Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
File:                     aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft (raw, json)
Hash identifier:          cvdnh9v67RdwQH2KmzS7deCAqbGYFuDs0LrOCq5uzG0=
Subject key identifier:   49:50:E9:9A:F7:1A:EA:FF:38:41:31:10:43:3D:8E:E3:B3:AC:A7:DB
Authority key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Certificate issuer:       /CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Certificate serial:       019EC25BBE805EC02C7FE91E2F565ACE6209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
Manifest number:          02FC
Signing time:             Sat 13 Jun 2026 19:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:52 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:52 +0000
Files and hashes:         1: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl (hash: SlytAYhrIoVJYAQ+vE+Pm5mAXD0SzlCLqssXv0Kngv8=)
                          2: zIyAUwF-LJlT9SOUOwU0Pdyt4G4.roa (hash: /Tmx9Ly9zFoq7yV+T0VGCTT8klLFQNZ6UtKDdkPo4ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:be:80:5e:c0:2c:7f:e9:1e:2f:56:5a:ce:62:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
        Validity
            Not Before: Jun 13 19:00:52 2026 GMT
            Not After : Jun 14 19:00:52 2026 GMT
        Subject: CN=4950e99af71aeaff38413110433d8ee3b3aca7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:12:8c:d3:f0:2d:d6:68:af:c9:3e:94:27:
                    85:ae:c2:91:56:76:81:6a:11:20:6f:8a:55:84:f2:
                    7f:53:97:d0:44:d2:01:82:4d:2d:3d:aa:39:ad:02:
                    31:a5:94:50:d5:ca:9c:6b:12:15:7c:34:61:80:b9:
                    95:05:dd:a5:33:9c:18:fd:60:39:1a:2b:0c:25:97:
                    ff:95:3e:90:8e:fb:58:29:7f:94:dd:80:dd:74:cd:
                    aa:fc:9a:32:82:5e:dd:ee:83:47:92:e6:5d:a8:04:
                    61:79:58:6e:2c:ab:9e:46:01:3e:54:7c:37:37:c3:
                    ff:64:d1:45:24:a1:8d:71:83:90:84:7f:c3:2f:62:
                    58:b5:2b:59:7a:d7:62:5b:6c:17:ce:fe:15:7c:c6:
                    ac:9f:97:b3:27:e3:b5:6e:63:c9:da:85:01:b8:d1:
                    0a:70:e0:3c:54:96:72:58:77:5e:f0:7d:56:c1:61:
                    d3:e8:36:be:60:0d:27:10:b5:92:6c:ff:e9:e4:e5:
                    3d:93:c1:08:25:64:c7:5e:62:bf:db:e9:75:86:f7:
                    fb:ad:5d:bf:a1:8d:a3:54:01:cb:d1:65:a4:16:e9:
                    05:03:35:20:0b:8a:fb:9d:cf:b9:f0:9e:40:5e:d7:
                    0b:a1:8c:57:3c:52:a8:b6:1a:44:94:2c:67:be:ec:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:50:E9:9A:F7:1A:EA:FF:38:41:31:10:43:3D:8E:E3:B3:AC:A7:DB
            X509v3 Authority Key Identifier:
                keyid:69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:00:26:fe:f4:18:b0:87:22:a1:45:56:82:89:94:bd:14:46:
         b4:a6:fb:e1:c9:3a:4a:48:97:fa:32:4c:cd:0f:b9:20:e4:43:
         01:68:56:5e:1b:64:ca:69:44:4b:9c:f2:4d:8c:b9:ed:47:f0:
         ab:ee:42:3e:05:32:c5:ce:d9:59:e0:f8:b2:8a:b9:ef:c8:8d:
         22:2d:e2:b4:a0:61:b4:a5:e3:47:55:d7:70:0d:1a:13:b8:61:
         13:41:f4:ef:6d:2c:b7:50:7d:7a:31:58:91:74:3d:26:8a:70:
         a5:56:f1:63:40:09:1a:f9:2d:a9:11:43:97:86:bf:6b:14:0e:
         3a:b5:43:ec:66:22:33:9c:e3:7d:01:c0:3f:77:96:9f:31:68:
         f4:77:e4:e0:b2:47:25:64:d3:ba:81:f2:01:af:16:b8:ef:92:
         c0:e4:59:8f:b6:0d:64:83:ac:c9:4d:37:a2:9d:3d:6c:ec:c4:
         44:b0:95:9d:99:80:4a:83:8f:98:4b:bf:64:c7:63:90:d8:32:
         ad:d1:82:0e:ff:d2:54:07:84:40:21:38:5c:98:5b:bd:de:6b:
         e1:da:3f:f3:49:86:be:b6:cf:80:48:5b:aa:5f:3f:88:a4:78:
         a1:89:a4:6d:a5:5f:62:97:30:ef:d0:6a:3b:41:28:e8:98:24:
         97:6c:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:28 2026 by rpki-client