Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
File:                     fzP8QNLgMzu8e96rK9hZlUMBwPE.mft (raw, json)
Hash identifier:          GuQuPBzpSb0r8pdE37juzt6eHeOGEwglv5fPQbX2bts=
Subject key identifier:   34:61:5D:D3:58:21:6A:F0:88:4E:02:A6:4F:87:E5:4C:E7:0C:0F:11
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Certificate issuer:       /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial:       019EC149475FB133F8F13CED2B0932E3E0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
Manifest number:          08A4
Signing time:             Sat 13 Jun 2026 14:01:05 +0000
Manifest this update:     Sat 13 Jun 2026 14:01:05 +0000
Manifest next update:     Sun 14 Jun 2026 14:01:05 +0000
Files and hashes:         1: fzP8QNLgMzu8e96rK9hZlUMBwPE.crl (hash: OYDbcFsF7ESrstZOldEFNLUh41Vxnaw/3jO/bp0CQ7s=)
                          2: ySsKwQ4c8u9hH8dkf5IAovbGU0E.roa (hash: Lmp6N3VB+ffMGoy168W3pHuRylAIEPbhaHOo0QIFkSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:49:47:5f:b1:33:f8:f1:3c:ed:2b:09:32:e3:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
        Validity
            Not Before: Jun 13 14:01:05 2026 GMT
            Not After : Jun 14 14:01:05 2026 GMT
        Subject: CN=34615dd358216af0884e02a64f87e54ce70c0f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:c6:db:47:85:d9:16:52:d0:59:87:c9:4d:
                    02:c1:c8:e0:2b:b1:ab:76:d4:eb:f4:58:27:d0:66:
                    e1:51:31:ac:28:62:46:1b:3a:f5:f7:1d:1e:c2:ad:
                    a7:b9:a6:bd:ea:08:b4:39:85:39:d3:c6:50:73:d3:
                    6a:0d:d8:d0:0d:4e:76:e4:b1:a5:d3:3e:70:db:5d:
                    b7:bb:84:85:3c:9c:7b:20:d3:9f:b7:13:46:a0:0d:
                    90:24:5e:3a:e8:61:82:79:80:d9:a8:92:58:1e:74:
                    5d:e2:1a:be:7c:80:cf:99:99:5c:c9:99:ab:80:c5:
                    16:6f:14:2f:e3:1a:42:a1:bf:d0:cb:7a:c9:11:d2:
                    76:ca:62:98:8c:8d:d8:88:87:72:57:37:5d:1c:1b:
                    32:a0:71:f4:be:87:40:3d:9e:77:92:d6:f9:a9:38:
                    aa:1c:12:4a:11:d7:6b:21:58:81:5b:14:2c:5c:d1:
                    d7:bb:8c:a4:52:96:67:4a:cf:c6:24:10:10:19:0e:
                    26:bb:ca:c7:d7:a5:9e:7d:9e:01:b6:09:d5:06:28:
                    df:e7:21:7a:0a:85:57:6d:ab:39:da:ab:00:1e:0e:
                    06:03:2d:19:11:1c:d4:31:79:d8:81:e1:82:2c:57:
                    c8:89:86:6a:ec:6c:65:a7:c1:de:91:fb:a3:6a:e9:
                    bc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:61:5D:D3:58:21:6A:F0:88:4E:02:A6:4F:87:E5:4C:E7:0C:0F:11
            X509v3 Authority Key Identifier:
                keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b3:d3:a6:e2:38:35:7f:f8:c2:b9:84:dc:61:92:16:f7:2f:
         57:c4:1e:66:48:5e:71:93:93:61:76:54:2f:02:ec:91:8d:ef:
         d8:c5:fc:36:22:76:eb:12:f0:9d:d4:4e:2a:16:0f:cc:f8:11:
         cc:af:1b:c1:21:94:60:21:43:40:38:32:c5:07:75:27:15:d1:
         7b:8a:2b:cd:47:eb:78:6d:ae:a0:f4:ce:4e:bf:b0:47:86:4f:
         23:eb:cf:4e:f8:3b:2d:c1:dd:a3:5f:0a:dc:29:71:83:df:c0:
         15:4e:f7:fa:8c:66:0f:66:28:88:f3:90:28:b6:c6:82:9a:9c:
         9e:10:6b:f2:e8:90:05:c0:4e:70:cf:3c:f9:ca:f8:88:fa:af:
         55:37:5a:ab:25:88:92:9a:56:35:9c:b9:96:cb:9f:8b:70:e2:
         ea:48:b1:b2:35:ae:0e:b7:0b:08:c8:94:61:60:6a:8c:c4:d0:
         29:38:0d:17:64:9a:cf:2f:92:81:21:c4:09:b1:49:c8:d3:62:
         63:98:bf:07:c8:a4:6e:af:9c:09:bf:e4:ee:eb:9e:c4:4a:97:
         f5:7d:f1:d2:6e:5b:7a:41:d3:6b:c4:1c:43:30:e7:45:4c:85:
         14:6f:03:7c:8d:45:ba:7c:3a:43:6e:7e:c9:88:94:34:11:ba:
         88:33:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:50 2026 by rpki-client