Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File:                     1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier:          FRNrKufmDg4otOajWT3TJQndWCr/WDEZ9oNih0FvoWk=
Subject key identifier:   1E:76:52:15:14:AD:C8:C9:1D:CE:03:A9:03:8D:77:D5:C6:78:01:37
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer:       /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial:       019EC0DB0981DCDC031625B0A8AA9BE3F0B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number:          08C6
Signing time:             Sat 13 Jun 2026 12:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:40 +0000
Files and hashes:         1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: 8wQx3wYOGKhLOrEAgFttIINMcW5xayC3lvHm8INguIs=)
                          2: KD5Nzwe5gk1N-Rm3egJ-hjvwQnU.roa (hash: 8YQQaqmVY0bXdQ+XjWYENgqQf0S4GzGtcS/OODIOYgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:09:81:dc:dc:03:16:25:b0:a8:aa:9b:e3:f0:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
        Validity
            Not Before: Jun 13 12:00:40 2026 GMT
            Not After : Jun 14 12:00:40 2026 GMT
        Subject: CN=1e76521514adc8c91dce03a9038d77d5c6780137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:66:2b:e4:9f:02:17:a0:d4:8d:92:38:5d:
                    54:b4:7f:7b:70:01:0e:a4:da:e2:26:21:e5:36:62:
                    61:51:80:4c:f6:c5:b5:28:51:7d:ec:28:c5:9d:eb:
                    3b:5a:4a:c5:bb:29:9a:95:a8:e1:d8:f1:ec:05:34:
                    1d:8b:d5:8a:f2:66:6a:83:4e:b0:5f:e3:c2:7c:fd:
                    02:a2:c1:86:19:fb:39:6c:1f:73:e1:cc:54:2c:dd:
                    63:02:f0:ea:56:3c:35:b6:7b:e0:86:bc:47:a4:39:
                    75:26:58:61:7e:76:28:1a:5f:2a:86:72:32:a0:73:
                    99:91:d2:3d:2f:ac:3b:11:ac:fb:51:a1:71:05:81:
                    d5:2a:6b:67:74:00:3e:bb:04:6d:df:e8:53:62:ff:
                    c7:5c:6f:ac:76:fc:42:6f:5a:9f:62:a9:85:c7:79:
                    eb:fd:26:58:fc:94:2f:31:c1:49:70:95:98:f3:7a:
                    ef:05:b1:1c:c8:25:a8:1f:7b:18:a3:a0:51:40:17:
                    31:a0:dc:a2:85:bd:cc:a2:34:f5:8e:71:96:dd:59:
                    37:b7:43:f4:f3:b5:e6:80:c5:54:44:3c:34:c2:da:
                    32:dc:af:f5:05:3f:a1:48:d5:fa:e1:6b:24:f6:5a:
                    ee:63:6b:a1:4c:0c:54:64:7a:56:9f:cb:dd:3e:60:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:76:52:15:14:AD:C8:C9:1D:CE:03:A9:03:8D:77:D5:C6:78:01:37
            X509v3 Authority Key Identifier:
                keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:72:95:24:78:19:72:66:dc:1c:3a:5f:bc:47:86:75:2c:ef:
         a4:23:85:33:d3:52:a5:09:e0:fb:33:7e:a7:b9:bc:b5:dc:8c:
         35:de:e7:72:6f:a4:20:c0:98:09:96:27:64:f1:bf:94:dd:7e:
         f7:c3:fb:cc:00:f5:e1:11:d0:c5:a9:1c:51:d5:35:1d:82:1f:
         c2:f9:68:a9:6a:3f:c7:84:62:c0:38:d3:5f:a3:11:89:cd:32:
         c3:7f:bc:94:39:55:d3:73:38:d7:c5:f2:4e:f2:10:5a:d6:1d:
         61:66:32:dc:7b:57:16:64:da:d3:e7:15:45:61:16:a6:67:3a:
         e6:8e:28:b6:cc:10:69:5f:82:14:b1:d0:20:13:78:ff:4c:62:
         00:87:f2:12:6a:06:dc:33:59:3a:f6:71:95:9c:08:ac:08:dc:
         80:37:76:31:29:eb:d5:b1:8b:b6:a7:1a:4b:6f:2b:ec:01:72:
         4e:b1:a1:72:09:ae:5c:10:88:14:ff:ad:1b:47:b5:1f:01:00:
         16:c2:3c:29:74:3d:ec:7b:8c:cd:51:3a:cb:2d:41:8d:cc:43:
         03:0e:c0:ef:01:a6:2e:2f:23:a8:c7:1a:1c:c4:e6:0e:8a:8d:
         89:1a:57:cc:1e:72:6a:76:da:b4:5e:69:bc:5c:f1:7c:f4:31:
         11:f3:c3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:37:59 2026 by rpki-client