Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
File:                     pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft (raw, json)
Hash identifier:          hGOWw5yQ3bSsHshE4pxaGHqdaWY8P8eOCa5Jgq45wYI=
Subject key identifier:   CE:65:34:E7:8F:D9:62:80:03:C0:40:91:53:2C:16:FD:9D:DC:69:9E
Authority key identifier: A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC
Certificate issuer:       /CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
Certificate serial:       019F11F8396EC04C9C87345B0D4356B05BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
Manifest number:          81
Signing time:             Mon 29 Jun 2026 06:01:48 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:48 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:48 +0000
Files and hashes:         1: ZhmfZOQthLNwaXu66U6ErWqlalA.asa (hash: qf+Z2Ej6j2Id/dJp4k8hFnsz0b10rm8/N0nNZYscrA0=)
                          2: pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl (hash: mQmhgoX8WhDVH54kKmzX2GNrnO9Gs3UJOwhsN5UXPHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f8:39:6e:c0:4c:9c:87:34:5b:0d:43:56:b0:5b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45a3deea22ad70f44bdfff3daca787cfab73afc
        Validity
            Not Before: Jun 29 06:01:48 2026 GMT
            Not After : Jun 30 06:01:48 2026 GMT
        Subject: CN=ce6534e78fd9628003c04091532c16fd9ddc699e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:6f:59:88:2d:80:21:d7:79:d8:f4:fb:bd:
                    79:ce:b0:c2:90:e8:0b:b7:3f:33:01:7b:0b:23:45:
                    ef:17:cc:ad:46:75:3c:7d:2a:84:da:41:ff:49:1d:
                    82:fc:0b:6d:29:36:72:a1:fe:54:34:22:5a:93:14:
                    34:6d:ca:00:53:4d:d2:94:4c:d3:86:57:96:0e:a4:
                    73:92:82:d7:4e:22:68:40:fe:e5:32:f4:e9:5b:44:
                    f8:49:5d:d3:59:ff:77:d5:da:d1:1e:54:56:07:20:
                    9c:41:8c:22:b2:ce:83:b6:c1:df:1d:e2:fb:1f:fd:
                    2f:02:74:7e:80:99:46:17:cb:8f:d7:38:3f:18:83:
                    5c:16:16:b4:ea:1e:f4:5f:fd:13:bf:8a:09:35:ad:
                    d3:e1:ae:06:6e:18:80:90:d8:cb:45:65:6f:48:1e:
                    ff:a4:b4:dc:2b:2d:e9:5b:a5:11:39:b4:1f:88:e5:
                    e4:5f:87:ba:64:f2:4e:54:18:12:05:11:3c:ad:bb:
                    dd:2c:83:23:e3:1b:7d:1a:63:bf:8e:b2:5f:6b:d0:
                    2b:06:76:f9:14:9d:c2:38:f3:a6:d2:61:a2:f8:c6:
                    94:81:e1:e3:02:01:69:85:d8:75:d9:41:55:d0:78:
                    3f:da:c4:35:da:6a:0f:cc:b4:ba:65:3e:10:a8:75:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:65:34:E7:8F:D9:62:80:03:C0:40:91:53:2C:16:FD:9D:DC:69:9E
            X509v3 Authority Key Identifier:
                keyid:A4:5A:3D:EE:A2:2A:D7:0F:44:BD:FF:F3:DA:CA:78:7C:FA:B7:3A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFo97qIq1w9Evf_z2sp4fPq3Ovw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9a500d-9177-4241-b432-4cc28d0bd35d/1/pFo97qIq1w9Evf_z2sp4fPq3Ovw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:f2:76:f1:93:03:37:84:a9:0d:a1:0b:d9:60:fc:a4:32:
         07:9b:0b:8b:11:69:9a:99:b3:b8:de:4c:98:bc:35:4e:a3:e8:
         ff:1d:be:24:69:de:57:d5:f9:65:4e:77:1a:97:c4:5e:a8:b8:
         fe:fd:79:55:0e:3a:40:3f:ed:21:a2:63:6a:b8:76:cc:13:71:
         d9:62:6a:16:ad:34:0e:fb:3a:f5:48:c6:fe:5d:8e:a4:00:62:
         11:5b:85:dd:c6:87:27:6e:ea:fb:da:7c:57:5a:cd:94:64:57:
         c3:ae:09:8f:32:3b:56:6e:b8:79:72:4e:52:18:82:e8:51:7e:
         5a:b5:02:54:6d:f1:0e:cc:e2:ea:7f:9e:b1:98:c1:36:da:12:
         c3:58:9d:ab:03:f0:9d:35:04:b3:6c:5e:9d:eb:5a:2d:49:42:
         e0:fe:10:59:71:e6:71:fe:ba:c4:3b:2d:62:60:21:ba:23:20:
         01:f4:6f:35:25:61:d5:f5:38:4a:04:b5:2f:06:da:61:00:1c:
         44:7c:98:5b:7a:e3:a4:0b:b7:bb:85:b6:6c:c0:d7:8e:6a:fd:
         fc:8b:9b:56:d4:78:22:8b:5d:19:e5:66:20:e3:6b:6a:41:1c:
         db:b7:9e:32:00:70:68:c5:76:e2:53:34:ef:b2:58:72:82:dd:
         7b:ed:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:43:15 2026 by rpki-client