Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File:                     RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier:          PUPF40iLjth6eB4odZViCAJepGEy2G9swx7AhaoqjCE=
Subject key identifier:   C4:C5:D3:B7:0E:AB:BE:F1:25:F9:32:20:18:64:7F:D6:0F:DD:80:A4
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer:       /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial:       019EC36E82AA399CB684477CA6D182551F29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number:          09FB
Signing time:             Sun 14 Jun 2026 00:00:59 +0000
Manifest this update:     Sun 14 Jun 2026 00:00:59 +0000
Manifest next update:     Mon 15 Jun 2026 00:00:59 +0000
Files and hashes:         1: 7QM2KeQ3Wn7b2DM_DaBA8kJny-8.roa (hash: 62/MDcXDz4G8cxXxwlkwD2glafSnz5PZXVYHbOFIM38=)
                          2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: T5DnWcxhkT4+8Oh69VR94dMtjteQkLPoQ4QqIdEZ4yI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:6e:82:aa:39:9c:b6:84:47:7c:a6:d1:82:55:1f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
        Validity
            Not Before: Jun 14 00:00:59 2026 GMT
            Not After : Jun 15 00:00:59 2026 GMT
        Subject: CN=c4c5d3b70eabbef125f9322018647fd60fdd80a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:fc:20:28:a4:7f:a8:dd:52:7c:33:ab:9b:
                    c6:8d:59:40:32:8a:11:97:d0:98:3c:e5:de:88:76:
                    48:7d:ff:7c:a7:e1:ea:f6:e0:56:f5:a7:73:62:28:
                    03:54:c9:f3:6a:7a:d7:17:2d:bd:d1:35:51:54:59:
                    62:b5:45:93:87:cf:6a:79:ff:45:1e:86:e9:ad:bb:
                    c1:87:ce:33:15:bf:5a:6c:35:95:e8:61:19:da:6b:
                    fd:33:e2:fd:2c:ee:f7:88:fd:05:78:14:eb:40:b3:
                    24:57:8b:b4:d1:a8:14:45:ed:c4:9f:b9:7c:f4:e4:
                    a3:6d:e2:0b:e0:2b:b3:52:5b:6c:33:ee:32:c7:23:
                    fe:e6:f9:fc:0b:f5:f9:b4:03:64:9a:2d:96:f0:3e:
                    22:d6:0a:7d:69:7b:2d:29:a9:89:15:9b:91:68:08:
                    02:96:ab:32:45:30:ba:1e:92:2a:b1:85:fb:6f:45:
                    04:a4:1a:83:c1:c7:76:07:62:4b:5d:69:c6:da:d6:
                    83:7e:18:36:a7:4c:e4:cc:8a:6c:11:87:bb:b7:3d:
                    d0:73:06:f6:dc:ce:e8:2f:15:4a:d5:e2:11:92:1a:
                    56:e5:0a:8b:06:79:b4:d2:98:0b:c5:84:cd:cb:92:
                    1f:d0:d5:5c:b9:21:08:32:07:e7:14:32:32:c0:93:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C5:D3:B7:0E:AB:BE:F1:25:F9:32:20:18:64:7F:D6:0F:DD:80:A4
            X509v3 Authority Key Identifier:
                keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ea:18:da:70:e7:c3:c4:0f:83:c0:c4:34:02:4b:e3:55:63:
         1b:00:db:ce:65:8a:3a:77:08:c2:30:b3:3e:26:14:3b:52:81:
         84:59:0a:3b:70:cf:65:ca:64:c0:21:66:f8:2a:fb:78:ad:3f:
         05:93:5c:04:7b:a8:5e:af:18:23:74:10:a3:94:8a:ee:3d:42:
         2b:f1:e5:fd:31:cd:42:4e:01:ef:fa:6a:49:f5:16:1d:34:0f:
         d4:84:5f:6c:cc:71:d4:7c:7d:78:74:50:3c:4a:af:d0:d6:1c:
         72:13:6c:9f:48:49:36:4d:d1:b9:8b:da:34:32:98:b0:cc:1e:
         ba:fc:78:3a:3a:20:46:df:05:db:41:dc:5c:4f:e5:30:a6:76:
         b5:34:92:94:de:c6:79:f8:11:47:13:fe:02:2d:a4:ad:08:52:
         0c:7e:51:4e:cc:69:a0:79:2b:1c:04:f1:e2:7f:aa:86:93:65:
         c2:a0:20:75:7e:24:d7:69:8c:75:8c:98:cd:39:22:6b:3f:68:
         70:5a:3c:6a:a7:b9:d8:a9:5d:83:e5:e5:88:4e:a8:92:59:8e:
         fb:4a:7d:fd:f6:7b:11:44:54:04:c8:e0:25:81:c1:31:d4:10:
         3e:00:2f:49:2a:ee:ab:df:a2:b8:26:84:9e:46:1a:46:dd:94:
         d8:dc:24:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DboKqOZy2hEd8ptGCVR8pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTQ3OGU5ZjFmMzBiMjRmZDE3MTk4ZDFjYWM4MzViYzFl
NGRmYWYwHhcNMjYwNjE0MDAwMDU5WhcNMjYwNjE1MDAwMDU5WjAzMTEwLwYDVQQD
EyhjNGM1ZDNiNzBlYWJiZWYxMjVmOTMyMjAxODY0N2ZkNjBmZGQ4MGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiff8ICikf6jdUnwzq5vGjVlAMooR
l9CYPOXeiHZIff98p+Hq9uBW9adzYigDVMnzanrXFy290TVRVFlitUWTh89qef9F
HobprbvBh84zFb9abDWV6GEZ2mv9M+L9LO73iP0FeBTrQLMkV4u00agURe3En7l8
9OSjbeIL4CuzUltsM+4yxyP+5vn8C/X5tANkmi2W8D4i1gp9aXstKamJFZuRaAgC
lqsyRTC6HpIqsYX7b0UEpBqDwcd2B2JLXWnG2taDfhg2p0zkzIpsEYe7tz3Qcwb2
3M7oLxVK1eIRkhpW5QqLBnm00pgLxYTNy5If0NVcuSEIMgfnFDIywJN4WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTF07cOq77xJfkyIBhkf9YP3YCkMB8GA1UdIwQY
MBaAFEWUeOnx8wsk/RcZjRysg1vB5N+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYt
Njc3ZjUxZWJiZDg1LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYtNjc3ZjUxZWJiZDg1
LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOoY2nDn
w8QPg8DENAJL41VjGwDbzmWKOncIwjCzPiYUO1KBhFkKO3DPZcpkwCFm+Cr7eK0/
BZNcBHuoXq8YI3QQo5SK7j1CK/Hl/THNQk4B7/pqSfUWHTQP1IRfbMxx1Hx9eHRQ
PEqv0NYcchNsn0hJNk3RuYvaNDKYsMweuvx4OjogRt8F20HcXE/lMKZ2tTSSlN7G
efgRRxP+Ai2krQhSDH5RTsxpoHkrHATx4n+qhpNlwqAgdX4k12mMdYyYzTkiaz9o
cFo8aqe52Kldg+XliE6oklmO+0p9/fZ7EURUBMjgJYHBMdQQPgAvSSruq9+iuCaE
nkYaRt2U2NwkIw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:25 2026 by rpki-client