Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File:                     7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier:          zJTLe0dJDUJIxRSm2sjVgOId1xmvdE7tBofyg6SMO2s=
Subject key identifier:   CB:6C:A4:38:34:F3:F8:A6:8D:3D:A0:5B:B6:83:4B:CF:92:D2:26:6B
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer:       /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial:       019EBF9132CE720522AA2A94A753254A9F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 06:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:24 +0000
Files and hashes:         1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: 6tpSK/9NFoHDJFAnbR3V0GXKOj2R2DlkitmVRZqC9WU=)
                          2: SO4ODwKZaMZRbg45FP2nZyJ5JQk.roa (hash: qBOkD1BZLnNRkElqmAEiwmS3WVpC4bigU1naLXiimqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:32:ce:72:05:22:aa:2a:94:a7:53:25:4a:9f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edff0ab25662757afb831675319296f63d989b69
        Validity
            Not Before: Jun 13 06:00:24 2026 GMT
            Not After : Jun 14 06:00:24 2026 GMT
        Subject: CN=cb6ca43834f3f8a68d3da05bb6834bcf92d2266b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:10:66:58:b1:bb:ab:ba:25:0f:81:0a:a0:88:
                    a6:9c:ed:f3:01:1c:61:25:25:4d:e2:24:08:53:96:
                    b9:47:ba:89:c6:05:27:8a:10:ab:e7:dd:82:26:f5:
                    75:76:f7:16:a5:1a:fd:0e:a8:32:6c:ba:69:7f:b7:
                    c0:2d:ab:13:3c:f0:62:2f:63:0c:7e:ad:fb:f4:96:
                    77:27:b3:86:59:e8:ca:75:03:79:1f:9b:58:f6:a9:
                    35:08:bf:92:d2:5d:c9:0b:ed:e2:8d:a3:eb:bb:0a:
                    4d:fc:de:54:01:cc:73:90:b1:10:c0:5d:6e:b6:75:
                    a6:45:ea:b8:9f:3e:23:15:ba:2a:25:d1:0c:c7:f3:
                    89:93:24:b3:e7:d9:b1:6a:fa:e2:1a:f6:49:32:b1:
                    d7:1a:eb:2a:27:33:9f:5a:82:c0:e6:3e:55:89:fb:
                    59:19:80:7f:13:2d:ae:3e:1f:04:ae:55:bf:9c:e0:
                    94:1c:e8:77:4c:12:98:ad:27:df:de:86:f0:98:97:
                    eb:fa:5e:df:cc:3c:b6:6e:80:00:0a:ac:8d:a6:61:
                    02:5d:0a:c3:4b:72:d1:2c:d2:af:a4:df:1c:81:93:
                    55:ed:90:c8:7a:6a:10:d6:aa:93:36:3f:15:36:25:
                    72:c4:da:2a:a7:44:2b:8a:d3:61:61:46:b0:f9:04:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6C:A4:38:34:F3:F8:A6:8D:3D:A0:5B:B6:83:4B:CF:92:D2:26:6B
            X509v3 Authority Key Identifier:
                keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c9:0e:86:09:0a:1d:6d:f0:26:29:55:88:53:29:03:fc:b3:
         ab:39:fd:79:52:2a:94:de:ae:1b:af:8f:0f:88:91:40:ca:4b:
         5f:98:95:6f:d5:0d:bc:ae:5c:5b:ca:9f:6c:d6:41:c0:80:6b:
         d4:a9:7a:11:9a:a9:75:0f:6a:95:62:de:c4:13:69:f8:9c:48:
         42:b9:3b:f2:8c:93:8c:6b:e1:da:a2:e8:8b:e8:b9:91:81:c3:
         dd:50:5e:1b:07:0a:64:ef:8a:f6:94:84:85:ea:89:e3:8e:1d:
         2d:78:84:09:52:0c:8f:39:ea:dc:39:f3:90:8b:16:ea:5a:d0:
         15:0e:13:f9:45:a8:15:d7:6e:6a:ad:91:c6:1b:e6:8a:be:07:
         44:67:c3:b8:79:d9:93:af:18:21:6c:4d:d9:ea:11:e9:e0:9d:
         11:d1:f2:c5:0c:e5:1d:1f:c6:8b:c8:87:6a:69:a0:37:2b:2c:
         dd:ff:47:ef:07:6b:fc:c3:25:1b:00:9a:37:74:41:89:61:d8:
         3c:1b:1b:09:14:46:be:37:86:ec:86:f5:f1:33:ad:3a:30:c5:
         22:67:3c:c2:0a:f9:43:69:f2:15:1f:9b:8c:20:44:e6:c8:75:
         9c:e0:0a:b2:c7:69:2b:d3:f0:d5:04:18:e9:82:47:cd:24:d3:
         83:16:7d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:12 2026 by rpki-client