Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File:                     l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier:          xBGnwMBbVsvTFuO9PQcGlHVKRlfZDcDCgJWMfuis580=
Subject key identifier:   29:0F:4C:8F:19:E7:48:C7:E5:DE:75:F8:28:A9:05:E1:40:20:A3:27
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer:       /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial:       019EC0369FC3935110D06A72808B17B898F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number:          1964
Signing time:             Sat 13 Jun 2026 09:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 09:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 09:01:05 +0000
Files and hashes:         1: 3JvVaHFxMvE7oKb_Rk5KcxOo0QM.roa (hash: ni3uO/fhFfgK3uTopvt+sNnEoUiIwxpRI4kiwz3P0Q4=)
                          2: C9Y58BKwkaw0ZHTl_j0txcpI-HU.asa (hash: 6ft+Zt4xMqD8pufWleBqsqUW7RgXeGTKhk+GP4M0q7Q=)
                          3: b4x9At5aHU384b0djamWkOwy0Gk.roa (hash: kQ+bOS8CQlnm4PmXuVXiGK4SgaDFMpdC3HI9bBKlvtQ=)
                          4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: uJFhaNcyvbfWdIr3K0fsbK9YbReZ5ANrSh24VfnRLOE=)
                          5: mYpQfCwGUFa_N3gCiTs-pRnvFpc.roa (hash: gQqVTcaiR3QtkZ8CYSUcJShg6d7Q858NjMwMx9HDxMo=)
                          6: vEZLnR5almH1CGYItYBwVOGJqYY.asa (hash: Q9dmdkbTJa12zCUuc9rAzbHv2trspyTh+XDW4FOxvK4=)
                          7: yu-i2x-62u9GgIqkbHtrB0flg3s.roa (hash: DBRnQF75P0UT8wiwqTpnRrbuWAWKmmICP891u/zUXI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:9f:c3:93:51:10:d0:6a:72:80:8b:17:b8:98:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
        Validity
            Not Before: Jun 13 09:01:05 2026 GMT
            Not After : Jun 14 09:01:05 2026 GMT
        Subject: CN=290f4c8f19e748c7e5de75f828a905e14020a327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:11:8f:89:74:bf:73:81:39:1a:fa:e9:cf:
                    b6:e4:2c:11:8d:e5:aa:a0:57:e3:87:67:58:72:c5:
                    2a:b8:77:b9:a1:0a:82:8a:f3:91:70:0d:21:85:e0:
                    57:7e:99:64:c6:ed:75:b7:83:da:cb:49:1c:d4:e6:
                    77:ae:fd:2a:75:70:33:e0:14:0b:4e:61:09:b7:6d:
                    0f:42:52:6a:65:d1:ed:a9:38:47:03:d3:90:3f:24:
                    11:78:75:c6:f9:17:a8:7f:85:5b:85:d2:1a:f4:6b:
                    2e:46:04:5d:08:dd:9b:5b:15:98:a8:35:ba:45:bb:
                    65:5d:b9:55:64:99:c9:d3:6e:05:a2:a6:6a:ce:b5:
                    07:54:0f:d8:8f:b8:ee:51:08:93:f9:bf:71:e6:1f:
                    3c:04:9c:28:2f:86:d8:cd:97:dc:3f:fe:9f:fd:02:
                    60:69:ae:3a:b0:e1:a3:d8:53:76:a9:04:10:87:4f:
                    df:72:a7:48:88:b9:bc:48:a7:24:72:87:5c:52:a9:
                    d2:50:0c:46:a1:5e:47:07:20:87:24:56:95:35:34:
                    14:e9:31:43:6e:72:0b:a4:99:1d:d8:21:55:02:c5:
                    60:f5:d6:75:bb:1d:11:b0:3f:b0:2d:58:c5:49:b4:
                    dd:7b:31:87:1d:02:fe:8c:96:c8:ac:4d:05:03:93:
                    24:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0F:4C:8F:19:E7:48:C7:E5:DE:75:F8:28:A9:05:E1:40:20:A3:27
            X509v3 Authority Key Identifier:
                keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:42:07:90:20:46:ba:57:33:19:f8:76:2c:55:56:0b:12:
         0e:ea:fc:bc:53:ad:44:7d:b3:61:e3:06:85:98:dd:22:93:da:
         95:c7:b6:14:6a:e8:f0:5b:9e:d8:e4:1c:af:33:ec:c2:83:00:
         6f:16:7e:6e:37:d3:df:03:3c:01:33:0c:e5:94:8d:3d:f8:1f:
         1a:34:80:d7:25:10:7e:c3:62:27:43:46:75:37:a2:20:9a:a2:
         d6:b0:8a:11:63:d7:68:02:c8:f5:58:85:9d:e7:a2:9d:af:4f:
         26:f0:24:42:19:53:58:f8:f0:ae:c8:b9:92:42:9e:50:2b:79:
         99:54:c1:f4:2e:50:a0:27:8c:2e:78:fd:72:ed:bd:06:73:3e:
         48:cf:71:0d:74:f1:17:17:99:82:f4:45:5e:69:32:f6:8f:77:
         94:bf:87:05:de:65:c8:a7:53:cf:53:b1:cc:de:de:49:f1:e3:
         b4:a7:a0:8d:57:77:af:0f:1e:48:fa:ad:a0:f6:1a:64:66:be:
         6a:5d:e2:6e:d0:5c:01:b0:cf:04:f6:eb:7c:f1:2c:8b:d2:10:
         df:39:96:f4:15:67:94:1e:61:72:7c:62:1b:e2:f5:58:dc:d2:
         2c:df:ff:a5:31:97:3d:6a:d4:c0:e6:b1:96:23:e8:69:0f:dd:
         ba:17:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:56:22 2026 by rpki-client