Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
File:                     rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft (raw, json)
Hash identifier:          gnqCf8uJ9Ybe9K6+xr5TZiiA0mKzM8kn4MzBHglEhDo=
Subject key identifier:   1D:91:F7:DF:FA:84:82:B0:B5:E4:2D:AF:D0:C0:75:22:97:B8:AF:2B
Authority key identifier: AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF
Certificate issuer:       /CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
Certificate serial:       019EC4811D69006D5789C6952BBAF856FD17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
Manifest number:          0412
Signing time:             Sun 14 Jun 2026 05:00:56 +0000
Manifest this update:     Sun 14 Jun 2026 05:00:56 +0000
Manifest next update:     Mon 15 Jun 2026 05:00:56 +0000
Files and hashes:         1: 15iMLkZijLxFQhyhHpyZVO_Pbh0.roa (hash: 4vg9pvNIz6AeHAhcqTYuN2xhMEHA7ity8ku3fgSFNxI=)
                          2: rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl (hash: JzNzB992DOtV/kFYwUM4sWPBWhab8/kIhEN9FPulhfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:81:1d:69:00:6d:57:89:c6:95:2b:ba:f8:56:fd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9479afe3a9a18e1c374fca022d1ff2a255b1af
        Validity
            Not Before: Jun 14 05:00:56 2026 GMT
            Not After : Jun 15 05:00:56 2026 GMT
        Subject: CN=1d91f7dffa8482b0b5e42dafd0c0752297b8af2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:ca:3f:ad:78:59:9b:98:33:06:59:c0:f9:
                    77:2d:a9:48:c6:f4:fa:3b:44:e3:cb:51:9d:cb:36:
                    74:e5:fa:7f:26:a6:77:2c:48:c5:6b:2d:52:92:f1:
                    08:c4:e2:a7:86:81:c1:b1:b8:71:38:05:0e:b6:e5:
                    f6:d5:ca:14:6c:d7:c4:ed:05:6c:85:eb:2a:0f:a4:
                    81:2f:02:06:6c:3b:f8:f3:91:d9:66:69:87:13:5a:
                    c0:d9:1f:78:87:dd:04:8e:48:0c:55:12:86:5d:88:
                    33:6d:19:c9:a0:f6:bc:b7:cf:b8:10:1b:3f:68:71:
                    63:a1:9b:1a:fa:31:d1:f0:31:49:8e:5e:5f:d1:4f:
                    51:54:eb:cf:ca:39:17:0a:e3:8d:87:2b:ab:f5:8b:
                    40:2f:a4:78:d7:b6:d3:ec:8c:5a:ca:59:c3:ab:7e:
                    71:e4:e5:e5:08:b1:e8:6d:06:32:6a:3f:52:15:cf:
                    62:c1:c5:8b:0d:a6:55:59:83:06:9b:c4:8d:f7:da:
                    62:2d:7b:b1:55:68:70:eb:61:59:c3:2d:20:88:39:
                    a0:02:22:30:01:79:96:f7:4f:66:fe:87:d2:f2:ca:
                    f0:18:84:9a:c7:6c:de:70:55:7e:24:36:15:fc:3d:
                    51:5b:37:bb:6f:7f:11:de:2b:c2:97:37:e1:57:94:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:91:F7:DF:FA:84:82:B0:B5:E4:2D:AF:D0:C0:75:22:97:B8:AF:2B
            X509v3 Authority Key Identifier:
                keyid:AD:94:79:AF:E3:A9:A1:8E:1C:37:4F:CA:02:2D:1F:F2:A2:55:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZR5r-OpoY4cN0_KAi0f8qJVsa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b2f963-3939-44c5-9b9d-b16242b9bde7/1/rZR5r-OpoY4cN0_KAi0f8qJVsa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:30:e1:a8:4a:7b:61:e7:ed:b7:bb:8d:ab:13:51:15:02:39:
         6d:96:21:32:b9:7c:b3:8a:71:fe:8e:27:ec:3d:58:0f:88:74:
         ac:e0:e8:43:5a:e2:85:f6:21:9d:c3:8d:9a:d7:f2:27:eb:c7:
         1a:76:55:bd:66:be:72:be:2f:2b:bc:37:1f:0c:47:16:cb:a0:
         e7:41:0f:a5:a5:00:2e:2c:4b:d3:df:20:a0:25:a4:6c:93:af:
         7e:10:d1:35:db:4e:1d:f9:ea:16:b8:1f:79:b6:03:95:d9:10:
         24:6d:fd:e8:0f:05:20:47:ad:8e:04:fa:9d:43:f1:2b:ac:c1:
         86:f6:b4:bb:91:9f:3f:b3:b9:58:b1:2e:30:12:b6:ec:aa:00:
         59:8a:86:f2:6c:08:c4:93:d9:27:f6:b1:39:9d:fa:d8:71:d9:
         21:e1:3f:46:85:89:3e:df:a3:b1:2d:f4:5a:4e:45:f2:08:a0:
         26:9b:5f:28:74:41:bc:15:97:46:49:bc:0e:34:ba:be:c5:c5:
         12:96:2a:34:a6:fc:5d:a7:f1:fe:4f:25:27:5e:56:74:82:c2:
         6e:ec:63:93:f6:1b:60:56:60:16:e7:bd:4c:09:94:8b:41:82:
         0e:39:6e:23:14:fb:97:f5:8a:21:e1:15:0a:b1:ab:e8:06:fe:
         ea:6d:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:37 2026 by rpki-client