Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          afaGA2f6BWfzUC0Ai54tdpHjI73W2bWWzrep6hdD7Iw=
Subject key identifier:   69:76:38:7A:56:9D:85:F2:68:95:40:98:93:F5:E1:C8:D7:63:9C:50
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       019F190CFC2C7C9A4B7C545AF49071632C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          17A4
Signing time:             Tue 30 Jun 2026 15:01:49 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:49 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:49 +0000
Files and hashes:         1: K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa (hash: 4pub90rA78k1OuNqh4u/EQwhdsIyW78nZyVBnumMV8E=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: 3Q6XtKWYEJ0fXBJ9KWPhueFR/JXjFQl0hsuWeUpPP0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:fc:2c:7c:9a:4b:7c:54:5a:f4:90:71:63:2c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: Jun 30 15:01:49 2026 GMT
            Not After : Jul  1 15:01:49 2026 GMT
        Subject: CN=6976387a569d85f26895409893f5e1c8d7639c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:74:c7:1d:90:28:0d:52:d7:28:e7:57:73:d1:
                    38:69:83:08:86:ef:39:12:90:1b:96:0d:fa:46:ba:
                    b1:4a:c0:1a:0a:ec:85:cd:e8:a4:b7:75:15:55:e4:
                    b5:fa:8c:a7:1a:fd:39:44:9c:d6:db:63:73:27:90:
                    62:e1:59:21:49:96:c5:ec:32:ef:cd:c5:9a:ec:cc:
                    b3:e6:d7:41:77:9a:c9:ac:22:01:28:c4:fb:29:db:
                    f6:a5:ea:5f:e0:76:2f:2b:93:86:74:7b:96:23:9e:
                    9d:5d:be:b1:02:fc:56:3a:69:85:d6:b1:83:69:a3:
                    9e:d6:5a:b0:85:91:69:a7:59:0d:47:c5:0f:bb:9f:
                    a6:aa:5a:a8:62:53:95:a2:0f:26:98:1f:dd:83:e2:
                    ec:4d:05:ef:3b:e8:19:54:d3:4b:6a:ff:1e:0c:31:
                    41:4e:38:8e:4f:0b:43:43:b0:84:cf:1c:ca:51:05:
                    61:84:79:2b:be:91:90:86:ec:ea:8d:46:02:f8:bf:
                    60:70:90:f9:db:da:1c:e5:4d:58:e9:e3:32:40:88:
                    43:20:e1:1f:64:86:52:51:e1:39:eb:9f:72:3e:1d:
                    c2:75:a2:54:30:87:f6:56:aa:d7:b5:c5:b5:af:74:
                    df:7f:5c:f1:ae:79:82:b7:9c:1e:bf:a4:84:4f:7a:
                    24:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:76:38:7A:56:9D:85:F2:68:95:40:98:93:F5:E1:C8:D7:63:9C:50
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ab:63:83:18:01:62:22:5f:5b:d0:26:5b:aa:62:ab:dc:2d:
         e6:89:e3:c2:ce:8a:56:12:40:d1:74:b8:f5:b4:92:4d:66:5c:
         55:15:76:51:6c:01:f0:ba:12:6e:9c:c6:df:56:cd:a6:c3:cd:
         57:af:ba:43:15:8c:ef:0b:47:57:45:5b:86:e5:e7:b1:e4:cf:
         4f:40:c9:63:1c:06:58:2f:7d:69:8e:7c:d7:62:54:99:ff:d0:
         21:ca:16:35:5d:2e:f3:6a:06:9f:72:51:fd:d4:9c:24:c7:54:
         71:fe:b5:2c:75:6d:79:36:a0:8b:61:eb:47:77:f1:8f:e2:92:
         f3:c5:1a:72:39:a1:3e:7b:ff:5f:12:dc:d4:18:0b:d9:cd:01:
         72:4e:24:3b:8e:0b:c1:0f:d2:1c:18:5d:5e:72:5d:69:2a:13:
         1e:72:40:31:b0:91:77:2a:57:fb:93:56:8e:d0:81:40:83:4d:
         e4:1a:9c:ac:d3:12:7a:7e:64:68:fb:b7:dd:eb:70:a5:98:9a:
         7e:f9:d2:26:4f:d5:68:41:43:2c:7c:3f:cd:4f:cb:7b:1b:e2:
         46:8d:c4:4b:13:aa:4e:72:fc:f8:9a:2b:aa:33:34:13:be:fc:
         ab:21:26:6e:39:38:40:13:82:72:34:26:3e:6d:40:a2:c5:67:
         32:1c:9f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:57 2026 by rpki-client