Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File:                     250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier:          rRBfMqdPOPthDYtDioapbB951qxv3JlIwL4px/iAV/4=
Subject key identifier:   CE:DB:07:FB:B7:2E:80:15:8E:51:31:78:D7:44:59:93:BC:31:C7:D0
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer:       /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial:       019EBFC90FBB8BA2BC471FE78B0031C0DC68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number:          1527
Signing time:             Sat 13 Jun 2026 07:01:25 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:25 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:25 +0000
Files and hashes:         1: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: X6BRq2BiEqGt0NCh5chKJNxYXMwjLQIyQN/ils7i1GI=)
                          2: 6mzFB1254QH_scGmAESdwoJirew.roa (hash: ZqsDszUXMXErK5gprgiRcwaopoCcJJcjnl51ncaMD10=)
                          3: CHwEEgIG46KrfCZubP2sgaYyQKQ.roa (hash: 1VYNsORWI1Jnmpu8/KvoEN63QsZYW/dgbty42oD0bdY=)
                          4: NJD3vCg8LdZrgIhkarwqZcVQWlY.roa (hash: Eumr2+B2PPkKKeprpzIU6OMcVz3MM+ic7NoPgJaopMw=)
                          5: OIl66vV-_xpjBLdW_e37i3MHj7k.roa (hash: cSop5Hl7odCbvTkJ91gKwEE+cGwI/Owv1OQiaa9DbOI=)
                          6: V_9jRl4u_GQEezWDQos1yT-0bqE.roa (hash: F7HIunKap/oz5qtM7/jZgccS28Y+qRZ8R7fBgjRlXdI=)
                          7: iNKNZeSZcVKtwBDeM9cWD2QfKgw.roa (hash: Ufjl8hlKJynYjHQsITek/FLuhc46CrmvrHtUUc2zMOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:0f:bb:8b:a2:bc:47:1f:e7:8b:00:31:c0:dc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
        Validity
            Not Before: Jun 13 07:01:25 2026 GMT
            Not After : Jun 14 07:01:25 2026 GMT
        Subject: CN=cedb07fbb72e80158e513178d7445993bc31c7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:75:9f:3f:50:21:8f:74:95:0c:69:e7:fd:
                    58:56:57:e8:b8:41:6a:d0:11:8d:56:aa:b8:18:1f:
                    80:41:76:68:fa:ce:37:77:a1:a8:da:10:29:dc:92:
                    e4:e3:02:12:13:25:73:a9:59:9a:31:85:a4:18:e3:
                    8c:db:74:33:3a:ce:ba:19:b2:d7:3a:97:fa:07:f4:
                    1a:9c:49:75:0c:53:52:31:fc:57:aa:c0:f3:f9:55:
                    e4:46:50:35:c5:ae:56:8e:4b:fb:1f:40:95:f4:a9:
                    99:fc:d1:e4:51:d8:69:80:d8:0c:c6:ed:1e:7e:7d:
                    19:aa:f2:0d:1f:38:aa:09:d3:0c:69:a1:49:dd:1d:
                    02:84:1a:09:85:36:52:a2:ba:e2:d3:ac:3f:33:6c:
                    51:6a:ac:1b:60:18:6b:7d:84:f9:63:09:d6:a9:cf:
                    01:0f:84:50:6a:f7:5f:87:b3:4d:87:ad:00:87:6a:
                    e6:f9:9c:1e:e6:44:3a:04:bb:a2:46:40:b4:b8:53:
                    13:2b:22:22:c4:a0:4e:29:96:72:85:0a:ae:e6:90:
                    69:d8:dc:a3:8f:ba:34:16:04:e6:9c:07:22:67:11:
                    b4:9b:b1:cb:68:69:ef:18:83:65:96:6d:22:12:09:
                    09:a1:b1:f3:1d:e4:15:06:eb:7b:a3:0b:81:1a:7a:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DB:07:FB:B7:2E:80:15:8E:51:31:78:D7:44:59:93:BC:31:C7:D0
            X509v3 Authority Key Identifier:
                keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e6:78:24:3b:0b:4f:f4:08:25:8d:ec:21:ed:de:a4:ae:b2:
         54:de:8a:01:e4:ec:12:1f:52:c4:dd:df:47:08:5b:8a:ec:93:
         6c:7d:13:4f:09:ed:dd:26:52:5d:8f:39:c6:48:47:73:23:ca:
         55:29:a3:56:db:de:17:b5:dc:a6:23:89:a0:69:f9:af:dc:ea:
         60:b1:70:bd:42:35:60:fe:f3:c3:33:5d:5c:d2:11:57:3b:f6:
         a8:94:2c:02:31:75:1e:0e:28:90:76:d2:9b:54:8d:cf:39:e4:
         62:e5:64:d7:d9:53:b2:59:8f:ef:76:d0:45:7e:68:b0:20:4c:
         cc:fe:00:27:70:75:46:fd:f3:9b:fa:43:2c:2a:76:c0:f7:a6:
         72:78:da:5f:41:e7:96:de:cd:45:dd:e6:cc:06:74:f8:1f:ea:
         9f:0b:5a:00:37:08:f0:ba:e4:07:1a:54:b3:3d:4c:28:c7:71:
         26:9d:7b:42:01:75:2d:54:23:ef:4c:f1:1c:a0:96:14:7a:90:
         96:6e:90:60:d5:09:ff:85:df:90:f3:28:94:f6:ff:ba:96:8b:
         dc:0c:c3:7e:16:9b:46:43:d4:89:bc:75:e5:d3:1d:d8:f4:4a:
         50:c4:ef:1f:e3:04:ff:12:04:93:45:9b:e0:c3:a9:49:bd:18:
         e1:70:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:17 2026 by rpki-client