Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
File:                     mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft (raw, json)
Hash identifier:          UrSAbFfAHygfIFBINcLDYEPakcBh01tQgHFrJsphmeI=
Subject key identifier:   DB:20:EF:19:95:B4:FE:17:18:00:67:0E:F5:E7:C7:30:8E:00:8A:A7
Authority key identifier: 98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9
Certificate issuer:       /CN=988ce6e4ee09ef66658286451790969d7cffe9b9
Certificate serial:       019EC25C44F35FF384624FBAFB3CE04D6CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
Manifest number:          014B
Signing time:             Sat 13 Jun 2026 19:01:27 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:27 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:27 +0000
Files and hashes:         1: mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl (hash: PkonKDOQMNp39Pc+VHyNP1ITDUMlHG86hoyqF6qkYbE=)
                          2: vQIQ0hujisLLaE0FdKyN-US-jgc.roa (hash: HcBf/lSh/0W+uCeeNUF1qjopHzD07ezacPSk6j+nXRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:44:f3:5f:f3:84:62:4f:ba:fb:3c:e0:4d:6c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988ce6e4ee09ef66658286451790969d7cffe9b9
        Validity
            Not Before: Jun 13 19:01:27 2026 GMT
            Not After : Jun 14 19:01:27 2026 GMT
        Subject: CN=db20ef1995b4fe171800670ef5e7c7308e008aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:7c:f9:46:5f:79:49:38:bf:9d:28:7f:b2:
                    a4:ef:c1:d8:df:ae:42:7e:06:d5:4e:9e:ae:b0:4f:
                    b4:fb:3e:7f:ba:d7:88:e5:87:29:7d:02:bb:4a:15:
                    eb:8b:39:d5:14:5b:74:b3:55:19:20:1f:11:1f:3d:
                    97:aa:05:8c:fb:4f:00:df:69:bc:ea:89:c6:eb:de:
                    3e:e5:5a:33:d8:a2:f9:27:a8:7d:27:6e:3e:6f:1d:
                    84:d5:d2:57:bb:f3:01:b6:e1:9e:7a:04:27:54:6f:
                    24:e4:8c:d8:a9:b8:de:0e:52:46:72:8f:70:e0:3b:
                    da:87:12:ee:be:6d:1c:28:ad:1b:2e:74:84:a6:34:
                    a0:0c:3c:94:fc:74:4e:06:22:06:3c:20:8a:46:19:
                    53:81:f3:9f:39:9b:53:c5:bc:b1:1f:c0:a1:3d:90:
                    cc:d2:0e:f2:26:d5:76:15:2a:0b:7c:1a:4a:04:86:
                    20:03:a1:f0:9c:85:d4:60:5f:63:ec:f6:00:7a:13:
                    0f:11:67:38:b7:da:7e:9a:75:fe:34:a5:6a:98:64:
                    36:2e:35:5f:b4:2d:a4:07:b5:c7:26:23:38:82:08:
                    70:e5:bd:42:31:63:32:a8:20:13:26:29:f1:f5:36:
                    10:41:c9:97:5e:39:32:84:8a:fb:6d:b6:3b:15:fa:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:20:EF:19:95:B4:FE:17:18:00:67:0E:F5:E7:C7:30:8E:00:8A:A7
            X509v3 Authority Key Identifier:
                keyid:98:8C:E6:E4:EE:09:EF:66:65:82:86:45:17:90:96:9D:7C:FF:E9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIzm5O4J72ZlgoZFF5CWnXz_6bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/156f45-da23-4e25-a08c-3687c2f7d83e/1/mIzm5O4J72ZlgoZFF5CWnXz_6bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a8:d8:33:f8:17:3e:44:46:d6:da:dc:7f:ec:a8:8c:65:4a:
         8e:b2:92:ca:f1:84:05:90:74:89:df:c9:1f:da:7a:42:d1:65:
         ce:d3:76:51:63:56:6d:b9:ff:23:59:e6:92:21:9a:33:d1:01:
         6e:0e:71:1e:34:d4:41:ce:c5:8d:e1:9e:14:f2:fa:4f:7d:f1:
         36:78:ae:e8:fb:a4:9e:00:77:27:3e:7c:81:67:3a:d3:79:ef:
         35:64:e5:8c:6a:c8:64:1d:d4:44:56:42:4e:02:42:0e:a3:c0:
         6e:0a:63:61:31:ed:3c:18:f3:2d:22:87:07:52:33:c8:65:5e:
         a2:6f:ff:04:ac:b5:c4:1c:72:1b:b3:37:a9:dc:d0:e2:1d:8b:
         a4:33:05:d4:83:c8:03:89:1a:84:d9:c0:18:a8:bf:c2:e5:50:
         d1:39:41:24:2d:9f:20:e8:02:80:b3:78:bd:a6:15:78:5e:e9:
         f5:28:fc:e8:e5:f1:dd:37:14:4e:62:c6:57:98:38:97:24:4b:
         f6:3e:4d:27:71:b4:5b:75:de:38:29:31:ba:7e:fc:16:4c:d3:
         c9:84:43:aa:f7:2a:72:15:a3:7b:cc:b2:36:f2:df:85:5a:3c:
         84:fd:74:d5:b8:01:2a:3e:22:28:8b:ae:6d:4a:6f:5f:76:a7:
         d1:e2:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:04:56 2026 by rpki-client