Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File:                     zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier:          wcKTAkvioK52qk6YvKGgeLgOZYK/152oeeSpLGmO/YY=
Subject key identifier:   03:CD:47:C9:32:D0:8C:87:BF:FB:96:86:37:0A:52:2C:6E:07:1D:37
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer:       /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial:       019EC30022CF1F3365C4092FA603CB53999D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number:          1669
Signing time:             Sat 13 Jun 2026 22:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:26 +0000
Files and hashes:         1: bWCw9QvZ0n-9vSDkgSO_NuyUw34.roa (hash: Nv8e19B6F0Z+GsL3XuEotkyjFs4rEednWhdiNCJb51g=)
                          2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: Gh0mxUWLFnVikvgbQ9hkrnnAWQ/ZTZOzkzwjPa1b1OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:22:cf:1f:33:65:c4:09:2f:a6:03:cb:53:99:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
        Validity
            Not Before: Jun 13 22:00:26 2026 GMT
            Not After : Jun 14 22:00:26 2026 GMT
        Subject: CN=03cd47c932d08c87bffb9686370a522c6e071d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:6f:a5:ef:65:cf:fd:40:1d:57:61:cb:20:
                    1f:bc:dc:7f:a8:0c:57:42:14:40:f5:e4:38:0b:a7:
                    99:aa:30:84:b3:74:2a:1d:d4:18:80:7c:13:52:4c:
                    12:cb:a2:4d:11:7a:14:7e:d7:3b:04:95:fe:56:c1:
                    be:69:97:00:ef:dd:07:66:35:54:5e:85:42:49:41:
                    1e:a7:59:0e:c7:70:20:76:32:80:b0:d5:c8:97:9e:
                    52:6a:cf:bb:34:8f:af:41:00:89:69:6e:e3:90:d3:
                    66:ac:ab:77:a1:23:ce:87:54:d5:c8:96:24:2f:7b:
                    ca:95:68:2f:73:27:02:67:fa:59:85:d8:29:ee:fe:
                    6b:94:1e:e2:b2:ae:c0:bc:df:99:35:b0:5d:be:31:
                    62:c5:57:30:dc:96:18:c7:6a:4e:07:4f:2d:54:af:
                    42:30:1a:18:6c:12:15:54:bb:1f:2c:84:6d:49:10:
                    38:f6:9b:68:42:fc:f6:b0:dc:62:b1:13:2f:42:89:
                    69:a6:7d:39:23:95:a3:ad:64:e5:17:ca:67:d1:b6:
                    20:92:3c:52:60:92:03:ce:24:e6:c5:78:78:5b:54:
                    d4:d2:2a:29:f7:92:ba:e8:04:26:23:4c:82:f4:ce:
                    cc:41:b9:56:f9:51:98:c6:51:b0:80:c5:ac:5c:87:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CD:47:C9:32:D0:8C:87:BF:FB:96:86:37:0A:52:2C:6E:07:1D:37
            X509v3 Authority Key Identifier:
                keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e8:dc:e3:c8:73:de:f1:9f:1d:6a:2b:76:e4:9c:7a:a5:3c:
         8b:ab:b6:16:46:8d:5e:23:ce:91:f9:5c:1c:f5:ce:1d:a1:a4:
         36:b4:a0:97:d5:3a:ba:24:56:c0:b6:fe:53:70:1a:d9:c1:35:
         54:00:78:d2:c4:28:ba:26:61:9a:19:75:f4:c4:15:a9:19:dd:
         56:6a:3f:df:56:22:9f:b7:b0:a6:de:d0:01:ae:c2:66:e2:74:
         81:c6:b1:c2:d1:82:fb:5f:6a:df:53:f6:16:de:e4:ca:ac:61:
         a7:9c:d5:a8:0e:43:ee:bf:65:5d:57:a2:ea:21:a3:41:6f:62:
         bf:e1:74:e6:3f:ea:f7:ed:e4:f5:7c:57:28:9f:e9:48:69:df:
         8f:55:d7:d6:bc:ab:4a:e3:c0:13:4d:36:b4:5e:e0:4c:54:d5:
         2a:03:0c:9a:c8:75:2a:29:8a:ed:2d:c1:a3:2f:3f:fd:de:e7:
         3f:23:f9:62:89:27:91:97:09:b0:ac:f2:44:a8:6d:a5:86:76:
         68:fd:a6:6f:1f:30:1c:b6:d4:ca:43:98:8f:5b:f3:fb:ae:49:
         29:76:82:94:1c:5b:5b:0a:c2:b1:32:1d:c3:eb:9b:4f:02:04:
         87:d7:6f:76:16:9b:c1:a6:61:1f:79:1a:b4:c0:7c:e4:c1:71:
         fd:db:b9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:46:26 2026 by rpki-client