Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          BHCJSuZkIAyYrBL3nvDPVuchHkfRCumcEMMCBePfy2A=
Subject key identifier:   E1:F3:C5:A4:08:E7:53:AD:B4:D6:F5:6A:2D:C6:3A:8A:A0:8D:8A:AE
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       019EBF5A1C9DC86EC5383F15D29461CB6EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          162F
Signing time:             Sat 13 Jun 2026 05:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:14 +0000
Files and hashes:         1: 4QHBn9ucdlKQY-OkJvc7Ig6NIBo.roa (hash: 7wIOmcrsKNPm1pT+25Dr7MjY3mEMyojJiBNkSyV1lM0=)
                          2: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          3: RD3FrdJDiaSgh4hhQogjAnXqmq8.roa (hash: y0vVTwPbcsqwxMSYm4yZYZVCYuFlngknWzg7Heg5wGA=)
                          4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: Qf03BR/nfEZW4q9Trwirs7tGxx1RqGsTZ6OWQ3An594=)
                          6: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:1c:9d:c8:6e:c5:38:3f:15:d2:94:61:cb:6e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Jun 13 05:00:14 2026 GMT
            Not After : Jun 14 05:00:14 2026 GMT
        Subject: CN=e1f3c5a408e753adb4d6f56a2dc63a8aa08d8aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:da:83:75:47:bc:c3:87:a9:a7:51:af:65:c8:
                    2d:98:f6:9c:b2:27:8d:cc:4e:0d:4b:6f:0b:53:70:
                    78:a8:14:13:c8:70:b7:1f:eb:68:1c:68:70:b5:15:
                    cc:87:19:31:e5:4a:f0:6e:f4:62:84:52:9d:b0:2a:
                    fc:70:2b:a3:b5:e5:40:e4:ea:ac:10:19:af:37:11:
                    26:b0:58:ee:9a:01:65:66:0b:3f:f5:36:86:ec:44:
                    95:f4:be:bc:ad:54:0e:e2:c3:26:55:78:12:fa:fb:
                    6c:87:de:49:e8:4d:0a:fd:e5:ca:d2:a6:0e:97:41:
                    c5:b5:5a:2b:bd:6f:95:2f:c4:5a:fa:f7:1b:5a:a2:
                    8b:2f:93:40:fa:42:19:a5:b3:48:49:ca:69:b3:2c:
                    ce:22:f0:08:05:38:cf:ce:ae:44:a2:c2:b1:a3:47:
                    63:1b:f2:6d:59:3d:e5:4d:7f:2e:28:a6:b8:bd:a1:
                    95:76:e7:e2:08:6c:84:2d:12:e6:b8:88:84:8c:2c:
                    60:cc:c0:27:fb:e5:e2:ad:cc:0c:ca:39:fd:6f:9b:
                    fb:b0:15:a2:af:c6:75:7f:28:bc:e3:76:91:7e:5f:
                    cf:01:3d:83:2d:35:4c:5f:cf:5e:e2:fc:bb:1f:63:
                    96:09:dd:d1:41:55:14:02:7c:dd:ac:16:ef:de:6d:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F3:C5:A4:08:E7:53:AD:B4:D6:F5:6A:2D:C6:3A:8A:A0:8D:8A:AE
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:90:b2:a5:3a:14:4e:d6:30:b5:34:f1:4e:c5:a6:a5:45:
         d6:c6:61:e7:ae:93:2c:58:98:cb:af:a1:25:40:72:31:73:a9:
         ed:00:31:94:42:ef:65:43:d9:79:c7:43:38:77:34:25:25:a5:
         8b:28:43:8c:3f:a5:53:39:ab:20:5f:02:ee:f1:34:d0:b1:63:
         d0:3d:c3:12:dc:62:09:c0:07:f5:b6:25:df:fb:e7:0d:12:ae:
         82:1f:3b:8d:d8:a0:da:18:99:28:a0:f1:5d:0b:8c:75:13:03:
         0e:67:fb:89:27:18:aa:c8:08:bb:2e:f5:86:ec:14:7c:6d:af:
         68:20:08:eb:5f:e5:c4:c9:a6:3d:04:fb:e5:3f:f9:4a:8e:a5:
         12:73:9e:06:bd:20:bd:14:d1:7c:0e:18:bc:48:96:2c:2a:98:
         09:11:35:d6:3c:15:06:8c:ba:53:81:e5:0f:89:e9:4f:c8:1b:
         ea:41:14:9a:fe:61:c7:06:f7:6b:97:71:9e:4a:bd:a8:88:4f:
         37:4e:0a:34:52:18:1c:6f:27:80:5f:be:8d:a7:53:ad:6e:44:
         22:c7:b5:93:d3:ab:d0:7b:98:64:b5:99:4e:36:9a:71:6c:da:
         05:ef:bd:b0:0e:19:e4:23:e8:68:11:26:2f:1e:84:0d:78:b9:
         32:ed:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:47:33 2026 by rpki-client