Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
File:                     zE4rrFHZy3KbGnVijua0ycHp_8g.mft (raw, json)
Hash identifier:          s3TiU17dbjvN/7Ow/Au+dERcjxqZyFrpDuSPnPictoE=
Subject key identifier:   8D:46:1B:82:76:C6:A4:8A:61:A4:00:1B:8D:F2:AB:73:13:25:D6:7C
Authority key identifier: CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8
Certificate issuer:       /CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
Certificate serial:       019EDD66016122104744AAE4018BEE9CA8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
Manifest number:          0514
Signing time:             Fri 19 Jun 2026 01:01:50 +0000
Manifest this update:     Fri 19 Jun 2026 01:01:50 +0000
Manifest next update:     Sat 20 Jun 2026 01:01:50 +0000
Files and hashes:         1: CVwCEsbzumpXgEnKDDCCAaIDrYM.roa (hash: lxu8mh9bo97HPFI+56oJ6vzMl5ukNpSkTrJqrOGog30=)
                          2: zE4rrFHZy3KbGnVijua0ycHp_8g.crl (hash: LUwzcccpE9e4kvP1hD1/QdPp61ugz/82iKaPYHZYrCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Jun 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dd:66:01:61:22:10:47:44:aa:e4:01:8b:ee:9c:a8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4e2bac51d9cb729b1a75628ee6b4c9c1e9ffc8
        Validity
            Not Before: Jun 19 01:01:50 2026 GMT
            Not After : Jun 20 01:01:50 2026 GMT
        Subject: CN=8d461b8276c6a48a61a4001b8df2ab731325d67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:34:26:25:bb:e6:50:dc:b5:d7:b1:19:11:3d:
                    88:95:9c:2c:7a:92:e6:1e:51:b0:6a:e6:e7:e9:24:
                    c0:90:d9:f1:f7:f2:a5:5a:5f:43:38:f4:06:c6:4d:
                    65:db:53:06:b6:93:e2:2f:84:74:72:3b:da:f0:2a:
                    af:74:25:3d:f1:66:64:a4:06:2f:ef:d7:67:6c:19:
                    ee:88:00:35:28:29:9c:f3:3f:37:0f:f0:68:8e:16:
                    9b:ae:c5:26:38:92:c4:03:cd:3e:17:7c:c7:bb:c4:
                    c0:9d:64:da:27:0b:75:70:75:44:91:53:6a:98:fb:
                    ca:aa:05:c1:3b:3c:8f:4d:1d:74:ef:db:52:e9:b4:
                    50:e4:80:9c:61:00:9c:fd:f0:a0:01:fa:84:12:2f:
                    db:1c:80:47:a0:1e:43:b0:75:bc:36:84:18:e3:9d:
                    b4:b3:40:2b:e9:da:46:4d:09:d8:82:a7:87:58:df:
                    67:ce:67:8c:61:2f:4c:c4:6f:99:00:9a:96:f8:c1:
                    90:e9:60:17:70:28:e9:ef:cf:21:fb:29:be:d0:92:
                    30:7e:00:85:ae:5d:5f:9c:8b:54:02:aa:40:06:e3:
                    fc:9b:1b:cc:8d:6a:a0:fa:37:0b:dd:e9:2c:90:6f:
                    f6:3a:f3:10:6f:76:b9:39:b0:e0:0e:69:ee:0e:ec:
                    b9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:46:1B:82:76:C6:A4:8A:61:A4:00:1B:8D:F2:AB:73:13:25:D6:7C
            X509v3 Authority Key Identifier:
                keyid:CC:4E:2B:AC:51:D9:CB:72:9B:1A:75:62:8E:E6:B4:C9:C1:E9:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE4rrFHZy3KbGnVijua0ycHp_8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a58803-24e7-46cf-b244-9da7887f6a2f/1/zE4rrFHZy3KbGnVijua0ycHp_8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:30:7d:51:87:24:27:b8:3b:b9:35:70:21:7d:ab:80:df:31:
         4d:a3:54:b0:d1:78:c3:c0:0e:ec:37:86:73:20:ec:c5:a0:f0:
         5c:9a:f7:12:b5:92:c5:c6:17:f9:13:80:23:ee:32:43:e4:de:
         fd:93:c4:9e:54:a5:69:19:ec:44:3e:c7:e3:26:48:b4:3b:82:
         74:db:a5:64:a3:9f:41:10:95:29:e5:95:5a:98:d6:9e:91:f5:
         79:89:66:75:ba:46:1e:b2:d8:14:21:bf:57:08:07:3d:88:4d:
         41:6e:45:b1:8e:ae:67:3c:7d:25:54:ec:3a:3f:4a:3b:82:45:
         e2:a7:bb:42:20:bc:b3:00:f2:fa:7e:c0:1e:2c:99:bf:ac:f1:
         ca:68:71:07:c6:6a:60:bc:47:2a:17:ee:a3:34:c3:6f:a3:94:
         f9:ad:d9:ed:2d:ec:9b:7f:40:95:27:2b:87:02:91:63:8c:9c:
         70:93:57:10:2c:d8:a9:fe:58:b0:f5:3f:c2:28:1a:82:73:d7:
         82:2a:cd:37:35:af:a8:29:47:ae:ea:e0:4b:35:9d:9b:9e:b2:
         b6:d9:d2:db:d0:38:b0:d0:4c:11:3f:49:d4:3d:f2:84:86:4d:
         b8:cb:d8:b4:65:9f:b0:2d:96:4a:6b:b3:9a:72:b5:16:55:a0:
         96:d0:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:38:29 2026 by rpki-client