Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File:                     1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier:          kh/1egR/Gb8A80vg+E5+kRA91VV0W+3B07Ij6vkweUE=
Subject key identifier:   C5:0A:02:6C:B3:4A:73:0E:C7:6E:64:C4:F5:34:99:EF:93:98:06:FE
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer:       /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial:       019EBE47FA284FA2C8FA53C725731B96EAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number:          1154
Signing time:             Sat 13 Jun 2026 00:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:48 +0000
Files and hashes:         1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: BZPkhff51+Mq1azF4tYzSNdR71Ijv8dsmZ4as2U1NSQ=)
                          2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:fa:28:4f:a2:c8:fa:53:c7:25:73:1b:96:ea:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
        Validity
            Not Before: Jun 13 00:00:48 2026 GMT
            Not After : Jun 14 00:00:48 2026 GMT
        Subject: CN=c50a026cb34a730ec76e64c4f53499ef939806fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:84:ae:a9:df:95:86:a2:b4:fc:6b:a0:8e:
                    77:f1:d9:d0:8d:08:15:7a:1e:ee:74:16:0f:f9:d3:
                    f2:27:6d:56:dd:1c:ca:ed:2d:ca:55:21:0e:04:f0:
                    92:ee:5a:d4:68:ff:2a:85:05:19:03:43:8c:f9:ec:
                    e5:bc:7d:3d:71:6d:9a:47:45:98:4c:57:66:53:06:
                    09:f4:2e:5c:cf:82:c6:21:8d:a5:df:28:d4:a3:7f:
                    2b:61:17:4b:d2:93:03:9d:ef:fd:1b:f7:58:b2:b2:
                    a6:7d:8b:2a:c3:ca:32:f4:ec:3d:b6:b5:2c:3e:6d:
                    5f:37:9e:c4:79:a3:be:47:e8:1c:3d:10:3c:5d:c0:
                    64:ba:85:5d:6f:07:2a:30:76:11:73:b4:80:56:1a:
                    61:94:a8:c0:35:de:9c:2e:64:e9:d6:28:6f:8c:f0:
                    3e:b0:55:51:a8:1e:b1:ee:4b:e8:a2:ec:2a:c7:54:
                    4b:d3:8f:2c:e0:df:c8:5a:75:61:2b:cf:18:a9:25:
                    18:26:26:33:d0:72:32:6c:10:7d:e3:81:69:6d:2a:
                    ab:14:47:89:7d:02:0f:5e:61:54:b0:07:c5:38:d4:
                    4f:3f:5d:dd:34:9d:e4:02:a3:6c:a6:3a:45:8f:7f:
                    f4:ad:db:01:54:60:11:84:eb:55:98:79:6e:01:da:
                    bb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0A:02:6C:B3:4A:73:0E:C7:6E:64:C4:F5:34:99:EF:93:98:06:FE
            X509v3 Authority Key Identifier:
                keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:22:14:94:89:07:6a:14:1b:da:e9:2b:25:d6:ed:a1:42:2b:
         52:8c:dd:00:b4:5e:fa:9a:c1:af:eb:03:ee:f9:41:0f:d9:fd:
         20:2c:fa:2f:e2:0e:c1:1d:84:46:fe:05:ac:80:29:14:79:5d:
         33:d0:71:9f:00:0b:a0:0e:11:58:12:11:9c:01:70:24:45:7c:
         01:a1:6e:b6:7b:c8:6b:c4:84:05:16:88:6c:25:4d:16:89:04:
         45:9a:1d:41:76:2f:5b:c5:25:39:fc:90:56:65:7f:82:35:6f:
         d0:d3:a7:60:3d:a2:b6:c2:7e:38:34:a2:a3:7c:1d:60:b5:24:
         f7:9a:4c:77:a7:ab:83:21:9f:23:32:42:90:3f:25:e6:8f:96:
         5f:b2:65:e0:c1:c7:4c:3f:29:bc:19:6b:00:b6:90:ed:61:a8:
         41:c6:21:2d:74:5e:58:9e:4b:21:a6:d9:af:0d:6c:d4:94:17:
         99:de:df:53:77:2e:6f:34:f0:be:2f:f7:65:77:17:71:6a:1e:
         c9:14:9f:75:41:9a:0f:0d:c5:b1:f6:38:95:b9:fd:da:46:66:
         32:19:5f:22:82:20:c9:ba:3e:a7:6a:d7:8f:2c:93:51:d3:82:
         14:c8:a7:14:ff:62:0a:10:da:31:b6:7f:8a:ec:7c:14:be:b1:
         e8:53:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:10 2026 by rpki-client