Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File:                     cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier:          cJuKz48j520IFCSkAM847HZBUpLaTExpa20wpe4WFOE=
Subject key identifier:   C7:C3:C1:21:BA:F6:61:28:89:E0:2E:1B:E1:6F:3A:B0:3D:2D:DF:FB
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer:       /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial:       019ED575112047D50C0F71399A23B1EF49E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 12:01:19 +0000
Manifest this update:     Wed 17 Jun 2026 12:01:19 +0000
Manifest next update:     Thu 18 Jun 2026 12:01:19 +0000
Files and hashes:         1: BYGANzLgHzSaUc6K7ae41nnbLMw.roa (hash: AJMi9HENlmzpAiYF/4FsTemXgQje3J6PHtaGAU4r+0I=)
                          2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: BAX3mGkU0yu1vNl48HSYKjHby0X1QoVZ2JrG45xJC/4=)
                          3: d0cD2OQNwvBbl6ZoayOyhKGW84E.roa (hash: 0hRHMR3AECHRvpDLm6VnO82EHkZj8wfWxDmhhkfMCS8=)
                          4: nTbT18OCDUNW4azZC3MKOG8N8oE.roa (hash: ShlwcG/vZJL5OcI4En0cgO+lRO+Afw70u3xxHsMil/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:75:11:20:47:d5:0c:0f:71:39:9a:23:b1:ef:49:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
        Validity
            Not Before: Jun 17 12:01:19 2026 GMT
            Not After : Jun 18 12:01:19 2026 GMT
        Subject: CN=c7c3c121baf6612889e02e1be16f3ab03d2ddffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:33:fe:f3:b7:3d:f8:52:32:a3:ab:4d:75:
                    bf:f7:fc:23:65:5c:1b:31:ed:33:c5:1f:43:06:82:
                    8e:f1:51:c1:03:5d:01:2a:8f:25:ca:c7:06:87:a3:
                    32:8f:ec:22:9a:25:8a:6a:02:5a:33:1a:9c:2d:77:
                    bc:72:52:c7:c5:e3:6d:67:fb:3a:d0:51:e3:9a:24:
                    57:7d:33:51:41:65:2f:48:be:7c:02:51:21:33:6f:
                    68:0b:53:21:a2:19:ad:1e:b6:03:10:67:da:e4:69:
                    86:b5:52:41:53:ff:75:fb:c0:54:3f:b9:be:12:d9:
                    95:e9:83:20:d6:0b:c3:a1:f8:38:9e:0a:49:d6:66:
                    4c:f4:f2:58:ed:43:d3:15:8c:69:01:90:d4:61:df:
                    3e:42:61:eb:57:0c:74:22:b9:ae:10:73:cf:31:ea:
                    aa:c2:d0:81:82:43:a2:da:59:82:70:0c:ef:27:c3:
                    ef:af:13:43:99:f0:ec:aa:41:1a:39:18:24:12:18:
                    06:ce:3c:d6:d0:c7:86:6c:84:24:3f:9c:93:21:3b:
                    db:01:a7:73:4a:67:7d:01:fc:53:2c:9a:fd:f9:0f:
                    19:14:61:50:18:66:9f:2e:ad:04:53:b3:db:ff:50:
                    54:cb:6b:d6:f1:d7:03:8b:a0:e8:3b:f9:7d:bb:25:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C3:C1:21:BA:F6:61:28:89:E0:2E:1B:E1:6F:3A:B0:3D:2D:DF:FB
            X509v3 Authority Key Identifier:
                keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c7:5d:06:fd:d2:a7:7e:46:57:5f:b3:be:fb:d6:b4:79:03:
         5a:ee:ac:8a:59:9a:83:03:42:45:4c:82:d7:a4:10:87:62:85:
         df:f9:89:fd:6a:2b:95:b9:b3:dc:4a:70:6a:4b:75:f5:cd:64:
         bb:dc:79:d6:19:66:da:ec:b9:97:6e:72:d5:14:e8:0e:64:3c:
         ea:c3:21:ef:0d:c4:1e:2b:8e:40:2c:0b:a0:c9:cb:8e:7f:9e:
         83:a6:26:04:c0:76:9f:9b:e2:e7:e0:00:a6:05:46:4a:5b:90:
         1c:76:ac:5c:de:a9:23:3c:22:25:0f:23:ea:88:ed:ec:22:65:
         7e:12:56:04:9c:12:2a:57:97:7a:72:53:c4:b8:a3:9c:10:36:
         a4:13:6e:a5:1a:cf:8d:bf:f1:67:1c:20:a0:8a:63:ed:c6:09:
         04:41:c1:84:e8:20:9f:c7:ec:a8:10:7f:66:bd:55:cb:e9:d0:
         41:74:9e:97:7b:e6:96:e2:66:7b:1d:6f:36:7d:ca:81:bd:d8:
         69:29:9c:69:36:2d:23:6d:26:13:d4:93:5f:7f:a9:49:32:21:
         c1:7a:4e:dc:b5:3c:9c:38:c4:e1:da:f3:3a:52:86:69:94:da:
         12:32:38:cf:4d:f0:10:2f:41:5f:36:a6:6e:31:2a:a3:2b:76:
         c2:4f:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 17:46:26 2026 by rpki-client