Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
File:                     zzKCScw17CfMEOGLiCxsE4l8hJc.mft (raw, json)
Hash identifier:          ao1L4etamqqmJsTcXqXUh16TLkUNC6RGjWDAjkeeO4U=
Subject key identifier:   42:14:DC:ED:84:05:AB:03:60:2C:FE:DE:38:CA:37:DE:9E:8F:73:22
Authority key identifier: CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97
Certificate issuer:       /CN=cf328249cc35ec27cc10e18b882c6c13897c8497
Certificate serial:       019EC1EDCE01893650156736AC1635563AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
Manifest number:          10F4
Signing time:             Sat 13 Jun 2026 17:00:47 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:47 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:47 +0000
Files and hashes:         1: Gaonav40tTJpKCNRA2Pgw8c6CJI.asa (hash: qQGsDuLfuc8HGPjQosjqKzgl1S/2LQUHdjWbkc+kEYQ=)
                          2: zzKCScw17CfMEOGLiCxsE4l8hJc.crl (hash: 8MBGtE/hBj+/vS8fbO4Sf+gUNGVDOeESNv3S+JyLN7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:ce:01:89:36:50:15:67:36:ac:16:35:56:3a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf328249cc35ec27cc10e18b882c6c13897c8497
        Validity
            Not Before: Jun 13 17:00:47 2026 GMT
            Not After : Jun 14 17:00:47 2026 GMT
        Subject: CN=4214dced8405ab03602cfede38ca37de9e8f7322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5a:8b:fb:43:c9:4f:90:51:b6:98:1b:99:23:
                    8f:64:55:b8:bd:c8:dd:c0:2a:9d:e8:d7:aa:e9:c8:
                    8d:c8:42:4f:0d:f6:78:f5:4c:06:d6:35:5f:4f:5c:
                    7f:38:70:c1:c5:d7:7f:2e:a6:3f:c8:fa:27:bd:de:
                    f8:aa:33:5d:e3:c9:a5:df:5d:4e:d2:50:28:e0:3e:
                    ac:9b:7c:40:51:bd:e8:f9:12:e0:be:94:52:a7:3f:
                    f6:1f:6c:64:1e:c8:01:84:f0:55:24:e4:b6:73:bf:
                    0a:cc:7d:5b:36:11:cd:a9:e3:04:d0:25:e1:f9:f3:
                    9e:78:57:de:65:49:ce:ca:ff:7e:73:c7:aa:18:f0:
                    c3:6d:a4:b8:91:b6:40:18:6e:1b:9f:6f:a1:a7:1e:
                    88:a1:4d:54:69:25:31:18:65:81:f7:f3:33:67:ca:
                    d7:cd:59:9b:d3:3f:af:e6:37:f5:9c:9e:e6:85:9c:
                    ce:96:a0:05:c8:64:8b:cc:a5:d7:5a:b6:f7:42:b1:
                    21:4e:42:8c:83:6d:e8:10:b5:79:bb:e9:bf:4c:9e:
                    75:9e:ba:ee:e0:0c:04:7f:c3:a7:8d:84:53:c8:9d:
                    c2:c5:2f:71:6d:72:aa:e2:d7:ef:ee:14:cd:65:b4:
                    ed:1a:30:5d:1c:9d:f8:dc:f2:56:15:41:af:b1:65:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:14:DC:ED:84:05:AB:03:60:2C:FE:DE:38:CA:37:DE:9E:8F:73:22
            X509v3 Authority Key Identifier:
                keyid:CF:32:82:49:CC:35:EC:27:CC:10:E1:8B:88:2C:6C:13:89:7C:84:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzKCScw17CfMEOGLiCxsE4l8hJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/27d409-7659-453e-b36f-297d52f0c283/1/zzKCScw17CfMEOGLiCxsE4l8hJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:97:de:28:64:f2:ba:c8:76:9d:46:0f:04:34:f6:3c:72:f7:
         29:41:bb:e9:5f:9f:8f:96:bc:1c:38:6d:a4:0c:ca:ae:5d:c1:
         26:26:3a:d2:3d:ae:1f:76:b0:4f:fc:d9:0f:9a:dd:3e:cb:07:
         7e:76:21:fd:25:b0:30:b9:fa:7c:30:25:bf:2d:fc:8a:20:cb:
         d2:95:da:0a:7b:4f:d4:96:ef:13:15:44:09:11:00:f7:fb:72:
         c4:d6:1f:12:72:4d:fa:ab:db:07:ec:ef:9f:2a:a7:46:30:78:
         0d:a5:ab:e0:02:cc:73:7a:ac:21:69:09:d5:5e:90:0b:22:d8:
         84:f4:1c:6d:c8:c6:ff:b1:29:36:da:8e:9e:ad:95:f6:79:ad:
         82:eb:d9:82:38:e3:cc:29:77:dc:39:c5:8c:d8:67:83:f5:69:
         10:e9:52:c6:fb:63:16:85:33:36:dd:ec:f5:45:ba:f4:64:1c:
         54:c2:3d:a1:cb:a4:17:3b:26:70:4d:38:c0:53:1b:d0:a7:a6:
         8d:46:6d:a0:1f:95:33:aa:6f:ef:88:22:24:4b:f1:70:b0:8b:
         3a:f6:f0:08:ba:17:99:6d:3b:2f:f6:0a:a9:59:fb:bd:52:38:
         44:d9:e7:c4:7f:42:04:8a:fc:a2:ad:04:4c:68:90:4a:1b:5e:
         31:a9:2e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:56:47 2026 by rpki-client