Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          42Gpy+bIUHPXdGKYOhNHLU8zP0ZLF09gxWDK5rQjkzA=
Subject key identifier:   AD:21:B0:E8:09:0F:A2:B3:64:BD:AF:E7:C0:A3:CF:F9:90:19:3E:5B
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       019EBEED3FC1853924A0F0AB0C41CCDD6CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          1583
Signing time:             Sat 13 Jun 2026 03:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:19 +0000
Files and hashes:         1: 0uyZF4hqCFblriuhdFvB97CSvjE.roa (hash: F5N4p/+NGVHw75uzEq/ujSUpO10EhoH/RBzsn4VqeFg=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: 7rv8KALi4JMAglB9Bevc0vkcMCHmmWVh5LPOHSK9eUo=)
                          3: HEYOxnvlLCOWsnSS_6it9qLhNIs.roa (hash: 6D1EaOUZTiXuJWqZZr2E8iZjtev1Lso+FFHwbrAgIes=)
                          4: OUe9Gs1ZfjOio8GPiClkO1rK7Co.roa (hash: 9zzu21yZwWAMdvzRS8JS72fLpBxbfgfEMRdYkP6CTaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:3f:c1:85:39:24:a0:f0:ab:0c:41:cc:dd:6c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Jun 13 03:01:19 2026 GMT
            Not After : Jun 14 03:01:19 2026 GMT
        Subject: CN=ad21b0e8090fa2b364bdafe7c0a3cff990193e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:c1:90:0f:43:f4:49:34:b6:f2:67:31:2d:
                    47:33:e6:dd:3a:ea:d7:95:02:46:19:2a:3f:8a:fd:
                    94:8e:9d:15:ef:99:8b:f6:30:e7:bf:27:0b:61:ed:
                    42:a7:5e:8f:ec:dc:1b:ed:1f:a7:17:3c:56:b3:08:
                    ed:80:a2:6a:e4:5f:69:5c:4c:5f:88:b9:2a:c3:19:
                    74:a7:23:d8:e8:a2:55:74:64:48:d7:d7:73:81:b7:
                    23:ff:fa:30:b5:1b:98:90:d0:84:d1:78:19:bd:42:
                    94:6e:0d:2b:45:c2:81:23:a5:41:41:8d:b2:94:61:
                    bb:b9:b9:40:1b:9d:20:92:97:01:e4:b4:5b:ba:4f:
                    53:bd:13:a5:90:69:9d:c0:ee:f8:aa:46:98:2b:31:
                    0a:62:ee:0b:e9:6b:c5:58:2e:11:5b:98:79:cb:84:
                    b1:99:87:5c:12:5f:4e:40:a3:ae:80:c4:c4:7a:a0:
                    6b:fd:10:86:7e:22:31:57:b1:ae:b7:04:d0:fe:8b:
                    97:39:24:00:9f:c5:2c:72:22:52:85:76:dc:13:8b:
                    e2:3a:ad:85:e4:30:f3:50:70:87:3e:03:4c:df:b6:
                    46:fc:68:90:41:b0:63:c5:7c:c7:78:25:58:10:10:
                    f2:20:d4:de:5b:b9:cb:d2:d4:17:d8:ea:58:12:b0:
                    aa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:21:B0:E8:09:0F:A2:B3:64:BD:AF:E7:C0:A3:CF:F9:90:19:3E:5B
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:00:97:7a:8c:84:9f:16:d6:68:ef:42:c4:dc:29:36:03:eb:
         7b:5e:f2:2c:83:7b:fb:45:3d:96:c1:13:22:5e:8a:fe:16:9c:
         41:0d:85:9e:b2:89:45:35:2a:fa:ab:32:db:79:a4:ad:4c:d5:
         36:49:ab:84:7e:df:f6:f4:4b:05:25:bb:8e:c9:2d:d2:5c:11:
         81:d7:50:4d:86:ba:f8:bf:88:fb:cc:8c:4e:23:5c:24:aa:99:
         c8:3b:5a:c8:41:b3:9f:4b:ca:d1:eb:c9:b9:5b:9e:87:76:b8:
         ba:b1:be:f7:67:29:b7:de:bd:94:1e:fd:fb:fd:a7:3e:bb:33:
         cb:04:99:cc:34:2b:00:27:32:4a:a6:f7:1e:c5:2f:17:2d:34:
         5b:db:24:d3:70:d1:67:a7:a8:70:bb:f8:7a:96:85:e2:75:76:
         27:c4:04:41:39:ba:ee:7a:a0:fd:23:f6:9b:e9:6c:89:b1:a4:
         8f:64:18:59:ed:64:bc:b1:b2:a9:45:22:c3:75:12:78:71:d2:
         de:2f:c1:63:7d:68:71:fb:5c:cb:b2:5b:d9:14:09:14:a1:a1:
         5e:0f:75:72:ec:6c:25:f3:72:10:3d:b1:39:56:f9:f5:ef:99:
         7f:7e:f3:2f:f3:01:c5:3f:4c:75:c8:0c:3c:7c:8a:1c:b2:e7:
         06:75:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:39 2026 by rpki-client