Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          SK+0QUX6X4qzAUcNlHv4zRHdydwv+HhlfnMlsvSs6zs=
Subject key identifier:   8C:8F:0C:D3:A6:4D:2B:6C:92:58:70:9D:58:26:2F:F1:AF:24:F1:6B
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019EB6200A779B648D32FF2C0B81022659A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          1981
Signing time:             Thu 11 Jun 2026 10:00:13 +0000
Manifest this update:     Thu 11 Jun 2026 10:00:13 +0000
Manifest next update:     Fri 12 Jun 2026 10:00:13 +0000
Files and hashes:         1: 8Tje-qV6QLUefgoToblFnjxFOug.roa (hash: RaGHLexPAGlKd+1GFvQT68V+7VmWYOnxyCrKQ89UTuM=)
                          2: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          3: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: Wez5DezZhIc3xUzxacHnA1jvbQCT/YGr63cWyCC4ChU=)
                          4: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          5: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          6: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          7: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 10:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:20:0a:77:9b:64:8d:32:ff:2c:0b:81:02:26:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Jun 11 10:00:13 2026 GMT
            Not After : Jun 12 10:00:13 2026 GMT
        Subject: CN=8c8f0cd3a64d2b6c9258709d58262ff1af24f16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:f8:4c:1a:3d:d2:ac:4d:e3:37:64:9f:72:
                    c7:05:7e:48:5c:94:1c:47:a6:41:ac:05:6b:62:3e:
                    5f:f4:1f:20:88:91:11:9b:8c:48:ff:39:6b:1c:8f:
                    0a:57:aa:2a:93:7c:4a:ab:68:24:c5:62:b8:b5:6f:
                    94:1a:a9:be:b3:5a:2c:a9:c8:80:88:1f:b9:a5:09:
                    ff:98:07:eb:8f:42:e3:30:19:6d:41:9c:5a:34:2d:
                    d1:91:7c:77:fa:a5:4c:55:7a:c0:34:4d:08:63:a7:
                    60:8c:c6:d2:7a:22:cd:fa:72:c6:b3:56:0c:49:84:
                    71:12:03:09:35:13:76:89:14:6e:70:c4:bc:f0:d8:
                    a7:da:4e:c4:e8:9b:db:72:07:cb:30:2a:d6:f2:14:
                    9a:65:6e:a4:06:92:1e:ab:77:c2:64:cc:db:e2:01:
                    12:bf:56:0d:d5:18:a9:40:95:f9:9a:e9:6d:94:35:
                    c0:73:c9:a4:ae:2d:64:68:d5:3b:94:68:da:53:04:
                    a0:c7:d2:b0:af:eb:1f:99:c6:b6:64:0b:91:79:f9:
                    04:58:03:ab:e0:f8:2d:1d:cd:97:53:b6:e6:e2:a0:
                    ed:14:ec:1b:8e:2a:74:3e:11:9f:34:fb:96:24:0b:
                    7c:8b:47:73:e3:1f:60:f1:e6:21:53:ee:20:a4:b7:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8F:0C:D3:A6:4D:2B:6C:92:58:70:9D:58:26:2F:F1:AF:24:F1:6B
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:48:a3:4a:8c:9c:08:46:c4:35:91:a5:e1:78:72:39:59:eb:
         0c:46:9a:46:26:49:d2:7b:8d:4e:4f:71:12:97:5f:24:fc:40:
         31:a6:1e:0b:28:1c:7d:fb:07:79:18:94:a7:cc:6e:34:fe:39:
         88:0b:be:9a:7f:79:ab:f8:21:c9:75:32:4c:b4:06:d5:21:d0:
         f8:9e:c4:e1:ed:08:24:60:86:28:49:0d:f0:33:01:4c:3f:e9:
         33:83:26:de:37:de:ad:70:f6:bb:3b:5f:80:f5:a4:12:94:5d:
         34:30:4f:34:21:bd:69:f7:58:a8:ba:06:53:cc:7f:57:3e:5a:
         f6:7a:8c:e4:c3:66:83:74:30:91:6e:08:4f:0a:66:d9:5d:7c:
         5d:1c:ae:f1:5d:fd:43:18:30:79:b5:74:48:48:89:d5:45:da:
         06:7a:8a:fb:6b:82:1d:f6:9b:c4:c2:aa:1a:e7:ff:c4:52:08:
         07:40:dd:5b:3e:bd:8c:d4:c3:8e:97:de:0f:37:c1:b5:c2:d6:
         ec:6d:cd:b7:a3:95:c6:48:f0:64:e3:74:ca:5b:5f:79:40:c4:
         d0:6c:7e:3a:0d:f3:86:36:1d:49:30:50:b4:9f:20:d9:62:8c:
         9e:c6:f3:0f:01:e4:f7:43:ad:d7:f4:de:e5:54:30:22:3f:eb:
         62:2f:81:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:38:07 2026 by rpki-client