Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
File:                     ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json)
Hash identifier:          bQ2FbPkWU5rF5QeJ5xYY/rMty+Q/yET75rSS9iZgbP8=
Subject key identifier:   56:21:9B:1B:AC:7E:46:AE:66:85:A3:13:BC:9F:E8:62:42:ED:80:29
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       019EB7A11E09C972642078885E121B99BDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
Manifest number:          09A1
Signing time:             Thu 11 Jun 2026 17:00:49 +0000
Manifest this update:     Thu 11 Jun 2026 17:00:49 +0000
Manifest next update:     Fri 12 Jun 2026 17:00:49 +0000
Files and hashes:         1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=)
                          2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=)
                          3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: 5ZkNvB3exxk5mP1tSp8xSwYCGdspR6HZVXYMlLV7Fo0=)
                          4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=)
                          5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=)
                          6: DC-2va12O2p4wJaztsxQYqxlteI.roa (hash: 8DuSeuFCejqmMZ/sp4dL3rLoQsC1vmmd0qUYceaaN1Y=)
                          7: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=)
                          8: GXpP16JP0Mjym_u_vszjldIXucM.roa (hash: 0GFGujZKcR3Ga+pFC/exC5L1CnjeKo6DgEs39y2hAc4=)
                          9: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=)
                          10: QxRT0q4FzTnTcacN8tWvzsCAarc.roa (hash: XiEdwKLVvGeQdfVFaF47mebbaJXtp25EOB5RwY48keA=)
                          11: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=)
                          12: SyWHbYOnHu_cvDaajuYM-To7M1w.roa (hash: YSRENKcj3fhKWRCWRTPdwxBLbJ6LeYaoc5YN/u+MBoM=)
                          13: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=)
                          14: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=)
                          15: _Hrgg9TwnO9PoE-2Cm9MNkAYl0w.roa (hash: bu/cyj5EwB3TDiwyIVSQeElzT+joOr0r21e4GEpp8jI=)
                          16: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=)
                          17: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=)
                          18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=)
                          19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 17:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:a1:1e:09:c9:72:64:20:78:88:5e:12:1b:99:bd:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Jun 11 17:00:49 2026 GMT
            Not After : Jun 12 17:00:49 2026 GMT
        Subject: CN=56219b1bac7e46ae6685a313bc9fe86242ed8029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:fd:79:89:32:7f:82:31:2d:75:3f:9c:f5:
                    52:c0:43:e0:ef:fc:19:b7:92:05:cb:09:48:9c:d4:
                    b4:69:62:5d:bc:cb:48:3e:f7:c1:e3:69:1e:f4:da:
                    99:52:41:7c:1a:5c:4e:aa:d1:9f:d3:23:a9:cc:e9:
                    ec:09:1b:aa:8c:f6:24:ec:eb:75:87:28:55:29:0e:
                    25:67:11:84:6d:5e:d9:30:69:7a:34:77:de:88:35:
                    c7:8a:6b:c8:b6:05:f4:43:55:ba:3f:ba:5f:fd:28:
                    50:76:28:40:bf:42:f8:74:4d:a3:56:63:75:0d:b3:
                    ad:e9:18:3a:07:b0:3d:9f:7b:17:dd:29:07:13:cb:
                    66:f4:a6:6f:be:e9:1a:ba:6f:02:25:d0:8d:da:13:
                    2b:4f:bd:06:a8:11:b7:c3:17:1c:18:af:a5:9d:c4:
                    9b:21:3e:0e:82:63:4d:1b:6b:0c:a2:f7:b6:01:1c:
                    dd:b0:47:27:dc:2a:be:40:c9:9d:ac:73:79:34:5b:
                    12:62:28:7b:9a:bd:e3:36:8b:61:48:c1:93:e6:a5:
                    80:87:4f:ff:74:eb:b5:d6:eb:a4:8b:e3:5e:a9:d3:
                    b6:46:37:a4:91:40:3d:b8:f9:bf:0c:11:13:c3:6f:
                    e6:cb:15:87:d0:21:8c:77:4f:0a:9c:7e:37:a1:d4:
                    4c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:9B:1B:AC:7E:46:AE:66:85:A3:13:BC:9F:E8:62:42:ED:80:29
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f6:7f:ed:a3:3c:e6:bf:86:6b:d8:8f:be:0e:00:a2:3b:e6:
         63:c8:b0:ea:1a:49:2f:8c:17:c9:80:86:b8:90:9b:86:45:09:
         cf:d0:b1:c6:50:81:cd:61:20:69:62:34:ce:0a:6e:04:24:ea:
         0e:4a:8e:f5:11:10:61:72:10:3f:7b:79:8d:6f:ba:43:ac:0d:
         9d:a9:bb:cd:2a:ca:2f:1f:da:1a:5f:4c:05:c1:fb:7b:66:ff:
         46:dd:49:21:3f:17:27:f3:3b:8a:3a:03:37:61:cb:9c:f0:ca:
         8b:98:61:51:9a:ea:d9:24:7a:77:19:a9:65:e5:b2:08:32:95:
         88:76:3f:80:59:71:6f:12:69:a0:b4:c2:37:ee:94:dc:fb:17:
         bb:4d:60:75:30:7d:06:95:9f:5e:70:ef:2d:d4:9c:43:cb:1b:
         40:82:11:7f:b9:cb:db:b4:19:19:9f:bb:e6:af:34:a2:cd:13:
         0d:90:87:66:48:28:7e:c0:0c:5e:91:19:8f:b0:a0:2e:56:56:
         82:4a:d6:55:4b:18:67:11:16:f1:14:f1:de:b5:9a:e3:f5:0a:
         85:7d:74:60:c4:cb:5b:de:ad:3c:76:52:0d:46:a9:50:3a:46:
         24:ed:ed:9c:75:b1:b6:30:db:f2:12:74:d7:b7:3b:14:c2:c1:
         22:6d:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:29:53 2026 by rpki-client