Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
File:                     0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft (raw, json)
Hash identifier:          LGNG3PsxmN7KLtIWjQsBPfgrMz2xBWdxIOGtKmT9gTA=
Subject key identifier:   1E:23:65:77:D9:D3:50:61:06:5D:12:1F:57:AC:E1:26:6B:CB:E8:D0
Authority key identifier: D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE
Certificate issuer:       /CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
Certificate serial:       019EBEEC55E24F2A7F87F8CA5DABD98327E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
Manifest number:          0ECF
Signing time:             Sat 13 Jun 2026 03:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:19 +0000
Files and hashes:         1: 0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl (hash: /lCrUvVaxTW341ZqQXjzSPtHbZKtI0r2omzKu+oR6sQ=)
                          2: SDFl7Ghrn8OImQYaEQhfjIMPxV4.roa (hash: zEIszlh7/IsglvkUKq1YDgPEJ8YJJSEFUJH4U3GhCJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:55:e2:4f:2a:7f:87:f8:ca:5d:ab:d9:83:27:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33d6b559d36c41307692a7b0fb3ef77aa6017ce
        Validity
            Not Before: Jun 13 03:00:19 2026 GMT
            Not After : Jun 14 03:00:19 2026 GMT
        Subject: CN=1e236577d9d35061065d121f57ace1266bcbe8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:64:3d:e9:95:73:e3:19:b6:e9:bb:81:e5:
                    5d:7c:ec:e6:a3:c2:c4:87:23:9a:29:d7:2e:c1:89:
                    e1:e6:9d:6b:7b:84:05:85:94:c8:52:90:df:23:a4:
                    9a:7d:f2:db:05:3d:4e:3e:14:5d:e8:ae:a3:9a:bf:
                    6b:c4:22:9b:84:73:98:2b:78:d2:5f:d6:f9:b9:1d:
                    af:9b:62:32:87:8a:88:de:c1:3a:2e:be:2d:8e:c6:
                    95:d6:7f:25:ee:e0:6e:d8:6a:bc:1c:36:9e:e1:46:
                    a4:d1:15:12:27:50:29:d4:c3:a0:ff:33:a0:15:f1:
                    6f:41:95:e2:b0:5e:dc:1e:c4:06:62:b8:78:60:09:
                    05:be:26:cc:ee:d0:88:46:82:40:87:47:43:ec:b1:
                    d4:82:3c:bd:85:da:df:4b:dc:aa:c3:a9:c5:b3:b2:
                    0e:bd:9c:4a:23:89:6c:95:11:1a:14:0a:41:9e:d1:
                    a8:b1:5c:73:22:d9:33:26:a8:a1:27:ef:c7:46:4e:
                    00:35:41:65:6d:97:41:c2:90:ad:57:03:d8:08:00:
                    ab:45:9f:1f:20:a1:ad:6e:76:c8:ec:ed:4a:74:fb:
                    63:6b:c1:e1:a7:62:24:a4:fe:1c:2e:d8:58:a8:9f:
                    d8:25:ff:7a:93:a8:45:60:0a:6d:e5:1c:3d:e7:35:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:65:77:D9:D3:50:61:06:5D:12:1F:57:AC:E1:26:6B:CB:E8:D0
            X509v3 Authority Key Identifier:
                keyid:D3:3D:6B:55:9D:36:C4:13:07:69:2A:7B:0F:B3:EF:77:AA:60:17:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z1rVZ02xBMHaSp7D7Pvd6pgF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c61fa2-bb3e-4955-ab5f-5e3b6ea5a7ee/1/0z1rVZ02xBMHaSp7D7Pvd6pgF84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3d:e6:9b:ce:47:96:aa:c7:8b:e0:b4:91:02:cc:c9:7d:7f:
         76:a3:a0:94:97:40:62:b5:af:eb:54:7a:38:36:ae:f5:c9:bc:
         34:d4:25:80:bb:e3:f9:7d:a6:6b:ab:e8:4e:30:96:98:c6:3d:
         a3:01:fc:0d:dd:21:ef:f2:32:c5:4e:1c:6c:a0:d8:26:30:40:
         e6:c6:36:f0:2a:72:36:85:59:12:22:fb:02:45:cd:87:70:84:
         46:04:ad:c5:7b:79:1b:0c:de:92:7e:79:c8:21:ef:d0:b2:3c:
         d5:f6:df:26:9e:5d:67:70:39:7b:30:68:fd:aa:7e:5a:99:db:
         dc:d1:2f:7d:6b:1e:e7:4c:34:9f:5a:c4:12:de:b7:d0:36:dd:
         f5:69:af:e7:af:46:58:c5:4a:0a:63:1f:23:3c:fa:d6:1a:4f:
         63:1a:09:60:58:99:b0:f4:ce:a4:65:11:94:3f:b3:fa:7c:b0:
         21:e6:b3:59:bb:20:41:f9:69:bd:b2:7f:6f:b9:9f:6c:95:ff:
         a0:de:41:a8:d7:5f:c8:24:28:a1:14:9b:d9:c2:22:c4:2f:ed:
         1b:bb:61:90:34:59:3e:e0:03:c9:9e:91:27:da:8a:07:4c:eb:
         91:cc:ec:48:25:e7:d8:56:c8:55:89:fe:25:2a:ee:aa:17:0b:
         43:78:21:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:07:55 2026 by rpki-client