Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File:                     RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier:          /BkOBQYxxb0tMxAqMnTLcdQSUh73KE1AgpMZjyZBZNE=
Subject key identifier:   CE:0E:46:46:68:B6:E7:D1:9B:46:FF:24:D3:D1:EC:61:62:CB:1A:8B
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer:       /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial:       019EC17FAB043AF9BD8427426F76B972E0EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number:          0C63
Signing time:             Sat 13 Jun 2026 15:00:29 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:29 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:29 +0000
Files and hashes:         1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=)
                          2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: DWSgZlpX6TWPFG4KR6KkM3mo+3Y6QOR0KTRPRlUDXfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:ab:04:3a:f9:bd:84:27:42:6f:76:b9:72:e0:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
        Validity
            Not Before: Jun 13 15:00:29 2026 GMT
            Not After : Jun 14 15:00:29 2026 GMT
        Subject: CN=ce0e464668b6e7d19b46ff24d3d1ec6162cb1a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:72:df:20:6d:bf:1f:78:82:69:4d:c5:ed:
                    83:55:8c:4d:b6:86:8a:60:eb:08:04:ad:d4:49:ef:
                    ef:07:97:56:09:e2:7b:11:b7:6a:2c:62:9c:ad:5a:
                    cb:ec:4d:c1:53:b3:60:7e:73:f4:91:82:97:00:2c:
                    06:cc:43:7f:fc:06:d8:f8:b9:db:42:52:8b:5b:8d:
                    02:df:d1:1d:78:07:3f:83:80:a2:39:00:1d:19:06:
                    e0:4c:d7:e5:9f:2e:57:80:00:d1:c4:fb:92:94:33:
                    78:c4:00:78:aa:7b:55:95:2c:2a:b3:ef:97:a3:45:
                    02:a5:43:02:28:84:2f:7b:8f:f3:e1:26:2c:68:d3:
                    15:fb:65:85:62:3f:d7:48:02:d3:04:c9:08:54:28:
                    f8:ad:d1:e5:1b:c0:06:fe:17:38:03:24:73:fc:7f:
                    15:ab:b5:8f:d6:8a:22:70:25:9d:64:cd:1d:b6:4c:
                    05:bf:78:d3:65:db:48:9a:7b:0f:66:1f:da:fe:02:
                    1a:c2:d1:13:c5:54:1e:e7:58:65:06:78:2d:c9:25:
                    91:21:52:3b:6c:75:1d:95:95:b6:94:e6:8b:ee:00:
                    a8:a8:59:b8:5c:cd:b8:93:1a:5a:79:6b:c9:8a:1f:
                    ab:ab:9c:78:67:62:69:5d:d8:51:01:67:f8:2f:3d:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:46:46:68:B6:E7:D1:9B:46:FF:24:D3:D1:EC:61:62:CB:1A:8B
            X509v3 Authority Key Identifier:
                keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:9e:2d:1e:b7:24:96:ea:af:f9:b0:53:62:8a:b2:65:81:ff:
         c3:26:6c:a4:a5:8e:fb:8d:3c:0e:e6:b7:88:db:bc:db:03:5c:
         f4:87:bb:1d:68:43:6c:06:16:c8:c5:68:23:de:71:6b:ee:a9:
         3b:c3:66:2c:5e:05:ca:48:7d:da:ff:43:94:da:e8:0a:25:31:
         07:b3:6c:e6:5f:95:e2:69:dc:1b:aa:41:14:85:e9:89:8c:e4:
         1e:0f:8e:70:2b:2f:00:fd:fd:c9:c4:c2:50:c3:17:6d:8b:63:
         7c:46:ac:d1:c4:63:81:2d:2d:cd:a4:a5:03:2a:af:21:75:13:
         e4:ce:ef:7b:32:c4:2e:79:76:dc:87:43:b1:d3:3b:cb:62:d0:
         4f:78:66:2a:da:1d:9a:42:b9:be:e3:7f:b6:5f:02:80:35:97:
         34:d3:c4:69:8c:25:ed:62:46:72:a5:b0:f6:c4:d3:c1:bc:c1:
         9d:67:9e:72:5c:56:b3:a8:53:2f:68:de:18:14:df:3d:bf:bb:
         44:6e:f1:b7:9f:dd:83:c1:35:0a:3b:f3:ad:f4:f6:9d:63:f9:
         37:50:69:41:c6:00:f4:4b:92:46:15:88:3d:f8:54:b7:4c:07:
         43:ee:3d:06:9c:4e:7f:25:56:0e:e6:89:01:a7:7e:72:f4:51:
         1f:93:54:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:28:24 2026 by rpki-client