Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.mft
File:                     z9C0uuE0JweyZgv8_HTpmghS5J8.mft (raw, json)
Hash identifier:          FxG90u3AI28vV7/72oEM+CimYzH+izinBz4HTd37MI8=
Subject key identifier:   0E:75:F6:BF:94:7A:01:0C:D5:FB:89:80:4F:8E:C0:88:3C:7B:A0:89
Authority key identifier: CF:D0:B4:BA:E1:34:27:07:B2:66:0B:FC:FC:74:E9:9A:08:52:E4:9F
Certificate issuer:       /CN=cfd0b4bae1342707b2660bfcfc74e99a0852e49f
Certificate serial:       019EC06E255C85D71B689D26A76B1E7C0D50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z9C0uuE0JweyZgv8_HTpmghS5J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.mft
Manifest number:          0F
Signing time:             Sat 13 Jun 2026 10:01:44 +0000
Manifest this update:     Sat 13 Jun 2026 10:01:44 +0000
Manifest next update:     Sun 14 Jun 2026 10:01:44 +0000
Files and hashes:         1: z9C0uuE0JweyZgv8_HTpmghS5J8.crl (hash: X8zFhb2VRFDK+LmeI7u5547bU8Z5OyQEZjFKxWkbV1E=)
                          2: zyN-ZVjyBRof3RZPTAuiK23Dij4.asa (hash: CcKHk8N+y7xcd6YwUq0NHCEOSb2kKqihjTrjg5DotXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z9C0uuE0JweyZgv8_HTpmghS5J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6e:25:5c:85:d7:1b:68:9d:26:a7:6b:1e:7c:0d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfd0b4bae1342707b2660bfcfc74e99a0852e49f
        Validity
            Not Before: Jun 13 10:01:44 2026 GMT
            Not After : Jun 14 10:01:44 2026 GMT
        Subject: CN=0e75f6bf947a010cd5fb89804f8ec0883c7ba089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:ab:10:90:ff:1f:c7:e8:13:24:af:c2:9d:
                    85:df:09:c2:1c:f6:80:a3:0c:d3:09:71:08:9d:7b:
                    10:79:0b:2e:92:a4:91:10:1b:68:a1:52:55:12:4e:
                    6d:90:2b:c3:88:96:09:05:2d:2c:80:b5:2a:ba:df:
                    f4:f2:b0:f7:4a:a7:99:b5:49:eb:2e:16:cd:4c:13:
                    f0:26:5a:06:42:4b:59:d7:1a:eb:80:34:25:a6:50:
                    41:f5:33:f5:17:06:47:fb:a5:16:64:4b:de:bc:c8:
                    38:fa:c3:49:f1:b4:77:0c:6a:87:39:b4:4e:85:f1:
                    5e:41:43:b7:12:eb:21:b8:d2:0d:eb:f9:7d:d5:31:
                    20:3e:7a:cf:2a:1f:1c:7e:c4:20:60:45:2f:6b:46:
                    09:d7:e4:05:da:9a:c8:f1:3e:75:fb:aa:c7:37:49:
                    2a:fa:ba:61:8a:fe:06:cf:28:7e:9c:d2:bf:dd:5e:
                    fd:7d:b5:27:f7:23:39:8e:d6:94:aa:cb:5d:95:7e:
                    dc:35:26:68:59:64:87:e8:c5:54:f8:8c:be:ae:d3:
                    f9:43:b4:57:4f:50:82:e9:21:5b:57:4c:23:9d:72:
                    d7:73:65:ba:85:18:fc:0e:82:dc:e3:52:48:8d:80:
                    87:46:81:1a:74:e6:fb:a9:97:3a:4c:0c:99:f8:7e:
                    4a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:75:F6:BF:94:7A:01:0C:D5:FB:89:80:4F:8E:C0:88:3C:7B:A0:89
            X509v3 Authority Key Identifier:
                keyid:CF:D0:B4:BA:E1:34:27:07:B2:66:0B:FC:FC:74:E9:9A:08:52:E4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9C0uuE0JweyZgv8_HTpmghS5J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/z9C0uuE0JweyZgv8_HTpmghS5J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:65:89:07:f8:0e:a0:6b:1d:2d:7e:62:36:5b:1f:a9:87:a9:
         cc:c9:da:6d:5d:a0:03:23:71:13:be:a2:0a:4f:07:81:a2:04:
         7b:06:82:a6:0c:01:90:ea:bd:a8:43:6c:e1:f5:99:ab:f2:89:
         35:50:f2:b1:c1:c7:b2:b7:74:c8:4c:3b:05:19:bf:6c:a3:d5:
         21:eb:db:a1:b0:80:5d:69:73:d3:d8:d1:0c:c0:92:7b:c3:6d:
         65:4e:b4:11:4b:eb:0b:7e:15:bc:2a:67:8e:4c:fa:d4:49:55:
         d4:3e:65:06:4a:45:6b:63:4f:30:25:55:d4:dd:c5:6a:8f:17:
         33:f0:2e:fb:21:36:3b:1d:69:c4:d3:1f:4e:1b:15:13:80:62:
         7f:1c:b9:c9:03:ac:dc:af:da:26:11:30:60:85:8c:89:8e:eb:
         54:1a:f4:9b:85:60:9c:90:bd:75:84:7c:b3:80:4b:fc:cf:a8:
         49:19:96:a5:87:d5:cb:db:87:c2:b0:cb:9b:83:9e:86:df:3d:
         0d:a7:d1:90:db:d6:8a:f4:4b:2a:d9:fa:76:49:01:2a:ae:f1:
         f5:44:5e:44:22:07:83:e4:25:2e:92:d0:db:20:72:ff:5e:ee:
         33:54:34:ae:95:0e:9a:e3:64:03:2c:f4:39:47:42:b9:ea:b8:
         c8:9e:30:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:27 2026 by rpki-client