Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File:                     CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier:          e10euDjZM4sAo7PSxgzHtc2XXZIPXJZQbfHjFK38sj8=
Subject key identifier:   3A:82:79:7B:30:5E:09:84:60:1D:C2:28:E4:F1:0C:99:A0:70:BE:C3
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer:       /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial:       019F1A1FC9881B26A7540A737331456DA5FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number:          1919
Signing time:             Tue 30 Jun 2026 20:01:58 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:58 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:58 +0000
Files and hashes:         1: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: 4YBZa7gvEr6H6m5wVd42yjybF7dsQBs+IMk3iG8NWBk=)
                          2: utqV7JvD2fPW5q4tE2tywy7q_gU.roa (hash: rBBPe7YgsDv+7/FRm135TSdCTknOZAtf1EPjWsG38hY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:c9:88:1b:26:a7:54:0a:73:73:31:45:6d:a5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
        Validity
            Not Before: Jun 30 20:01:58 2026 GMT
            Not After : Jul  1 20:01:58 2026 GMT
        Subject: CN=3a82797b305e0984601dc228e4f10c99a070bec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bc:f7:63:26:49:59:3d:5b:e2:cd:36:81:10:
                    6c:ad:55:f5:14:77:08:4c:93:e9:de:5d:23:61:25:
                    97:a8:e9:b5:b0:b4:a7:ae:e8:88:dd:b4:4b:aa:a7:
                    bf:3f:49:20:ff:b6:e8:28:c0:53:78:16:a0:0a:d3:
                    e9:1e:dc:f8:32:70:2f:1d:b4:8c:e7:e8:4e:ab:65:
                    ed:fd:07:31:4a:22:0e:12:ca:c6:4e:74:ef:a5:0f:
                    07:5e:01:e0:a3:ce:e4:41:b6:01:4b:ce:8a:dd:fa:
                    3e:e1:b8:51:80:55:ab:4c:ee:75:30:b3:ff:68:52:
                    2a:66:0b:f3:5b:2f:aa:a9:8f:bd:f6:15:01:a1:82:
                    fc:5a:08:27:42:05:a8:0e:76:e8:61:ef:33:1c:7d:
                    f4:9e:66:c1:4d:43:4e:d7:7c:52:4d:c4:0c:cd:87:
                    66:bd:fd:81:63:f2:d3:fd:ff:44:ad:d7:15:25:18:
                    35:e6:a6:f5:a8:ae:68:82:1b:16:d5:24:35:67:44:
                    61:0a:ba:af:67:26:d9:98:a7:3e:02:12:eb:56:00:
                    1c:bb:8c:4f:14:65:94:c2:44:1e:5d:a0:a7:0a:d8:
                    9d:3d:85:76:d4:35:5a:d9:2d:7a:f7:45:41:82:46:
                    2e:c2:d9:90:24:d5:d2:53:c3:2b:2a:99:50:37:49:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:82:79:7B:30:5E:09:84:60:1D:C2:28:E4:F1:0C:99:A0:70:BE:C3
            X509v3 Authority Key Identifier:
                keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:8f:a1:16:29:d2:8f:e4:e1:df:5b:07:45:93:a3:06:0a:9b:
         a1:4f:54:0d:0b:00:97:84:27:ad:b3:4e:d0:87:0d:96:16:b1:
         7b:58:e7:8c:1f:4d:81:6e:4b:29:5f:95:0a:47:3a:b2:37:f9:
         0a:54:c3:07:47:3d:ae:4e:81:fd:c2:da:0a:b3:98:9a:f0:b4:
         ef:eb:33:55:55:17:79:e7:91:c3:54:65:70:39:83:58:cf:1d:
         ad:b6:25:43:9b:81:d7:f0:b4:24:f7:61:4f:7d:5b:bf:bf:d8:
         d3:29:fb:d5:c3:3f:b9:dd:73:45:c9:a7:61:e3:9f:99:63:56:
         60:55:24:6b:e6:2e:4e:03:76:bc:79:4d:1c:d4:03:1c:dc:4b:
         87:c6:56:f2:46:f8:48:a7:8e:3c:cb:5b:71:b7:53:75:11:3e:
         6f:19:69:fa:52:45:bd:69:56:df:9e:57:0a:73:41:fa:59:40:
         42:34:4e:c5:9e:7a:89:85:89:d2:7b:bb:49:39:d2:c1:fa:fb:
         f2:b2:92:61:e5:50:61:bb:db:34:8d:cd:32:ee:42:68:d2:96:
         47:53:60:bf:d5:b4:a4:a8:ae:e4:93:00:93:55:ad:d8:1c:cd:
         ea:aa:16:86:e1:bd:2f:0c:a1:bb:45:57:95:0c:b6:ce:44:81:
         df:c5:ef:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:43:11 2026 by rpki-client