd:7d:e4:09:e7:
         11:db:ad:e1:68:ee:ed:7c:21:aa:56:97:33:b7:84:cc:8a:c9:
         0b:82:aa:8a:e8:bc:e8:d5:b5:57:71:99:59:37:75:c0:9d:c4:
         b6:9b:5d:ea:6a:70:50:b2:52:f5:6e:ff:c7:ea:7d:46:f1:1c:
         42:c6:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:40 2026 by rpki-client