Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
File:                     z6loMZ1yqYp1lAAzi3D9xniRLeY.mft (raw, json)
Hash identifier:          3dFpyteEG1aIteer7WMvirH7Vm4DrjOgEgdFkFHzRfY=
Subject key identifier:   A5:59:2E:71:A0:8D:B8:E0:6D:20:96:56:98:94:9D:C4:80:42:46:DA
Authority key identifier: CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6
Certificate issuer:       /CN=cfa968319d72a98a759400338b70fdc678912de6
Certificate serial:       019F39A9D357962551A61C020D465671C17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
Manifest number:          199E
Signing time:             Mon 06 Jul 2026 23:00:58 +0000
Manifest this update:     Mon 06 Jul 2026 23:00:58 +0000
Manifest next update:     Tue 07 Jul 2026 23:00:58 +0000
Files and hashes:         1: 6Ep4JB6joSkE2HYaEIb1LFsZbgY.roa (hash: SqDePBtTD8XjhS8RPU2gNtHpu8bEH14qQE6MxK5aj78=)
                          2: z6loMZ1yqYp1lAAzi3D9xniRLeY.crl (hash: W+zFns4VkZqOJN4Vt5TmD1Y5lN5SXQsbGYwujl9+9Yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 20:41:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:39:a9:d3:57:96:25:51:a6:1c:02:0d:46:56:71:c1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa968319d72a98a759400338b70fdc678912de6
        Validity
            Not Before: Jul  6 23:00:58 2026 GMT
            Not After : Jul  7 23:00:58 2026 GMT
        Subject: CN=a5592e71a08db8e06d20965698949dc4804246da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:04:2b:11:6a:c0:69:bd:7a:60:99:26:94:
                    ff:f5:94:b7:21:00:f6:96:02:ff:6f:1f:de:02:4e:
                    9f:f2:93:e8:2e:b0:4a:f3:67:30:da:e0:05:90:61:
                    ca:84:f7:f0:73:86:33:b4:b1:d6:1b:a9:b2:94:d3:
                    cf:ab:2d:68:f1:d8:4a:96:56:36:40:1c:b3:e4:09:
                    6a:42:34:f4:81:e4:71:e6:e6:c1:86:58:ae:bc:15:
                    80:f9:c8:f1:b0:75:0f:6d:18:33:11:c7:63:10:2f:
                    2e:0a:c0:b0:1e:57:b7:2f:c9:e7:9a:57:4f:b6:64:
                    ac:23:40:75:b0:f6:5c:35:c2:db:e5:94:9a:25:a4:
                    6f:c2:7d:25:aa:77:49:51:8f:96:0b:13:6d:90:41:
                    6b:3f:3e:cf:c5:2c:93:82:af:f8:6f:e6:67:62:3f:
                    79:97:31:02:7d:26:ac:46:fb:e5:83:05:b8:a3:85:
                    f2:9e:cf:f3:f3:29:8d:01:a0:15:4d:ee:31:31:b1:
                    c0:c7:82:3b:65:7a:ad:b2:89:f2:7f:38:12:3b:ec:
                    c8:07:ba:79:fd:ba:f9:31:cd:a8:a3:12:b9:5a:aa:
                    33:dc:b4:e7:01:93:68:69:73:8e:4e:eb:0e:6f:10:
                    1c:58:2b:95:f8:c5:1b:87:77:4d:d9:a0:46:57:6b:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:59:2E:71:A0:8D:B8:E0:6D:20:96:56:98:94:9D:C4:80:42:46:DA
            X509v3 Authority Key Identifier:
                keyid:CF:A9:68:31:9D:72:A9:8A:75:94:00:33:8B:70:FD:C6:78:91:2D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6loMZ1yqYp1lAAzi3D9xniRLeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc616f-de9b-478e-8539-8ce51018e2e6/1/z6loMZ1yqYp1lAAzi3D9xniRLeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3d:3b:f2:40:0f:76:e6:7b:65:1a:8d:0b:08:fa:15:17:9b:
         32:46:10:a9:2f:fb:92:de:4e:55:14:a7:f0:04:80:00:0c:6c:
         db:9b:2b:38:f7:9e:01:3a:3a:1f:52:11:84:32:85:b0:10:d8:
         23:87:43:24:64:e8:c7:63:1c:e5:f8:41:23:5b:66:cd:4b:ef:
         54:30:e9:4b:d8:cd:41:63:26:11:0c:2c:a8:e2:96:28:2a:e9:
         0f:39:e8:c4:39:ed:b9:97:1e:b4:bd:ac:fd:a4:45:27:f5:36:
         89:c6:0a:9d:4f:4c:43:f2:0d:9d:b3:c0:62:ea:6f:6c:50:bb:
         e0:f3:b9:fa:39:ea:e9:6d:1a:be:c0:f0:98:15:46:0f:30:c1:
         b2:cf:a4:58:de:96:7d:e2:52:3e:5e:ef:42:d5:92:04:fc:84:
         5d:40:05:1b:46:d5:f7:67:77:ef:91:65:94:46:61:85:d7:ff:
         d6:55:e3:80:61:b7:ea:d1:fb:d6:2c:b3:e6:fd:b8:bf:60:4a:
         c2:ee:6e:b6:59:83:fc:29:33:49:35:b3:04:87:43:b6:8d:4a:
         f9:e4:d5:8c:75:92:a8:74:5e:ba:3f:56:46:20:c0:3d:79:c2:
         e7:28:71:98:f0:8f:53:ca:79:ba:0a:87:f1:17:4e:55:13:d0:
         f2:84:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 01:19:24 2026 by rpki-client