Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
File:                     zMR43ZzNYWL4JIisb8UMIdNp8qA.mft (raw, json)
Hash identifier:          LDBS6SYSWDtvaTWFKQezyj5Jx8KLNZ4gOn/YAKv0Jys=
Subject key identifier:   B0:F2:90:E9:EC:5D:ED:41:2C:DE:3A:6D:02:EF:AD:FD:D3:CF:2C:B1
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       019EE1AFD4952AA99B4CB65CA258BAA84F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
Manifest number:          1976
Signing time:             Fri 19 Jun 2026 21:00:57 +0000
Manifest this update:     Fri 19 Jun 2026 21:00:57 +0000
Manifest next update:     Sat 20 Jun 2026 21:00:57 +0000
Files and hashes:         1: 7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (hash: LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=)
                          2: Aom3Kxh_ZfDKRkP48Wo8nXkLNo0.roa (hash: KpxhStVMF2wImp1UC0ve4GmaBPQ/XlCf8ect0VpLF0I=)
                          3: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (hash: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg=)
                          4: I-GxtlJhzGYYRg8Wgfp9tQaL5Ag.roa (hash: JBs1U9vJlSB2FdEOWcBpaJo3IbbOgjp9v20dwFHbjXo=)
                          5: I4kWLJQcJIN4yvOhIUBxDHfcBXY.roa (hash: FOUTe4+/Wcl97bGV2vBsOsKmLc6qFDjUlYthAxSgRb4=)
                          6: JnUH1sslDBZ7lrgWYQqW6np7d2o.roa (hash: KaaZsj+qH9qEx82FJor1KbhmmMbYUaSEVs/hy4FDH5w=)
                          7: Ro8LRBlcuDbCiK_y93exT9nN0Eo.roa (hash: QtMlmeOF9Qrugbq+UIrG5kQoEulUbPI2vyELAcoz11Y=)
                          8: ZM7IXq1aVoF0HyrEjDEjF1ACgTU.roa (hash: e4ID0eKCg4EYXOel0bb4GNxbGHMhnw/HXCfepegWgN4=)
                          9: iDjssrdC0F5mx4tgjWxfoS4pCmA.roa (hash: YIXLFZ5HUqpRsZLVA3j60nXxyiZGaGAkhiCCJd+/5OE=)
                          10: kiAttdnigrAzCEAY7KtA_Ptxn70.roa (hash: EUQsR4w7EieqixHcTYy9ql09+zYzH1DmFw+qVviBPa8=)
                          11: l85mqhkuv7xdnX1yM97W1ykxfdU.roa (hash: btZjRqpdMDGd0trKva0fZ2+uBjhpzizkMnsbZWSCXS8=)
                          12: wU7UXJTytHy3PiMHcD7sGscj8UU.roa (hash: +SsUnX48TKNad5n7G2zrkmhLQEecIJqG1W5xpOPLtwE=)
                          13: zMR43ZzNYWL4JIisb8UMIdNp8qA.crl (hash: aWHsYyb3hMsE+2qg5J7OaE8qTXi3Wz8GHFWivT0giU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Jun 2026 21:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e1:af:d4:95:2a:a9:9b:4c:b6:5c:a2:58:ba:a8:4f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: Jun 19 21:00:57 2026 GMT
            Not After : Jun 20 21:00:57 2026 GMT
        Subject: CN=b0f290e9ec5ded412cde3a6d02efadfdd3cf2cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:41:8f:b2:f9:40:63:04:58:a4:9e:28:72:42:
                    e8:10:4c:b4:6e:70:02:40:74:de:db:82:a2:2c:3c:
                    df:5e:1c:d7:fb:9f:ba:4b:a3:f1:d1:86:53:89:e5:
                    de:b5:e9:ed:8a:76:84:06:d8:7f:b3:24:33:24:19:
                    04:de:c3:be:98:97:97:7a:dd:b7:e5:f0:ad:7f:a0:
                    6c:02:d2:4c:16:6e:d9:84:64:54:e0:50:00:60:a2:
                    28:fd:f3:09:51:cf:92:38:eb:79:84:94:92:5b:17:
                    d9:3c:3c:41:c7:eb:1a:36:27:5f:b1:4e:ce:05:c9:
                    6c:51:a6:e7:e6:7c:20:65:04:0b:d8:e6:2c:0b:59:
                    12:46:e0:08:d2:55:51:4f:2d:87:93:01:cb:f1:7e:
                    00:97:b4:b1:89:dc:f0:4d:19:8d:a9:39:e7:53:07:
                    9b:bf:f8:4c:7f:07:e7:1a:39:90:a8:81:52:37:b9:
                    e6:07:43:ea:09:ae:c2:b6:a4:94:ca:c6:b7:ed:c5:
                    df:95:a8:04:d2:fc:0c:7d:f9:0a:ea:46:16:07:73:
                    2e:06:7b:40:92:1e:49:b0:fb:61:16:39:f6:25:2d:
                    bb:44:e3:5d:0f:bb:97:19:fc:58:57:20:6a:2a:d6:
                    0d:e7:af:cb:b5:42:d2:d9:76:71:3c:95:99:bb:d9:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F2:90:E9:EC:5D:ED:41:2C:DE:3A:6D:02:EF:AD:FD:D3:CF:2C:B1
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:47:8d:f8:b3:bd:c0:21:05:42:35:38:b1:dd:0d:08:5d:f1:
         8b:d4:25:82:ca:1d:8a:e4:c4:76:60:29:f9:54:6e:95:0e:33:
         db:de:6f:d3:91:e4:8a:02:d8:7e:c0:b9:26:3a:58:56:28:55:
         d1:7a:47:10:14:5f:b4:3a:43:a3:2c:c7:12:56:0b:c3:8b:55:
         dd:88:05:15:de:c4:9e:f1:ca:0f:be:42:c9:34:d5:d9:1a:57:
         3d:5c:36:18:2f:e3:0c:30:35:3c:a4:99:4f:81:d9:b2:89:e4:
         0e:f6:7d:07:a6:42:0d:c8:52:01:55:e1:de:60:6b:1e:e6:31:
         2e:5c:3e:db:92:27:a3:2a:ef:68:fd:77:a3:e8:78:22:79:fc:
         1d:7e:03:9a:99:ff:af:54:1f:a2:0a:c7:7a:6b:a1:3a:a8:2d:
         af:96:4d:a4:67:a2:d0:b1:fb:30:f9:3c:6a:82:a6:60:03:4a:
         cf:d9:0e:1f:a0:f8:36:29:07:08:5f:eb:7f:f0:d1:47:da:b4:
         af:c2:ef:50:c9:45:64:a0:01:5e:4b:02:48:8e:a4:da:a5:0b:
         5b:29:f3:fc:16:d5:51:58:1c:08:a4:3a:8f:ec:61:99:f2:a0:
         a1:3a:f1:1b:51:71:03:72:c1:a4:3a:df:c4:ef:85:17:fa:6d:
         1f:14:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 07:26:46 2026 by rpki-client