Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File:                     4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier:          WIvysDDjKhT3Waj1IPaKdFPTaLeaUYb62jm85Xx/pik=
Subject key identifier:   CF:9C:89:B4:D7:9D:F4:51:E2:27:E1:7B:34:30:C0:56:0F:07:26:F0
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer:       /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial:       019EBEED404D9BF06860F44CC7F1EBABDDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 03:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:19 +0000
Files and hashes:         1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: NgkS/5piw3OQMvmHsdpoXdrNSmPc4zpk0j+ylAmxS5w=)
                          2: Rn2NWJkYlmshYFgoPzIuXMYWVGc.roa (hash: JJzFZmd7A4HTxXMIGqGZ67CiVP4Sj1WJIj0x7HOLtqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:40:4d:9b:f0:68:60:f4:4c:c7:f1:eb:ab:dd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
        Validity
            Not Before: Jun 13 03:01:19 2026 GMT
            Not After : Jun 14 03:01:19 2026 GMT
        Subject: CN=cf9c89b4d79df451e227e17b3430c0560f0726f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:66:08:b5:bd:d3:2a:86:71:86:3f:00:75:
                    fe:60:69:58:a7:dd:82:94:fe:7a:02:97:39:5d:31:
                    26:64:85:ca:7a:7d:d5:74:92:ca:54:e1:8c:0e:81:
                    e7:69:11:99:e6:f8:36:43:24:4f:f7:cc:8a:b1:31:
                    2b:58:45:20:05:d8:28:01:ec:44:e7:03:ca:e1:9d:
                    11:2e:a2:c0:de:e5:c4:86:2c:9b:6a:74:9b:5c:8f:
                    b8:e0:23:b5:6a:9a:f1:8d:b0:7b:64:93:34:e2:d5:
                    73:99:91:9c:f5:1e:02:4b:48:e0:fa:c9:45:03:de:
                    01:b3:78:ef:30:7d:5f:fc:33:df:6e:8a:bd:ce:cf:
                    c5:6a:e3:d9:47:a7:f8:bf:c8:c7:ab:00:e8:72:62:
                    1b:12:ba:63:5a:c4:e6:b6:2c:5a:a1:fb:f9:f4:14:
                    c4:0d:10:cf:bf:83:be:f9:10:1a:de:06:dd:90:bc:
                    a6:3a:78:65:32:bf:ad:7c:59:10:ff:21:87:b8:13:
                    68:cc:85:9c:15:1a:46:49:45:b8:ef:ba:24:4b:cd:
                    30:fa:60:90:b0:13:45:5a:04:d2:a6:6f:7d:8e:4f:
                    30:58:2d:c1:9d:14:f0:aa:dd:44:4d:23:8c:92:55:
                    d1:09:90:b1:b2:48:ec:e7:64:2b:77:6a:7f:c0:1e:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:89:B4:D7:9D:F4:51:E2:27:E1:7B:34:30:C0:56:0F:07:26:F0
            X509v3 Authority Key Identifier:
                keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:15:e0:cf:3b:d8:bc:b1:4a:44:6c:1c:2d:d6:bf:73:94:5f:
         0f:b3:62:7d:6c:9f:24:45:b5:1c:e8:fa:91:5c:83:ba:27:c9:
         fa:58:0d:ba:c9:af:c4:22:ed:a1:0d:93:32:c0:ca:a5:66:dd:
         11:d9:ea:10:0c:e6:fe:89:82:21:37:3f:0f:e6:07:c0:ab:ef:
         a0:7b:22:50:83:2f:92:f2:c5:4b:30:c8:38:4d:19:02:db:c5:
         41:74:9e:19:b3:eb:01:89:36:6d:1d:d5:25:21:61:da:de:61:
         72:e8:95:55:72:9d:d5:99:83:ad:3e:46:ab:ad:91:ea:9d:9d:
         3d:87:bd:b3:6a:36:36:43:b6:0d:0a:86:e9:8a:57:4b:14:6a:
         48:91:33:34:1d:8c:27:08:b6:29:34:34:43:46:81:6e:dd:54:
         d8:de:c8:55:e6:28:bf:61:f7:23:6f:0f:5a:4b:72:93:d0:43:
         0e:ff:71:19:1f:a9:76:01:7d:4e:44:c4:59:ba:6c:c4:b7:5e:
         d0:4b:15:02:52:bf:02:ac:63:3c:24:74:e5:cc:12:96:fc:83:
         e4:8a:d4:77:94:f6:6b:80:6b:1a:ca:fa:33:54:af:bf:30:21:
         f2:a3:6d:ce:3e:82:a0:68:61:f2:01:c4:8c:45:6e:91:81:34:
         33:c3:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:00 2026 by rpki-client