Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File:                     Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier:          kzN5ctBUgdu0ti56gQfziv06eVQiJVpNn12rLVYbkRo=
Subject key identifier:   9C:58:01:72:F3:10:B0:1E:4E:5C:1D:B2:8B:C7:93:14:6B:31:7F:AF
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer:       /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial:       019EC300DDB299685EBDD0D646E1C02F3B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 22:01:14 +0000
Manifest this update:     Sat 13 Jun 2026 22:01:14 +0000
Manifest next update:     Sun 14 Jun 2026 22:01:14 +0000
Files and hashes:         1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: jXLlHzbBVwKVwITiDTBn4ezCFXiQ8YwhhczGNueZDTs=)
                          2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:dd:b2:99:68:5e:bd:d0:d6:46:e1:c0:2f:3b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
        Validity
            Not Before: Jun 13 22:01:14 2026 GMT
            Not After : Jun 14 22:01:14 2026 GMT
        Subject: CN=9c580172f310b01e4e5c1db28bc793146b317faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:67:4a:81:c1:82:23:63:8b:50:7f:36:ae:22:
                    13:e7:00:e7:e1:d4:0f:85:62:9c:aa:cf:6d:8d:72:
                    b8:5a:82:46:39:b0:04:ff:19:3d:18:5f:7a:fd:08:
                    f6:79:29:8a:45:0b:f4:51:bb:d8:dc:0e:f5:8d:bd:
                    5d:00:5f:12:e5:f8:2b:d4:8c:59:f6:ad:00:f6:c3:
                    27:1c:7a:b1:37:2e:c8:9f:2f:5c:70:0f:1b:6a:9c:
                    93:41:fa:05:a7:8d:54:b0:91:6c:1b:ea:ea:a3:9e:
                    ba:6c:a1:ac:ee:d5:1b:90:ef:82:e5:10:a3:66:d9:
                    b5:19:a8:04:7b:ce:8f:fe:d2:84:61:65:08:d5:16:
                    4c:ce:5d:fe:9b:e9:57:21:00:ef:70:9b:6f:bc:92:
                    c7:f5:45:17:af:58:ba:b2:aa:09:6c:c7:2c:f9:13:
                    26:12:93:8f:4d:82:6e:00:54:a3:0d:01:00:a4:7a:
                    7c:ad:a9:d8:cf:ba:c8:b1:98:d1:fa:57:51:3a:3e:
                    74:98:f2:7a:4b:e5:06:07:f4:13:47:47:02:ee:4d:
                    22:b4:68:70:92:7a:be:2a:83:b5:75:8f:e2:e0:9c:
                    9b:4f:39:67:48:ca:fc:3f:41:59:26:ad:a8:07:cc:
                    82:e5:6d:90:20:14:50:fa:14:7a:f8:e3:c3:d8:17:
                    8d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:58:01:72:F3:10:B0:1E:4E:5C:1D:B2:8B:C7:93:14:6B:31:7F:AF
            X509v3 Authority Key Identifier:
                keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:ab:ab:a9:38:f7:3b:65:eb:25:8e:5c:7e:51:ed:e0:3a:5b:
         a2:26:71:6a:59:67:42:d6:fb:f1:4d:29:f5:36:fc:c4:96:f1:
         7a:80:84:07:e1:6e:86:a4:57:ff:41:c6:5e:83:f2:8d:f7:36:
         10:60:ec:ef:a8:67:25:3b:07:b0:8e:0a:9b:f5:55:5a:5c:8a:
         14:1a:35:a0:71:ea:14:de:c6:aa:e2:ed:62:a1:0f:b2:d7:b6:
         d8:94:e2:3d:ad:aa:c1:62:97:60:55:7e:1f:1b:60:01:42:8e:
         c6:91:4d:9b:1a:27:a8:05:70:3e:80:72:d4:c0:ba:1a:ed:5e:
         30:a7:7a:62:49:72:f4:51:91:e9:31:62:58:83:af:44:ef:c7:
         3b:d7:c8:ac:26:20:6b:cd:23:8f:24:ba:89:67:09:86:4a:a4:
         1c:aa:f2:34:8a:07:ef:0f:10:f3:5f:03:2c:7e:a6:78:2d:9b:
         5a:57:93:88:24:d7:5c:9c:c8:86:26:dd:e6:db:c6:d6:70:6b:
         87:a8:67:96:a7:96:c8:90:ff:d8:ea:6c:1d:ec:09:62:ed:66:
         e5:2d:99:98:d3:89:f4:ff:67:17:a3:c3:26:ff:62:bf:a1:ee:
         4a:9f:bd:01:66:f5:b8:24:6d:d7:1f:63:ea:88:12:c4:8a:30:
         0c:f8:64:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:51:28 2026 by rpki-client