Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          W3GsZTMjTcQ0SRe6a5ZttTCkTPM1dSvCN1MMek5uTOM=
Subject key identifier:   8C:70:A4:4F:CF:9C:FF:57:F9:57:73:3C:5B:A4:D5:9F:DD:A6:13:3F
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       019F10E4BE764767433DEAEA7160083D1FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          1988
Signing time:             Mon 29 Jun 2026 01:00:54 +0000
Manifest this update:     Mon 29 Jun 2026 01:00:54 +0000
Manifest next update:     Tue 30 Jun 2026 01:00:54 +0000
Files and hashes:         1: B-jaTDzXYnAiep0dkM4HKHAtDtc.asa (hash: 6/cBN/kOMU8ZsZKSZ6ypt6jtXqwALKvq4t6gWl3kd0k=)
                          2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: JPpVvscr8iMtsLpKB0svDpf7yzWk+J6gdAQktui7NwU=)
                          3: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:e4:be:76:47:67:43:3d:ea:ea:71:60:08:3d:1f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Jun 29 01:00:54 2026 GMT
            Not After : Jun 30 01:00:54 2026 GMT
        Subject: CN=8c70a44fcf9cff57f957733c5ba4d59fdda6133f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:61:97:eb:65:1d:28:ab:c3:8b:0e:94:56:
                    38:18:11:e7:09:13:82:aa:4f:03:6a:7b:96:07:46:
                    d7:92:29:e1:b3:24:37:86:ff:c0:98:a3:f3:ef:7d:
                    5a:cc:4c:13:f5:63:74:bc:11:0f:34:e2:db:b8:d3:
                    6b:f5:63:f2:08:fe:af:44:46:a1:28:15:9b:ae:2e:
                    f4:06:05:1c:75:49:28:66:04:94:19:25:aa:e8:37:
                    ac:e0:27:80:d8:89:1c:dd:ed:c7:6a:e1:8c:29:d7:
                    e2:05:2e:04:3f:86:df:a7:0f:2e:20:98:2b:05:1b:
                    a4:b2:31:8e:05:97:cf:1f:c4:c8:d8:91:61:ec:e1:
                    f9:45:74:ee:f9:ad:ac:d8:95:d0:24:46:bb:49:2f:
                    cf:df:cb:6d:24:d6:d0:82:89:69:45:5b:96:4b:77:
                    6b:0f:a5:db:e4:f4:9e:49:bb:40:89:e7:7c:66:16:
                    bd:57:04:51:27:00:28:69:db:af:0b:18:d0:4c:70:
                    24:a8:52:91:3b:7f:b2:68:29:8e:80:ae:a4:36:ef:
                    32:62:6c:81:2f:d4:0d:00:d5:a7:62:d6:63:5e:34:
                    2d:ac:2c:5f:79:b2:69:cc:ff:62:a9:1a:dd:11:a7:
                    6a:df:00:0b:c5:43:6c:5e:9f:a9:6d:71:4a:2c:cc:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:70:A4:4F:CF:9C:FF:57:F9:57:73:3C:5B:A4:D5:9F:DD:A6:13:3F
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8d:c1:3f:db:b7:48:be:69:06:bc:b4:c1:07:c3:bc:fd:6c:
         58:01:c6:4e:9f:f1:3e:2c:60:fc:b9:a6:70:90:f1:1c:09:73:
         dc:8b:f6:f4:16:4a:ef:7f:95:19:08:dd:42:66:06:02:03:d3:
         e3:18:51:69:c4:e5:7a:71:7f:44:94:21:c0:64:cd:75:ef:43:
         88:29:83:23:65:a1:84:83:66:21:27:1b:97:93:a7:23:d9:39:
         b2:6c:a3:c1:0a:22:7d:23:40:9a:9e:09:1a:98:81:d5:a0:91:
         35:dc:fc:eb:c9:e3:2d:b5:d7:1a:be:e4:74:a2:3e:ba:16:68:
         b7:88:d5:17:6f:f1:d8:90:e5:aa:9d:d3:12:08:65:77:cb:e6:
         5b:00:48:8c:e9:d6:f5:11:d6:80:20:eb:70:ab:c4:2e:f7:b3:
         e3:40:2c:43:31:5e:c8:fb:20:ce:4b:59:d4:4d:6e:b2:ad:51:
         91:5b:13:31:38:eb:75:49:34:1e:c4:b2:0a:e8:10:17:7d:86:
         99:a0:57:13:78:ee:aa:c4:4a:f4:b3:c2:fe:e3:ea:2f:5b:a5:
         f0:74:c8:b9:13:5d:d5:10:33:12:3d:ff:39:4d:c5:09:4a:ca:
         14:cb:27:f2:45:46:09:34:68:0d:75:b7:ef:a1:f5:ab:cd:05:
         c4:52:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:41 2026 by rpki-client