Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
File:                     dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json)
Hash identifier:          8l0iUHVAE/6aRLMuT3Z0A9cHtI+KCjtQae3uBP6b4pM=
Subject key identifier:   E0:C1:35:82:88:61:35:05:A2:8E:62:AD:6F:AB:75:6D:71:AF:75:6F
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Certificate issuer:       /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial:       019F19B0E0E7B89A8701954B2FF4D7B7EE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
Manifest number:          1962
Signing time:             Tue 30 Jun 2026 18:00:49 +0000
Manifest this update:     Tue 30 Jun 2026 18:00:49 +0000
Manifest next update:     Wed 01 Jul 2026 18:00:49 +0000
Files and hashes:         1: 7l9ngUq8Wk1AjbqW9RJtGIRz3P4.roa (hash: EHK3o5AqxXjYT44qxa9/0h4L/zP53EV+yGtFIqeqjtQ=)
                          2: 9Ftcg5opUvG1bGf780iCbGd9Bfs.roa (hash: /yd9u12GLW2BYS7dVxTP/I+54jm43+QiQyqtvV7hubM=)
                          3: L37Z83_zZxTwH3gbOp3Zs8sgSt0.roa (hash: mPV6TmSuIRy2KEqw8msro5qtNxgJ7ehCc09de6n7niU=)
                          4: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: cVX+/1po0YLBObSaLMeWdO1LaJHJ+12AU7xaPAcsVDI=)
                          5: mnQ852pJGHTJ3gdHhsT3w0XU52I.roa (hash: /QQxbKMKoPKhGn5snK4cxLtXKIMo7NomIE16wDtOK0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b0:e0:e7:b8:9a:87:01:95:4b:2f:f4:d7:b7:ee:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
        Validity
            Not Before: Jun 30 18:00:49 2026 GMT
            Not After : Jul  1 18:00:49 2026 GMT
        Subject: CN=e0c1358288613505a28e62ad6fab756d71af756f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:57:67:a3:c0:0b:c9:fd:32:4e:07:e0:d2:
                    5d:f5:59:eb:31:24:ec:55:06:7e:92:c7:cc:fe:f0:
                    b4:e4:bf:2e:28:54:9b:d5:f0:80:15:ea:33:c4:35:
                    b3:1e:3e:8d:29:5f:95:79:b6:e4:ea:9a:12:d9:ab:
                    f3:b6:a5:a9:d7:27:ca:e6:61:86:e8:2a:b3:8b:10:
                    e0:a9:da:50:e6:94:e2:f3:1a:ef:db:d9:0b:db:fa:
                    de:52:dc:91:6a:b0:37:53:39:ba:13:f0:27:cc:26:
                    19:79:ad:b9:8c:aa:2e:b4:5f:02:d2:c9:37:51:6d:
                    80:51:cb:10:c4:43:39:ca:0c:00:5e:68:40:cb:41:
                    33:90:9f:32:0b:4d:f3:3d:d0:bb:f5:37:49:52:e2:
                    e8:a1:80:a8:6b:cd:ba:dc:f4:86:d5:6f:60:9c:c4:
                    75:47:0a:45:cf:9a:d7:c3:ef:f5:60:c1:b9:b4:b5:
                    6c:d9:c1:74:f8:5c:e4:07:1f:2f:b7:7a:c9:01:b1:
                    fe:c3:46:4f:a1:a6:f5:62:60:31:29:b5:35:9e:94:
                    69:fb:5b:01:a3:dc:68:4e:9c:2d:99:41:08:96:a2:
                    f5:6b:49:16:7a:c4:b0:94:39:a0:25:6b:6c:8e:1a:
                    9a:87:25:6a:32:40:17:f6:59:be:fb:87:18:98:32:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C1:35:82:88:61:35:05:A2:8E:62:AD:6F:AB:75:6D:71:AF:75:6F
            X509v3 Authority Key Identifier:
                keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:57:9a:ee:17:31:9a:28:ff:c3:9e:74:23:25:8e:0d:e8:6e:
         bc:79:1b:41:af:2c:c6:23:81:1e:d8:72:8d:cc:3c:ca:07:ed:
         45:e4:49:f3:8e:a1:c4:4d:d6:7b:af:a3:d0:c2:65:98:15:b4:
         66:f7:64:f9:ae:81:6c:6d:08:ed:8f:0e:dd:d4:50:53:57:ff:
         de:8b:c5:60:8d:fb:83:4d:fb:9d:41:e1:b7:5e:cb:64:b2:9c:
         a2:3a:59:6c:0a:41:60:83:e9:94:fa:07:10:89:ba:8a:2c:22:
         53:e9:44:7e:d5:36:80:bf:3d:5e:c4:ce:05:f7:53:02:e4:62:
         aa:fe:c3:05:f3:66:19:9e:82:62:c6:64:50:8e:96:06:c6:d7:
         e2:dd:56:c0:2a:3d:05:0b:98:c0:4f:17:27:e5:69:80:d8:12:
         71:81:5b:b3:08:ad:e1:87:b4:24:ff:4b:8a:9b:e4:b1:9e:ca:
         a5:fb:4d:62:ce:fb:70:bb:75:45:9c:1d:9e:ee:a5:c9:2b:f9:
         5d:c2:7f:45:1f:e3:2d:42:b4:c7:f2:97:e3:ca:2f:a4:1c:9b:
         47:ca:00:75:f3:d2:50:df:86:a4:32:0e:49:fc:e3:0b:f6:74:
         aa:56:36:d3:9c:d7:6b:0e:61:38:04:24:3d:1f:30:50:e7:c7:
         e0:3f:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:32:38 2026 by rpki-client