Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File:                     iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier:          FJsxgNLWsV/qyyJN2Vw/mZFBgeSYeGVLdqcfikXv7Rg=
Subject key identifier:   61:D6:98:E5:3C:21:BE:09:41:AD:16:AF:C9:64:72:97:E5:EE:EE:49
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer:       /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial:       019EC035DAA9DF44A958BB8231D8BB4934FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number:          1931
Signing time:             Sat 13 Jun 2026 09:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:15 +0000
Files and hashes:         1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
                          2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: Om/axBNWL3PD2G63uXvMWL53Rr+AGrwt0M4VET9l5vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:35:da:a9:df:44:a9:58:bb:82:31:d8:bb:49:34:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
        Validity
            Not Before: Jun 13 09:00:15 2026 GMT
            Not After : Jun 14 09:00:15 2026 GMT
        Subject: CN=61d698e53c21be0941ad16afc9647297e5eeee49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5d:ad:7b:8a:80:2c:ec:c5:85:98:60:55:02:
                    b4:03:f5:56:d8:a0:a5:f1:a6:c8:2a:d4:08:e4:75:
                    2d:55:b9:0f:b8:5d:ce:c9:b4:1b:30:31:6b:31:de:
                    11:7d:05:0e:ed:ee:4a:3b:3f:3d:af:fc:7f:33:b4:
                    9e:4b:5e:b7:fd:94:e1:49:5a:df:ff:b9:b9:c5:87:
                    8c:bc:be:55:e3:14:7d:c3:fd:a1:eb:54:55:c2:f6:
                    78:01:39:64:c5:31:01:92:8f:bf:0d:11:33:a6:7a:
                    7f:7d:cc:d8:2a:8d:db:5c:86:00:8a:e8:b3:6a:6d:
                    f3:6e:c1:29:a3:20:ed:db:ab:50:aa:0f:a4:d7:0e:
                    be:8b:04:7a:3c:46:37:c2:5c:6b:b2:e3:6e:40:89:
                    60:13:e5:0b:83:38:25:49:39:58:2b:8b:97:b4:5f:
                    a3:bf:0f:43:5c:f0:c0:5a:29:5b:ea:93:bc:8f:80:
                    ee:01:49:a8:c4:3c:39:3c:5b:bb:46:91:33:0d:93:
                    4c:e5:6f:e8:44:c9:e4:2f:b2:00:ab:b4:96:e3:e2:
                    25:d9:bb:89:4c:a6:9d:9f:ac:44:d5:e7:23:67:06:
                    2a:84:57:90:3e:8e:bd:c4:9b:49:53:7e:26:0c:1f:
                    6f:77:40:f9:15:5e:c6:69:a6:c5:18:f0:c1:e5:bd:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D6:98:E5:3C:21:BE:09:41:AD:16:AF:C9:64:72:97:E5:EE:EE:49
            X509v3 Authority Key Identifier:
                keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:81:af:1e:f6:5a:0a:1f:73:a5:b7:1e:fa:78:e9:8a:a3:06:
         99:da:6a:3b:07:5c:a3:e4:80:e8:6e:2b:61:d2:9c:cf:ed:28:
         e9:31:03:03:db:3b:cb:f4:3f:92:52:07:4d:36:55:72:0a:72:
         88:7f:83:dc:ad:71:c1:2b:fd:fc:5f:95:a9:45:15:34:bb:3c:
         b8:5f:ca:d1:89:1c:6f:11:58:8b:d9:69:5e:b9:c4:75:df:b2:
         37:c1:51:df:3a:b9:14:49:4b:a3:4d:36:67:d2:26:9c:46:84:
         73:57:4c:28:2c:68:5d:8b:fc:79:33:2f:24:1d:0b:d2:f1:12:
         fe:49:8b:d8:9c:e3:2e:d2:63:c5:82:b8:e8:f3:0f:f9:ce:54:
         40:eb:9d:88:de:cc:2f:14:b0:eb:c4:71:90:49:e9:5c:38:60:
         09:dc:53:80:0e:da:44:cc:ac:93:2c:a2:45:37:17:21:3a:8e:
         65:c0:a5:63:6c:a4:52:6d:5a:63:d5:58:ed:08:01:40:63:04:
         a3:09:98:e5:c7:a9:31:bf:fa:5f:91:b0:e4:0b:3a:8f:47:1d:
         fc:44:73:2c:a4:c9:39:17:3b:84:5c:c9:e5:6d:05:63:d0:03:
         54:8e:4c:c1:7d:16:f2:a3:8e:b2:5d:c5:c0:ac:5b:69:25:98:
         a7:b7:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:07 2026 by rpki-client