Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File:                     pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier:          GEWc2FJjcBkE+S3W6brsVOsckxusPMj413d2Qs4bJJ8=
Subject key identifier:   69:1A:70:96:FC:08:B7:DF:52:2B:12:CF:53:02:AD:82:9B:58:EC:7E
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer:       /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial:       019ED319205BBA7C73D7B5E347C1182D99AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 01:01:39 +0000
Manifest this update:     Wed 17 Jun 2026 01:01:39 +0000
Manifest next update:     Thu 18 Jun 2026 01:01:39 +0000
Files and hashes:         1: Urq1eK2xjT76TDiGVNPLNYSAots.roa (hash: JIPIWUvk2jdNeoap+skOWO5/nkQDUADjKMBqk5o7Ql4=)
                          2: fUJVfPMe1XGExx7fdEk0_IUNnjQ.roa (hash: FC4xYnyMIWrY9agdhsu1OBRUWLqsl9NHbIz4gZTG77I=)
                          3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: VxRQlQBlBoJYHlSUQlL7gG2A3BZqXKepjU15HeY6Eyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 01:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:19:20:5b:ba:7c:73:d7:b5:e3:47:c1:18:2d:99:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
        Validity
            Not Before: Jun 17 01:01:39 2026 GMT
            Not After : Jun 18 01:01:39 2026 GMT
        Subject: CN=691a7096fc08b7df522b12cf5302ad829b58ec7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:e3:cc:65:4b:b5:81:dc:56:66:bc:81:d5:
                    29:6d:db:66:62:44:d5:8d:df:65:03:fe:19:b7:36:
                    cd:a7:5d:75:d2:6d:90:3d:e4:3d:85:e0:ee:e1:d2:
                    7a:43:d4:6e:38:11:62:6b:dd:af:fe:33:cd:f3:3b:
                    ba:62:86:7d:25:4d:22:d5:41:74:df:82:2e:aa:ef:
                    f5:ea:6b:c2:1a:6e:f6:36:11:70:48:10:7b:3d:67:
                    9d:a1:27:51:8f:47:67:2e:03:38:c2:4e:1a:02:69:
                    6c:05:14:0d:25:4e:5e:ed:33:bd:50:f1:32:fc:86:
                    ab:f7:33:64:5d:a3:1d:eb:58:50:14:b0:94:ea:e2:
                    31:23:c4:f8:4a:51:dc:24:a6:02:88:19:7e:bb:d7:
                    39:78:37:92:73:99:9e:98:5d:08:f7:cc:f9:cd:98:
                    5d:5b:5b:ae:b1:96:d4:04:00:37:1f:6c:e2:14:ad:
                    3e:cb:2a:0f:a2:d3:1b:ac:7e:0b:1b:6c:a0:ab:bc:
                    74:90:72:c3:46:1c:00:25:5c:a2:63:9e:a0:c5:08:
                    32:9f:7c:0e:6a:2b:e4:ed:dc:e2:cf:f3:ca:64:49:
                    f0:6d:52:1e:28:9f:a5:b0:90:2a:1f:bc:ce:45:d4:
                    c3:8d:37:62:57:1c:30:35:1f:68:df:81:92:31:54:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1A:70:96:FC:08:B7:DF:52:2B:12:CF:53:02:AD:82:9B:58:EC:7E
            X509v3 Authority Key Identifier:
                keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f5:af:c5:0a:02:58:b9:28:40:8f:93:4a:7c:86:4a:98:8f:
         d4:db:ab:2e:ad:43:0f:4c:66:fc:0c:33:31:c4:af:de:dd:00:
         a6:b6:68:96:f6:18:02:0e:5f:3b:7f:b0:4b:c8:55:0f:d3:46:
         c4:f2:8a:f4:43:04:fb:b2:94:ee:13:f1:66:a8:f7:a5:56:21:
         de:ce:96:02:a5:76:f6:1c:a3:58:e8:d8:fb:20:93:a2:f4:32:
         6b:b5:dc:e4:39:88:e7:06:94:c5:f4:7c:7f:bc:7f:34:a0:fe:
         7d:46:df:12:bb:7d:d3:eb:23:c6:94:6c:63:9e:16:36:b7:c1:
         ad:d3:b2:26:dd:4c:d6:46:ef:29:95:73:9e:09:85:d0:ec:d1:
         c8:44:4b:65:f5:fa:35:4d:37:e8:87:b4:95:07:3a:ba:93:b7:
         d9:a2:f9:82:09:02:c8:3e:56:36:6b:93:c3:10:b0:b5:9e:93:
         19:4a:e8:29:6b:d9:e2:f9:f5:c1:39:07:b0:57:4c:60:0f:bc:
         8f:0d:67:48:fc:25:b1:46:bd:26:14:50:8e:a0:85:81:34:18:
         de:30:70:7c:99:10:b7:23:37:a2:0b:c1:1a:44:f5:b6:66:32:
         45:8a:ee:bb:2c:d2:16:da:5c:94:9a:72:ef:88:ae:99:a9:04:
         3f:8d:66:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7TGSBbunxz17XjR8EYLZmtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmNmM2VhM2Y0NjE5YWRkN2IxZjg1ZTVkYmM3NjhjZDNk
MTc0MmQwHhcNMjYwNjE3MDEwMTM5WhcNMjYwNjE4MDEwMTM5WjAzMTEwLwYDVQQD
Eyg2OTFhNzA5NmZjMDhiN2RmNTIyYjEyY2Y1MzAyYWQ4MjliNThlYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjjjzGVLtYHcVma8gdUpbdtmYkTV
jd9lA/4ZtzbNp1110m2QPeQ9heDu4dJ6Q9RuOBFia92v/jPN8zu6YoZ9JU0i1UF0
34Iuqu/16mvCGm72NhFwSBB7PWedoSdRj0dnLgM4wk4aAmlsBRQNJU5e7TO9UPEy
/Iar9zNkXaMd61hQFLCU6uIxI8T4SlHcJKYCiBl+u9c5eDeSc5memF0I98z5zZhd
W1uusZbUBAA3H2ziFK0+yyoPotMbrH4LG2ygq7x0kHLDRhwAJVyiY56gxQgyn3wO
aivk7dziz/PKZEnwbVIeKJ+lsJAqH7zORdTDjTdiVxwwNR9o34GSMVSV8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkacJb8CLffUisSz1MCrYKbWOx+MB8GA1UdIwQY
MBaAFKQs8+o/Rhmt17H4Xl28dozT0XQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTIt
Yzc3NzUxNTlmYzgyLzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NzI2OWItMGY3MC00NmNmLWJjZTItYzc3NzUxNTlmYzgy
LzEvcEN6ejZqOUdHYTNYc2ZoZVhieDJqTlBSZEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/WvxQoC
WLkoQI+TSnyGSpiP1NurLq1DD0xm/AwzMcSv3t0AprZolvYYAg5fO3+wS8hVD9NG
xPKK9EME+7KU7hPxZqj3pVYh3s6WAqV29hyjWOjY+yCTovQya7Xc5DmI5waUxfR8
f7x/NKD+fUbfErt90+sjxpRsY54WNrfBrdOyJt1M1kbvKZVzngmF0OzRyERLZfX6
NU036Ie0lQc6upO32aL5ggkCyD5WNmuTwxCwtZ6TGUroKWvZ4vn1wTkHsFdMYA+8
jw1nSPwlsUa9JhRQjqCFgTQY3jBwfJkQtyM3ogvBGkT1tmYyRYruuyzSFtpclJpy
74iumakEP41mRQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:47 2026 by rpki-client