Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
File:                     lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft (raw, json)
Hash identifier:          V/SLnXbj4dZjxT07uoi7S9uIqXnUezqwud+ZzJdhvtg=
Subject key identifier:   F6:CC:AA:3A:FF:3A:EB:CE:3D:74:B0:D7:94:81:B6:AC:FA:39:38:56
Authority key identifier: 94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1
Certificate issuer:       /CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
Certificate serial:       019EF982E8EBA22A4CFD5FE412D9755BA6C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
Manifest number:          1674
Signing time:             Wed 24 Jun 2026 12:02:46 +0000
Manifest this update:     Wed 24 Jun 2026 12:02:46 +0000
Manifest next update:     Thu 25 Jun 2026 12:02:46 +0000
Files and hashes:         1: 3N3x697PdBQfSoEa3ipvDa4IgGc.roa (hash: km/jt2nK2MZ3YgEOAe9PMTWQMqWp8onbkpGJJyxmD+A=)
                          2: guL1UhYmKCRQakOp74_jQ7ZHKiA.roa (hash: jSpnFus5fN8uZMH2l9dvvnq1nha+27Kc+Yx+n1wweXA=)
                          3: lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl (hash: nfsmJacf5NtGp+rAfIab8qOQFlLKbG1Pmpuwhj5wXMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 12:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:82:e8:eb:a2:2a:4c:fd:5f:e4:12:d9:75:5b:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9416d8e02b5a1a75859f64a05c5a8d77c84c50f1
        Validity
            Not Before: Jun 24 12:02:46 2026 GMT
            Not After : Jun 25 12:02:46 2026 GMT
        Subject: CN=f6ccaa3aff3aebce3d74b0d79481b6acfa393856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:42:6b:b5:b5:d9:e4:59:bf:97:2f:61:1a:
                    80:3a:ee:7b:e0:09:8e:85:3a:cf:10:70:d2:30:55:
                    2e:38:d5:d6:09:69:fd:7f:a5:51:f3:dd:28:54:f3:
                    53:5c:0e:be:1b:9b:17:4a:3a:ab:29:2a:83:3f:cd:
                    2b:41:3d:91:e7:75:e7:1b:41:a4:5e:96:9e:fe:b8:
                    29:c0:20:73:c8:a7:d8:b0:6a:a4:97:31:71:e2:25:
                    d6:63:a4:0f:cb:e7:e7:d3:b7:af:4c:8a:18:92:4e:
                    77:7e:3f:08:5a:ee:a8:de:da:68:00:1c:48:8e:ed:
                    77:8e:ae:d4:a6:65:4a:2d:ea:63:51:ea:65:e6:5f:
                    5a:24:c1:bf:c3:53:da:94:15:6f:02:07:70:a4:96:
                    7c:62:b0:cd:47:e9:ed:26:b1:3a:37:03:ab:c2:ad:
                    ff:54:45:5a:d2:c9:c5:dd:fd:f5:e3:84:46:4c:07:
                    2f:05:16:68:9f:11:b5:d6:fb:9f:a7:0e:bf:df:c5:
                    21:08:49:6a:80:70:60:d6:30:03:d0:9f:0e:42:e0:
                    b2:82:88:4b:e5:62:97:6e:15:0e:80:0d:f6:95:94:
                    97:00:59:a6:42:72:17:b2:07:42:b9:08:9c:da:73:
                    09:25:25:12:04:f4:b4:9b:94:c1:39:ef:ad:e4:5b:
                    14:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CC:AA:3A:FF:3A:EB:CE:3D:74:B0:D7:94:81:B6:AC:FA:39:38:56
            X509v3 Authority Key Identifier:
                keyid:94:16:D8:E0:2B:5A:1A:75:85:9F:64:A0:5C:5A:8D:77:C8:4C:50:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBbY4CtaGnWFn2SgXFqNd8hMUPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/013c99-7d7a-482b-bb51-eb4e13be506a/1/lBbY4CtaGnWFn2SgXFqNd8hMUPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:75:61:35:5c:87:2d:5e:f0:2a:0f:21:1a:f4:f7:da:69:8a:
         5f:55:19:e7:d4:6e:b0:db:38:48:f3:6f:d4:4a:0c:7b:fc:47:
         d0:b6:a0:7c:2f:ce:5a:ac:30:87:38:52:93:31:bc:29:ff:d4:
         be:ad:57:bb:62:54:70:77:1c:7b:ec:fb:81:e4:d9:6a:6b:80:
         cc:af:0f:d9:ba:b0:88:75:13:44:7c:ea:d1:c2:ee:f2:8b:48:
         3a:6d:c8:86:35:9b:03:43:64:09:f5:99:0e:03:f1:4b:e6:ab:
         0a:49:70:43:ef:b5:34:f9:25:56:3d:a8:23:38:16:62:7e:5c:
         48:6f:c2:06:34:a4:87:bd:f7:29:73:0c:7d:d8:6a:74:cd:26:
         61:c3:96:dc:17:77:57:e4:80:12:a5:e8:6b:47:0a:86:f0:86:
         a0:11:6b:6d:3b:7f:2b:0a:b6:2f:62:73:73:34:bf:db:bf:7d:
         bf:49:ee:20:eb:18:a9:a5:63:4f:84:84:f0:e2:3d:07:9b:84:
         0d:6e:91:41:58:ae:d6:32:85:68:00:d2:99:54:88:96:c9:ae:
         5f:eb:b0:72:8a:50:34:86:4c:d9:1e:bb:81:e2:4b:34:05:59:
         2b:2e:b3:9d:5e:82:5b:a8:49:ac:0a:5c:e8:ad:b0:06:6a:58:
         51:d0:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:17:08 2026 by rpki-client