Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
File:                     Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft (raw, json)
Hash identifier:          vSUzc85Rf4kR8ty37dyhswh9H4cFngDEt8Iga5v1YHQ=
Subject key identifier:   4E:74:59:99:8F:41:00:6C:4F:00:F4:84:66:57:34:34:B9:3F:76:8A
Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Certificate issuer:       /CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Certificate serial:       019EC25B6F3B2469E422EFC2C0E02B1D797A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
Manifest number:          1959
Signing time:             Sat 13 Jun 2026 19:00:32 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:32 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:32 +0000
Files and hashes:         1: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl (hash: +i1xXAbhTJaW+HGAd926Q+zh46K1GdHTJ/5E/ozhHKI=)
                          2: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (hash: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:6f:3b:24:69:e4:22:ef:c2:c0:e0:2b:1d:79:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
        Validity
            Not Before: Jun 13 19:00:32 2026 GMT
            Not After : Jun 14 19:00:32 2026 GMT
        Subject: CN=4e7459998f41006c4f00f48466573434b93f768a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f9:ee:d6:9d:d7:04:ba:a1:89:41:b7:f2:dc:
                    7c:e3:c6:7e:94:3e:ae:3c:92:06:44:0e:d7:cc:50:
                    18:b4:ed:13:3e:c2:cb:ac:d6:03:57:f9:43:3f:5c:
                    ed:40:f2:a6:3a:50:4e:89:40:65:51:f5:99:65:f4:
                    df:4d:6e:c9:cd:50:a8:3a:90:c1:a5:d2:de:5a:a9:
                    d1:f6:6b:92:02:c1:da:2f:83:4a:13:10:4a:e6:9a:
                    67:ad:aa:80:3e:c3:85:6f:d1:61:0b:b5:1f:9d:4a:
                    80:98:70:7f:e3:4f:93:9f:4d:49:7c:3a:50:a5:49:
                    93:04:35:3a:09:77:97:21:5b:a8:98:92:33:1f:00:
                    f6:5b:a4:1a:4d:72:58:63:05:91:7a:82:6d:d6:93:
                    7b:a8:4c:55:03:dd:6b:08:11:61:a4:ff:65:4d:f0:
                    f6:2f:89:27:e6:f3:7e:91:98:64:24:2f:20:43:7a:
                    40:7a:e0:ee:a5:8d:82:d1:b8:d7:38:fe:a4:be:d5:
                    c9:f9:d9:40:52:88:f2:37:f1:d3:97:a6:56:db:c0:
                    25:dd:ab:ec:5e:9e:87:0c:c9:53:e5:13:ea:71:7a:
                    93:0f:f8:4b:c3:20:c3:31:03:c8:84:79:83:70:a7:
                    ca:40:6b:84:63:29:63:50:25:a3:4d:e5:2f:ad:4b:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:74:59:99:8F:41:00:6C:4F:00:F4:84:66:57:34:34:B9:3F:76:8A
            X509v3 Authority Key Identifier:
                keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:99:21:e9:aa:39:c3:d9:6d:92:17:dc:6a:db:d1:0a:eb:d4:
         5a:16:7f:b9:41:29:f3:d8:88:92:01:60:2e:d1:2e:9a:54:a5:
         ee:db:68:de:e6:a2:d9:33:71:c5:a6:3f:34:b3:71:1a:ca:32:
         02:17:f3:62:af:52:00:2d:80:7f:46:6f:49:d7:43:82:8f:2c:
         19:06:a9:f4:c8:8a:79:ee:c7:80:8e:58:eb:36:1b:5d:c6:d2:
         20:3a:f8:03:87:31:36:c4:5a:83:8c:76:fb:9a:9d:e9:c3:32:
         4b:e2:6c:81:d4:f5:2d:c5:df:d9:1a:9a:73:8f:8f:a0:fb:f3:
         18:ce:bc:35:3a:bf:45:7d:e2:c4:7c:6c:b6:d3:b5:a3:c5:4c:
         33:42:0c:9b:08:33:1e:cd:05:3e:80:b2:3d:be:74:0c:bb:5a:
         f3:5c:be:a9:f0:fe:23:74:c0:ce:1f:48:1c:59:4c:22:12:d6:
         06:29:d8:4a:40:02:86:f8:50:a8:71:d9:95:ff:cb:e0:f9:56:
         d2:e4:87:3b:53:f0:4f:1d:bd:4c:ae:bb:a2:12:a7:01:6b:73:
         18:38:5f:2c:41:b9:10:b0:2e:7d:c8:07:6d:f6:cf:d1:fe:b7:
         2b:d5:ff:7b:4d:02:62:95:6a:ac:21:32:eb:92:9c:10:93:31:
         cc:17:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:31:13 2026 by rpki-client