Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
File:                     ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft (raw, json)
Hash identifier:          TXZlw/k9AzcwtjOrJwUwWnlXIXYv0OsGEjc4tLr3MzY=
Subject key identifier:   FA:46:A2:8B:19:E6:26:20:53:20:65:9B:98:03:A0:E3:1A:18:85:92
Authority key identifier: 72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95
Certificate issuer:       /CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
Certificate serial:       019EB8B3DAACA3A10E6FA45CEF052185BF61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
Manifest number:          1957
Signing time:             Thu 11 Jun 2026 22:00:55 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:55 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:55 +0000
Files and hashes:         1: ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl (hash: 4OUTajCCzkAgz1uWeVu8Zwnt2tZB8gKSlgt104yZFxI=)
                          2: tUqcnLDpW9JDf6_hcyhdmCMYxjk.roa (hash: T2Izmg46flm/WL7QRXpj2WsAQtkMjc+JTIooJeO4hfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:da:ac:a3:a1:0e:6f:a4:5c:ef:05:21:85:bf:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d1b5cb6fb0423986871ef01e663f365ce0d895
        Validity
            Not Before: Jun 11 22:00:55 2026 GMT
            Not After : Jun 12 22:00:55 2026 GMT
        Subject: CN=fa46a28b19e626205320659b9803a0e31a188592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:61:d1:c6:5d:bc:61:42:44:a6:53:d5:60:
                    1c:e1:48:31:40:60:01:19:8a:a4:56:6d:6a:d1:45:
                    9f:5d:b6:86:10:98:09:db:36:28:18:64:c1:3a:bc:
                    a0:7c:3f:84:42:66:54:cc:e2:70:d2:34:87:69:9a:
                    b6:9d:a3:e4:d2:9f:80:82:48:a8:f7:7c:b3:05:13:
                    b0:a4:c8:62:09:58:ef:16:63:a7:aa:2f:fb:4b:29:
                    72:65:56:d6:63:8b:60:6e:ae:be:f1:94:34:d6:f1:
                    ab:05:c1:33:09:ff:4d:b6:9f:7c:e1:29:14:b9:05:
                    6d:a6:09:d0:42:ae:f7:03:46:06:47:ca:ed:be:8e:
                    92:3c:54:04:c2:7e:e8:44:f2:b1:ce:5a:cf:02:91:
                    38:16:ba:d5:4f:0d:0c:5b:f2:b5:ea:40:84:ea:84:
                    85:fc:94:8e:55:9d:aa:35:e6:aa:1f:1d:7d:e6:9c:
                    58:13:21:c1:c8:60:c1:66:76:8a:36:b6:aa:b4:a5:
                    1e:18:02:0b:a6:9a:56:f5:53:b4:a5:52:22:0e:08:
                    5c:64:54:5d:dc:2d:1e:8c:55:40:ca:ed:ec:90:da:
                    a5:8a:b1:47:f8:ce:b5:90:37:ee:50:90:2d:2c:93:
                    3f:c3:f5:6d:ae:ac:a9:4c:5a:18:a6:94:16:68:b6:
                    83:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:46:A2:8B:19:E6:26:20:53:20:65:9B:98:03:A0:E3:1A:18:85:92
            X509v3 Authority Key Identifier:
                keyid:72:D1:B5:CB:6F:B0:42:39:86:87:1E:F0:1E:66:3F:36:5C:E0:D8:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a600f5-9428-485c-b42e-64de34f1f464/1/ctG1y2-wQjmGhx7wHmY_Nlzg2JU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5f:8a:b6:3c:4d:4d:46:a2:6a:90:ff:ce:a6:65:3c:21:1f:
         23:71:f2:82:69:72:2d:c6:a7:e5:37:f8:91:ae:ed:1e:5e:bb:
         79:c7:ec:8a:96:99:10:00:95:17:d8:c1:55:44:11:29:de:01:
         1a:99:ab:32:16:df:33:c9:fd:59:46:f9:9b:0b:c3:15:21:35:
         cb:83:4f:6e:b4:b6:d5:2c:37:16:f4:6d:de:a7:ca:2f:b5:3a:
         61:fe:27:7e:70:bb:12:d6:06:e3:03:e1:1f:81:96:9b:b6:db:
         ef:54:d3:fb:80:5d:c9:75:1a:00:0b:52:8d:ec:4f:91:f6:1b:
         16:7e:0e:8d:6d:b0:7f:da:93:e6:7a:8f:ff:25:e7:45:58:33:
         3c:7b:4c:f5:17:1a:14:06:81:3a:50:53:76:2e:c9:93:e8:e6:
         89:3b:5b:be:17:56:84:fd:aa:f6:fc:59:cc:10:79:4c:4c:81:
         c9:8f:e9:d5:04:71:45:41:4c:f7:96:9e:93:e2:2d:ed:69:d6:
         a5:ca:30:66:b3:f1:3d:35:d7:20:48:f3:73:8c:e7:7d:13:69:
         7f:7e:99:1e:ce:ae:9f:11:a7:9b:6b:12:72:2a:89:05:68:0a:
         3f:be:4b:f2:ce:5c:0c:22:17:21:e4:6f:12:88:40:a5:78:2c:
         b4:4d:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:02 2026 by rpki-client