Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File:                     zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier:          CLG/0jKmkQspbobDu7YlZ0el9+byiDrBsvXBLYWhO/I=
Subject key identifier:   81:04:66:AE:A3:AA:61:ED:A6:8E:13:80:AD:D6:B7:32:E4:FE:83:8F
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer:       /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial:       019EC06D4BFA46597147DF36D9D1D001807B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 10:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 10:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 10:00:48 +0000
Files and hashes:         1: 2Zg_-dpcqfmzuDStyGzldA-iv1s.roa (hash: rO88dw5SEIUE2fPQKc2On6kad3jKSdwxG+JqeHFebNY=)
                          2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: B2YPw2PDG+LAMk0t6/MVy5jfDIJpNpeeR2+6Hlu9ySM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:6d:4b:fa:46:59:71:47:df:36:d9:d1:d0:01:80:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
        Validity
            Not Before: Jun 13 10:00:48 2026 GMT
            Not After : Jun 14 10:00:48 2026 GMT
        Subject: CN=810466aea3aa61eda68e1380add6b732e4fe838f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:71:92:ea:35:f1:67:08:09:8a:d9:ab:d5:
                    58:3f:2f:ee:05:ac:bc:3a:ac:ec:96:93:6b:93:2b:
                    e1:4f:e2:ca:95:0e:29:01:ed:db:de:6c:91:05:ac:
                    9e:62:fd:87:16:f3:ec:d2:ff:f6:6f:2a:8b:0b:74:
                    ec:8c:f1:16:8b:a6:de:95:45:54:ac:f0:84:90:e2:
                    50:e1:52:a6:3b:22:cc:c2:7f:b1:ff:26:c1:a2:d6:
                    28:2d:ca:5f:7a:13:d7:66:ec:ad:22:ed:20:56:20:
                    02:47:13:86:c9:8d:a5:a1:24:2d:49:bf:3b:e8:c9:
                    28:ec:2e:bd:92:f9:f1:f1:ee:ba:73:64:9c:b7:00:
                    7f:92:ef:40:0e:48:c4:c6:93:3b:05:aa:9d:64:61:
                    96:80:14:47:e8:a2:d7:ba:f6:44:a7:e8:fe:3d:a5:
                    fb:a2:64:da:11:ac:67:54:79:22:ad:b3:bc:11:72:
                    12:13:8d:d1:09:54:dd:1b:1b:a4:06:e6:bc:f8:b1:
                    7e:ab:55:f7:2f:12:49:b2:76:b7:d4:0c:7d:cc:90:
                    e9:9b:72:7c:0c:3f:ec:90:b2:92:f5:58:0d:32:83:
                    8c:07:00:ed:ed:f8:9a:6d:66:22:4b:3d:5e:88:c4:
                    9e:05:83:b0:7e:bd:4b:5d:91:c4:45:2a:65:9c:c1:
                    c6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:04:66:AE:A3:AA:61:ED:A6:8E:13:80:AD:D6:B7:32:E4:FE:83:8F
            X509v3 Authority Key Identifier:
                keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:68:79:5c:17:db:10:06:a1:a1:f7:3b:7e:df:2e:23:85:6d:
         94:dc:7c:f5:3f:f5:db:eb:d2:20:72:ba:a8:55:66:e7:e7:5b:
         4e:1c:f5:bb:77:af:ca:ef:c8:98:3c:09:99:a1:cb:bd:6c:5c:
         fa:13:9f:a6:bc:2b:54:ab:7a:ff:81:b1:1c:0b:1c:66:cd:24:
         ab:d0:9b:06:b1:04:33:08:ad:31:f5:67:a6:0b:43:bf:14:0f:
         20:cd:75:90:ac:72:03:a6:97:15:f6:fb:40:72:78:78:96:45:
         07:57:07:14:cc:dc:eb:12:9f:a3:8f:55:23:7e:08:5b:5d:ca:
         95:f4:d3:78:11:9c:e6:81:e6:65:cb:a3:a6:4c:30:a8:65:65:
         e8:ec:55:05:e6:47:ec:67:55:c1:96:9f:3f:f3:b0:6f:4f:b2:
         6c:e5:89:85:ac:aa:2a:75:dd:e7:98:27:b5:d1:8e:2f:e1:55:
         4d:92:bd:9f:02:b1:96:fc:1e:80:f5:13:4b:7c:a3:8b:0d:08:
         f9:37:60:f5:38:d6:3d:4e:9a:f1:95:3a:86:63:b2:d4:38:7b:
         36:63:4b:6d:21:b8:e9:90:99:40:45:ae:f2:f8:72:70:d1:22:
         c7:d0:e9:d4:aa:96:83:d0:f0:3f:ef:6b:48:a7:5f:3b:be:9f:
         fa:34:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:31 2026 by rpki-client