Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File:                     1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier:          gcMmYsSM0l2Kf90PjG5wpPwCA88kds7pY1Ec0taPOj0=
Subject key identifier:   F4:55:0E:51:25:1C:B4:4D:CB:DD:13:92:CC:FE:71:B5:36:C3:BA:38
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer:       /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial:       019EC0367102ED592406DC0F378208264735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 09:00:53 +0000
Manifest this update:     Sat 13 Jun 2026 09:00:53 +0000
Manifest next update:     Sun 14 Jun 2026 09:00:53 +0000
Files and hashes:         1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: mSxWXLXrxtsiX9CQmPTcqcvyoaoYvUHRgHcq4muTFpM=)
                          2: b15waVmeZUiAPXdSgALdQ8K_I1k.roa (hash: 8OOWK/04HtqvAlybr5ZST2AvUlB+dJIHZXLz3leFYTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:36:71:02:ed:59:24:06:dc:0f:37:82:08:26:47:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
        Validity
            Not Before: Jun 13 09:00:53 2026 GMT
            Not After : Jun 14 09:00:53 2026 GMT
        Subject: CN=f4550e51251cb44dcbdd1392ccfe71b536c3ba38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fe:34:4a:15:85:6b:56:81:6d:3b:f5:37:c0:
                    76:89:a1:cc:bb:f5:c9:ee:d4:1a:f9:85:7e:b9:e9:
                    f1:fb:75:22:da:c2:a1:9d:c2:6f:9d:24:60:df:b6:
                    26:4f:f6:ac:0b:0c:14:2a:83:e7:b1:15:ad:f9:fc:
                    f1:23:57:c3:69:de:96:34:f9:7c:0b:1a:85:8f:54:
                    6e:ce:17:52:0b:db:94:6f:02:a5:16:b8:60:c9:33:
                    51:ae:35:d3:e2:64:cb:af:ea:6a:d9:e1:f9:93:d5:
                    e0:74:ff:7f:ff:ef:6a:d2:b1:d8:72:11:5c:fb:f4:
                    23:73:20:52:e8:df:56:15:a1:89:a7:92:74:d2:7d:
                    aa:f6:b6:90:03:8d:20:23:8f:c3:03:ae:e1:eb:63:
                    9f:d5:57:e7:79:43:7f:ad:88:66:ea:53:8a:27:54:
                    9e:11:32:fc:67:a1:fe:f9:93:c8:ef:7a:10:ac:f7:
                    38:90:1e:ca:a7:53:e0:f8:35:6e:bf:a2:44:57:06:
                    81:45:1f:eb:e8:2b:ce:3c:71:1f:9b:d6:85:09:60:
                    3f:06:a4:42:06:1c:a1:6d:7d:5e:d9:43:fc:8a:9f:
                    2b:2b:3c:19:05:b6:c1:01:cb:97:19:4d:fe:27:20:
                    ef:d7:6b:8f:ae:8a:09:c8:90:ae:cc:86:97:71:55:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:55:0E:51:25:1C:B4:4D:CB:DD:13:92:CC:FE:71:B5:36:C3:BA:38
            X509v3 Authority Key Identifier:
                keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2f:3e:1d:1b:ef:69:e1:29:86:11:fc:fb:99:c1:96:71:fe:
         4e:52:f4:84:0c:12:92:6f:13:16:c7:2c:8f:d4:5b:7c:90:56:
         aa:f5:4b:2d:97:de:a9:01:ad:2c:27:ce:5f:4a:f6:80:5e:c8:
         9e:c9:2c:e3:21:3c:26:12:5a:02:8f:6f:90:53:d3:98:54:28:
         55:b9:fc:f2:3f:6c:a7:f4:34:92:25:8d:4e:3f:b1:de:f7:2a:
         81:e8:97:3d:ae:b0:75:46:0c:c3:1a:03:82:2e:0e:6b:de:1e:
         93:2d:ea:05:20:81:8c:d4:17:0e:3d:a1:2b:2a:2e:48:10:ee:
         c6:8b:67:41:17:f6:9c:d6:e1:dc:3c:6c:44:7b:66:2f:49:b5:
         ee:4a:4d:86:3e:53:23:3f:4e:f9:e8:26:e3:0b:fd:cc:e7:48:
         66:d5:42:45:6b:39:0d:ec:64:fb:a2:6b:eb:3c:01:a1:12:40:
         c8:ba:6b:45:57:88:8b:8a:8e:f4:23:dc:66:c3:11:fb:ec:e1:
         22:37:0b:22:f0:11:c1:ac:9f:1d:5e:2c:e1:9c:8b:3c:19:15:
         3d:a4:dd:27:99:5a:d2:ee:c5:db:e3:b3:11:0f:c8:cb:6e:20:
         e0:df:9b:70:b7:0a:4a:46:1f:fa:98:98:2e:62:39:d7:32:72:
         1e:c0:4f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:47 2026 by rpki-client