Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File:                     zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier:          pJW6bvsH/+OxEgqUzZKqCaet7jh2gx9jM5eJLK54MmA=
Subject key identifier:   DC:6C:7D:2B:91:32:B7:DA:DF:B0:5F:20:3B:4D:69:16:8F:C3:C1:B1
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer:       /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial:       019EBF238A616E84B1D657C95BD2A2552CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number:          0992
Signing time:             Sat 13 Jun 2026 04:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:37 +0000
Files and hashes:         1: aESuuALkp9R98yDiNUY5nveL4-o.roa (hash: o135yeh0bwtH5IHdNJMNH9c/+RcrghX/j14puM1j2sk=)
                          2: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: WFso9Kwn9SO02AQK5qlv2NrnUrO1CyfGooPqbtGP7Kw=)
                          3: zp6kT4fjph_A7Z-y494w10c-4u0.roa (hash: WOnZMPb4q3t7/YEohAO+g25GuBKKPvaAblQVDeWj5K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:8a:61:6e:84:b1:d6:57:c9:5b:d2:a2:55:2c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
        Validity
            Not Before: Jun 13 04:00:37 2026 GMT
            Not After : Jun 14 04:00:37 2026 GMT
        Subject: CN=dc6c7d2b9132b7dadfb05f203b4d69168fc3c1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:1c:55:3b:9b:41:2d:59:f5:62:38:0f:d5:
                    cb:36:e1:23:d8:f2:58:d2:4f:b4:44:7f:31:ee:22:
                    c4:44:e4:7e:5b:7c:30:8b:30:dc:18:5b:c7:b0:bb:
                    1e:db:c5:10:c5:69:0e:fb:db:ce:5a:08:50:fa:6a:
                    82:45:8e:d9:96:03:3a:65:fa:a5:0e:48:50:1c:3c:
                    2f:f3:08:af:ce:39:92:6d:af:e1:6e:1d:dc:b3:33:
                    58:00:f6:59:4c:95:c4:69:8b:ee:70:b4:79:06:76:
                    f7:fc:c9:f9:d8:53:0d:2a:03:e9:82:e4:a4:3d:1a:
                    4f:c6:a6:c3:51:2c:b2:43:72:ae:92:c5:94:67:41:
                    2d:d2:be:83:ca:e4:03:6b:8b:2e:46:a7:95:50:8c:
                    cc:db:5f:8b:2c:98:76:83:81:5a:12:2b:6c:b5:34:
                    6f:2f:2f:b7:34:0c:55:01:23:73:bd:26:5e:09:5b:
                    dd:a1:f0:47:48:8e:11:86:e8:e6:80:00:42:66:c8:
                    ef:71:04:46:75:81:13:00:b3:64:25:0a:02:9f:13:
                    86:8a:5d:03:db:89:c8:c8:76:72:88:11:0b:59:11:
                    0d:c3:8b:36:71:68:ef:c6:30:67:fb:f9:ca:18:a5:
                    6b:3f:9a:07:a6:eb:60:4c:2b:fe:e6:d2:88:57:a6:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6C:7D:2B:91:32:B7:DA:DF:B0:5F:20:3B:4D:69:16:8F:C3:C1:B1
            X509v3 Authority Key Identifier:
                keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fc:76:57:2f:0c:34:3d:63:87:11:d4:28:b5:20:6d:64:22:
         b7:74:f9:71:89:3b:a6:11:1b:61:9e:c1:b0:f1:11:1c:52:2f:
         ae:6b:83:1e:5b:f1:1f:93:d6:ac:31:63:18:9f:55:4b:b0:a5:
         ed:c8:60:c3:43:a3:39:1b:a1:6c:3b:22:93:d1:44:a5:f7:91:
         bd:97:e4:8a:ca:ec:a3:43:da:a3:dc:90:23:03:f0:83:a3:cb:
         44:b2:ad:35:59:a3:02:d2:16:7e:cd:b6:b5:0a:d2:3d:d9:aa:
         7b:f0:c6:ed:3f:a8:25:90:1b:af:96:89:4d:7b:55:1f:23:27:
         d4:65:66:cd:93:63:6c:8f:0d:3f:ca:ae:a7:2d:0c:9a:4b:b1:
         9e:ed:6c:6d:31:3a:2a:47:f0:6a:b3:1c:4e:9e:bd:a1:24:43:
         83:c5:48:d3:56:11:1c:34:16:6e:89:0b:16:9f:97:ef:90:b7:
         b9:6f:13:82:1e:c2:7d:ac:17:20:20:ec:d6:d0:ad:1c:e7:8b:
         4b:29:e9:8b:90:02:f0:3d:7c:39:57:d6:3b:8e:e5:62:de:9b:
         d6:16:66:48:b0:3e:c9:c2:b6:c2:fe:42:6b:c9:e4:d8:80:2c:
         89:86:e7:ee:c3:3f:8a:36:8c:f7:b9:a1:4a:1d:34:d7:86:20:
         4f:9f:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:58 2026 by rpki-client