Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          lzWUAZ7nHvUTLT9za17hcoJSNrqgjPEvj47h1zEZ7b8=
Subject key identifier:   75:F8:FE:89:02:B3:5B:AC:15:3C:F8:9B:F6:B7:1B:72:BA:77:3B:B4
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       019E9929A84E2012A2C3A635B501B3FF5945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          1402
Signing time:             Fri 05 Jun 2026 19:01:44 +0000
Manifest this update:     Fri 05 Jun 2026 19:01:44 +0000
Manifest next update:     Sat 06 Jun 2026 19:01:44 +0000
Files and hashes:         1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
                          2: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (hash: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk=)
                          3: JzElV8rMB35_r5yROjAIe1YSEGk.roa (hash: prxCAC9aS1jR/lGKgImoCaF1puXWY2FG75jnwkB+CC4=)
                          4: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
                          5: VXazB19Is6W_OKKCp0AvNqbD-rM.roa (hash: IwIknG6od+Fc8/mQwvVulKrK8qXdxe2y0/Y0Cy93yB0=)
                          6: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: 8keO7SGTiBj17epiBkrYO/dhicQPBio+5znrayysoBo=)
                          7: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
                          8: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:99:29:a8:4e:20:12:a2:c3:a6:35:b5:01:b3:ff:59:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Jun  5 19:01:44 2026 GMT
            Not After : Jun  6 19:01:44 2026 GMT
        Subject: CN=75f8fe8902b35bac153cf89bf6b71b72ba773bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:eb:e3:24:ab:a5:1a:26:f3:50:12:e1:88:c6:
                    78:5f:c5:b6:5e:ea:fd:a1:a1:05:99:cc:1f:8c:10:
                    11:c4:7e:aa:1d:6f:7b:a2:43:e9:80:19:fc:f3:16:
                    b6:0a:36:24:43:c8:1a:8e:9a:12:0f:9c:0e:68:a5:
                    84:70:6d:28:dd:53:47:cb:15:e7:f5:c7:9a:e8:8c:
                    3a:5d:5f:da:19:1d:34:dd:d8:57:52:8c:39:e7:b5:
                    c1:8d:53:f7:1c:0b:e3:5f:5b:e8:ef:03:fe:02:1f:
                    e4:69:cb:98:13:3d:30:5f:94:6b:cf:62:11:73:10:
                    3a:55:2e:4e:60:dd:52:42:8e:f6:19:21:cc:75:bd:
                    fa:0b:06:0e:02:9e:da:3b:8a:54:e9:6b:c3:1f:42:
                    65:69:8e:d1:c0:d4:cb:77:a3:58:93:ad:d6:b9:2a:
                    45:66:e2:c4:85:8b:52:0c:9f:4e:95:09:4a:da:5c:
                    8b:e8:40:9f:cf:3b:2c:eb:34:4d:f2:71:9d:37:88:
                    2a:91:6e:26:d8:4c:ce:11:f2:0b:82:0e:8e:6d:df:
                    53:db:f4:ec:31:22:32:34:e4:32:65:3c:2f:86:01:
                    7d:da:9c:35:21:e7:49:b0:d8:7d:85:34:bd:83:7b:
                    90:8c:1d:ad:77:9a:d3:b2:2f:c6:56:dc:36:ea:15:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F8:FE:89:02:B3:5B:AC:15:3C:F8:9B:F6:B7:1B:72:BA:77:3B:B4
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:ce:04:fa:81:af:d9:e9:73:19:64:0e:08:b3:b5:a8:b4:
         a8:3a:63:38:64:61:01:a4:54:e9:f9:95:19:11:14:4f:48:42:
         0e:fa:54:42:f1:7e:21:5f:65:98:95:3c:cd:1d:8d:25:03:d4:
         2f:3b:2d:b0:c2:66:6d:08:2c:e4:49:d6:c4:36:1b:c2:61:0a:
         e0:e0:4d:8d:45:6d:9a:60:26:63:9d:f6:8d:af:9b:4e:c7:8e:
         c8:cb:c7:6e:33:00:9e:53:10:ec:2c:db:a9:71:5e:45:46:72:
         dd:eb:ee:07:d0:54:07:3a:d5:76:c8:e5:09:24:af:d3:c9:f8:
         73:0e:c1:cd:db:a6:ee:95:b8:eb:5e:54:c0:cb:32:8c:bb:3e:
         5c:ca:5e:7d:1e:97:e0:27:25:c5:51:76:21:8a:d6:99:38:9c:
         da:2b:05:02:67:5e:32:40:e5:52:78:8b:14:42:c2:7b:64:b3:
         31:14:51:de:6a:20:73:f3:3c:ca:41:c7:40:4d:6f:e0:8d:d3:
         bf:ec:2d:fd:00:22:40:d3:05:f1:ac:7b:3e:f6:bb:7d:eb:e5:
         c0:9d:96:d3:c7:34:b2:6e:af:27:de:9e:fe:22:8c:f6:c9:c4:
         a8:f1:cd:ad:68:1e:fc:ee:58:b5:1d:90:e2:da:dc:68:fe:e1:
         0f:03:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 01:17:21 2026 by rpki-client