Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
File:                     fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json)
Hash identifier:          1XcTDEpjkX6twKBblagroUF6pMgbT9MfF9dkColDwS0=
Subject key identifier:   E2:8B:1E:E9:70:B7:1E:22:90:E2:65:80:34:C9:5A:7D:7D:88:32:7A
Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD
Certificate issuer:       /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
Certificate serial:       019EB733D15431AD930B67ABAD92D16CB87A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
Manifest number:          1969
Signing time:             Thu 11 Jun 2026 15:01:26 +0000
Manifest this update:     Thu 11 Jun 2026 15:01:26 +0000
Manifest next update:     Fri 12 Jun 2026 15:01:26 +0000
Files and hashes:         1: OexBeKcIncb0jKb4JvVZXcJT1Ug.roa (hash: O2kEZ95yzKLiq43k1ys04PPuKi6PpIFY+Xw79K5ILEo=)
                          2: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: Yroerj7YhoTlRVBVaC8QmnQldfTRXnLfV/l7GyrUeYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:33:d1:54:31:ad:93:0b:67:ab:ad:92:d1:6c:b8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd
        Validity
            Not Before: Jun 11 15:01:26 2026 GMT
            Not After : Jun 12 15:01:26 2026 GMT
        Subject: CN=e28b1ee970b71e2290e2658034c95a7d7d88327a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:33:0c:6c:2d:fb:0c:26:65:6c:c6:b0:8a:
                    19:77:1b:7f:c3:ed:53:e1:b8:97:1b:f6:03:c1:45:
                    66:33:5f:d3:88:d3:4d:07:41:83:63:43:a6:b2:c1:
                    f6:54:36:3a:34:db:df:55:b8:52:15:6c:0c:92:b6:
                    ce:51:b7:02:90:4d:05:57:45:ff:4c:46:52:0b:04:
                    75:a8:74:19:6e:31:af:fc:a1:8d:41:46:5c:d1:48:
                    89:91:dd:3a:15:ad:1f:a9:da:20:b6:29:3f:3f:e7:
                    4e:30:17:a3:c4:e1:5f:35:90:46:2b:a7:be:35:b0:
                    1f:88:94:5a:05:89:aa:fe:5b:e0:c3:c2:ca:b0:bf:
                    15:a4:00:63:0b:5f:22:f1:dd:a1:e5:d6:c8:42:53:
                    1d:9f:c1:e7:03:eb:59:d3:06:0e:f4:d9:69:7b:30:
                    25:7d:db:18:11:80:22:58:a3:47:02:ab:65:a6:4a:
                    0e:e8:78:ed:29:4b:1b:77:b5:de:4d:c1:dd:ba:7b:
                    d6:3a:0f:61:ed:7d:d9:6f:30:b0:a2:05:aa:7d:b0:
                    65:1f:00:a0:8f:41:95:39:ff:b0:f6:50:69:21:b1:
                    e1:7c:80:6c:6b:b9:d2:e7:65:5c:c6:74:20:18:47:
                    b4:79:0b:3e:26:e1:ec:30:08:a8:c3:9a:7c:ad:d0:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8B:1E:E9:70:B7:1E:22:90:E2:65:80:34:C9:5A:7D:7D:88:32:7A
            X509v3 Authority Key Identifier:
                keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0c:d3:a8:60:84:05:24:6b:d4:fb:52:5d:3f:a6:11:2e:ac:
         6c:2a:eb:d5:b6:93:24:10:c1:fb:e9:7c:c5:46:2d:f6:7c:c7:
         bb:c1:d7:e9:bb:da:59:4a:db:90:84:4b:d8:09:9f:73:c9:51:
         3f:95:cb:56:3d:06:e8:c6:2e:76:75:6a:a4:a4:a7:19:89:25:
         ef:96:9b:11:5a:28:d6:13:15:43:a2:43:05:4d:4f:7b:89:0e:
         b9:e0:db:a5:cc:4c:34:84:7a:be:ae:44:eb:da:7a:c7:d9:91:
         90:18:9f:d4:69:53:f3:23:ff:06:c4:53:e6:64:fe:79:74:88:
         26:76:d7:26:55:05:d4:0f:f5:f2:61:01:86:b0:34:6d:5f:eb:
         85:14:9d:05:eb:dd:ce:1d:cd:4d:ce:c2:a4:c1:0f:ad:48:c7:
         38:3e:c0:02:0e:3d:f3:96:3e:39:0a:50:be:a2:a1:d8:1d:b9:
         52:5c:1a:fa:9c:75:38:0d:1c:bb:ed:53:d3:59:21:28:97:8a:
         94:3e:c3:48:08:4f:fa:8e:d8:78:bd:a8:77:75:bc:a0:42:24:
         2f:9a:71:23:87:36:fd:4c:71:57:a5:a1:a2:84:30:ab:70:c6:
         b9:cf:0a:a9:61:e0:4b:4f:7d:bd:8b:e7:58:0a:99:05:ec:ec:
         97:65:ec:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:51 2026 by rpki-client