Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File:                     1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier:          4NZiAv2ru/7OnymNs939QFqR7nb0y1Ci0la2mPii3OA=
Subject key identifier:   05:8E:80:5D:FC:0F:2A:DD:CC:13:70:90:67:53:3F:DD:95:58:3F:D1
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer:       /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial:       019EBFC9230C62FC70F0E3FC523428B6A634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number:          1355
Signing time:             Sat 13 Jun 2026 07:01:30 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:30 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:30 +0000
Files and hashes:         1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: iwStlShFSAr/HrRYhoFxl3U915Geg8h22+ZYVsmXSAo=)
                          2: CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa (hash: 6UG3E6BSMIFC2YC9VNs/S3EPWadhLSS97sUzfp/jObs=)
                          3: eNxkL16VsfbxNpT4qIe7Vwh1riY.asa (hash: ZmJ1Py74vcSNkNeWOaFBer3G+b9/WXs2+n2RLvj/wcM=)
                          4: mJoDlO3NR5D8OqKGLKWGSnN77Dc.roa (hash: 5iVJo/pmU4tCOmzWx6Yvb+04DOT0wTAh7Zm7gKM4+zQ=)
                          5: prY-rLIal9gwsZUoWucK1yyF1hs.asa (hash: NDjhtGqZMT7ro6hNfoHbI/n8/Z/kEUq2p2BLNvKXvjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c9:23:0c:62:fc:70:f0:e3:fc:52:34:28:b6:a6:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
        Validity
            Not Before: Jun 13 07:01:30 2026 GMT
            Not After : Jun 14 07:01:30 2026 GMT
        Subject: CN=058e805dfc0f2addcc13709067533fdd95583fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cf:d5:e5:d5:c9:15:58:58:04:73:46:3b:68:
                    42:91:c3:1f:0b:e5:e3:29:a2:de:9a:64:32:6c:8d:
                    ff:0b:a3:d1:8d:65:62:ab:32:89:ca:4e:02:2b:bd:
                    1e:b3:72:a5:c6:90:55:84:ab:81:75:0e:cc:29:a3:
                    c2:f0:94:dc:ad:cc:21:c2:a6:95:22:0f:e8:a3:1b:
                    40:3a:8c:b0:93:2f:b7:d8:d1:32:12:b9:e7:e5:22:
                    f1:e6:77:98:b5:99:5b:f0:9c:3c:f5:22:88:76:69:
                    ae:cf:17:08:34:00:d8:46:23:ac:1a:e5:89:d2:db:
                    2c:93:a8:c2:a3:8d:cc:fb:8b:c2:47:0b:7c:ae:ab:
                    d4:aa:ac:c4:31:eb:7c:bd:0b:c6:64:e2:19:e4:c7:
                    ff:b9:f2:f6:d6:1a:c6:0f:8a:3a:a8:98:c0:40:b4:
                    ed:a7:3b:fb:ac:5f:28:f9:a2:07:bd:14:ad:e4:d3:
                    39:ca:74:88:4f:af:83:03:57:4c:0d:05:4d:6d:6b:
                    8d:b4:d6:e2:e8:18:ef:32:cb:02:f3:db:e4:36:3e:
                    ed:9f:01:60:4d:5a:ce:9f:99:81:cd:af:c1:e9:70:
                    be:59:59:7d:b2:68:8f:e6:36:4a:25:65:b9:95:13:
                    4d:4c:2a:27:e8:97:0c:7c:47:a4:c4:86:c2:93:ee:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8E:80:5D:FC:0F:2A:DD:CC:13:70:90:67:53:3F:DD:95:58:3F:D1
            X509v3 Authority Key Identifier:
                keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:31:92:d3:4d:82:13:40:a8:dd:cf:f1:a1:1c:c9:d8:88:32:
         fb:c9:3e:05:e4:54:67:ee:09:20:ad:2c:59:3f:38:ea:9d:3c:
         95:be:70:f2:ce:a1:f5:4d:e5:33:fc:44:db:f5:47:0b:64:10:
         e6:40:4d:2d:5d:6b:71:30:68:ad:fd:79:55:37:8f:71:81:61:
         b0:07:61:c4:6a:d0:a5:66:72:ed:fc:41:ba:04:5f:d8:10:5d:
         54:cc:29:d1:75:d7:17:6c:1a:ee:e5:1f:56:dc:4c:26:4a:99:
         a8:b8:66:77:12:78:5a:07:af:c6:fd:0d:52:aa:d5:88:5c:db:
         02:78:84:c5:84:eb:4e:d1:3b:ff:6f:2b:a2:f3:6a:2d:ad:6c:
         21:f5:d3:b2:c6:be:eb:f8:10:d1:2b:93:84:32:52:75:77:62:
         be:b0:f2:21:4f:dd:07:08:0c:8a:7c:e5:a9:8e:ee:d6:4b:06:
         d5:73:db:f4:b4:01:f5:e2:05:7b:2f:35:fa:56:b4:3e:a0:95:
         6a:93:fb:5e:80:9c:83:b2:8e:75:1f:76:f2:00:aa:9c:6a:a0:
         10:97:a8:db:ca:34:ba:cf:6c:29:f5:c9:11:09:66:78:36:e0:
         c8:5b:ce:dd:d0:6d:63:b4:e0:56:6c:61:df:b0:7c:73:92:ae:
         7d:84:43:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:18:48 2026 by rpki-client