Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File:                     RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier:          j89Czp4Fehkiat53PzH5Ys9CzOcgMyG6z6dt63z/gWM=
Subject key identifier:   69:C2:63:16:38:00:F9:74:66:F2:FF:AD:95:49:55:E5:0D:A6:47:75
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer:       /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial:       019E9C9788F7A0ADFB6319D859783A9D2C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number:          11CE
Signing time:             Sat 06 Jun 2026 11:00:37 +0000
Manifest this update:     Sat 06 Jun 2026 11:00:37 +0000
Manifest next update:     Sun 07 Jun 2026 11:00:37 +0000
Files and hashes:         1: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: 2Q5B1mHKJGKv6TRsJPVhtNUehrnZ3KPUWUGvN/l5FjQ=)
                          2: oxM4weLdM3j7jrYJT8BJG0W0cJ4.roa (hash: JzjynEnEp0mde9J1/ZPR8Pa7VycJrBNUsALJMI999+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:97:88:f7:a0:ad:fb:63:19:d8:59:78:3a:9d:2c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
        Validity
            Not Before: Jun  6 11:00:37 2026 GMT
            Not After : Jun  7 11:00:37 2026 GMT
        Subject: CN=69c263163800f97466f2ffad954955e50da64775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:af:18:27:59:fc:ef:8d:4c:a4:88:2f:3a:
                    4a:34:92:fa:49:59:3d:2d:45:62:d5:02:5e:b9:01:
                    de:e0:6e:03:50:28:c8:c1:38:2f:6d:28:72:71:d2:
                    df:aa:8d:39:33:82:e8:48:9c:62:63:d2:c9:39:85:
                    02:bd:8c:29:14:f1:39:90:95:3e:26:18:32:7f:57:
                    cd:bc:18:be:d4:30:81:7d:d5:5f:a2:c9:6a:d5:0e:
                    42:33:77:88:9a:9f:ad:87:7b:ff:be:a5:a2:03:81:
                    97:43:34:10:91:28:79:d0:41:70:ab:22:4b:cf:27:
                    ed:64:f1:27:fc:49:32:40:e0:82:58:9c:80:ba:65:
                    41:8c:ca:59:dd:16:60:ba:2a:65:b9:88:c3:25:fb:
                    08:f0:99:d2:d3:26:2f:fb:65:2f:1d:30:6a:fc:68:
                    b2:3f:fd:2a:ed:50:a9:85:b6:dd:9b:0b:6f:3f:c7:
                    d8:0c:c1:38:3b:0c:39:b9:a0:a5:d1:a2:2d:17:37:
                    85:0c:97:62:26:40:d6:2e:02:a4:84:6c:e5:f1:d2:
                    fe:cc:2b:e7:74:63:e4:3a:69:f9:ef:b1:03:b1:44:
                    a3:b1:14:d6:54:e7:87:45:6d:bf:55:4a:13:02:18:
                    4a:2d:16:5f:45:16:87:73:46:db:45:ac:29:02:2c:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C2:63:16:38:00:F9:74:66:F2:FF:AD:95:49:55:E5:0D:A6:47:75
            X509v3 Authority Key Identifier:
                keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:57:b9:94:e2:54:a2:38:d6:8c:da:f2:3c:64:bc:26:1b:c1:
         98:8d:39:aa:df:c3:f1:e1:59:3c:ad:ea:82:3c:11:46:e1:2c:
         dd:1e:2d:9b:62:d0:e8:1a:d4:1e:36:a7:84:a0:85:48:45:2c:
         64:91:d7:45:55:f4:4f:d0:96:71:af:b9:c7:4b:22:ce:94:6e:
         13:8e:51:54:51:f8:12:ef:2e:9f:a9:7c:22:09:7f:de:5a:1b:
         9f:d1:0b:ec:05:0d:23:21:50:64:bc:41:d9:82:a4:be:50:ff:
         54:74:52:1c:13:19:12:06:e0:5e:89:b0:4a:5f:aa:dd:94:11:
         1a:bf:13:8a:73:97:98:61:7f:f3:1d:6e:c9:0a:97:8b:a0:cc:
         3e:1e:a6:71:b7:b0:ae:43:41:ae:b1:55:00:93:97:27:50:62:
         d2:65:b9:38:57:e2:ef:0c:3b:c2:74:ea:cd:37:e2:21:56:bd:
         b1:77:d1:97:d4:7c:07:dd:d5:8d:f7:55:c9:4f:da:b2:dc:de:
         e5:19:83:63:28:d0:2e:32:ab:b7:9f:25:f3:0b:9d:0f:33:dd:
         7f:c5:2f:17:c4:f8:20:3a:2a:04:bf:c4:82:df:37:5d:fd:1f:
         6b:0e:dd:0b:bf:c1:a2:0f:3d:af:82:b4:92:f6:e5:18:ef:56:
         d2:66:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:26:54 2026 by rpki-client