Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File:                     z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier:          +I/LKdUSZa1XjXufptY4XgP6wpLhGJG9l4Xk5GQjF0o=
Subject key identifier:   88:FB:FA:A8:45:4F:B5:AC:F2:D9:45:D1:26:19:32:03:0E:EA:DD:51
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer:       /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial:       019EB9C62E5779A6628DD0A4906558956A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number:          0977
Signing time:             Fri 12 Jun 2026 03:00:33 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:33 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:33 +0000
Files and hashes:         1: 9Lw22K23J7w-6XzIDg67QJLRG6o.roa (hash: ztr8UWAWB/buB6JT5GD2YfXKLhYvXE9x4n0VRU8ceQo=)
                          2: G5FnSUz31AbVLph_XF_b2V-WE4k.roa (hash: OyarEjklBShgcZGA7xw5r7NANY/GN4xIbQ4B1wFv/ow=)
                          3: RQ8xC9T79eYAnKVx9VhVrpoNTMY.roa (hash: exNJaK8lpq9kvpL01DCgkaVHl771CgqPSPw4MI32Txo=)
                          4: Uh0-hSK_XWDc2RnwMwkKmaaS-80.roa (hash: BJW5l+5BPbkG+XCltX7aXXNnUzSiJ2XCIUfhxIHiCPk=)
                          5: fU0ZyKezfFg3A0ASimWS_vDf2Ag.roa (hash: WGVPl1NHnlzzsePSOzjj+Gl8SDY0jb2m343GSbYT0V4=)
                          6: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: lThJ/ifQAHp/wy3I4iJ52tsao7vOeZCvCQloYszigMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 03:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:2e:57:79:a6:62:8d:d0:a4:90:65:58:95:6a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
        Validity
            Not Before: Jun 12 03:00:33 2026 GMT
            Not After : Jun 13 03:00:33 2026 GMT
        Subject: CN=88fbfaa8454fb5acf2d945d1261932030eeadd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:3c:68:82:f8:52:e6:2c:54:fc:c7:a6:1d:
                    b5:a8:1b:43:5a:60:ac:f1:bf:a5:ca:75:48:eb:79:
                    2d:22:17:42:3b:0b:1e:ba:cd:14:dd:c3:91:96:90:
                    96:9b:dd:4f:9f:ce:a5:64:41:ca:dd:f9:24:f5:64:
                    fb:7f:2e:59:13:ec:3a:23:6a:80:30:8f:73:a1:1c:
                    f1:fd:c2:f8:02:3e:13:17:5a:02:c5:cb:fd:c7:63:
                    56:1a:01:ae:9f:88:19:17:6f:4e:19:4e:29:e8:49:
                    47:c4:a2:74:75:65:a5:37:36:66:c9:82:36:2a:ed:
                    4b:f5:b3:02:d0:e5:d6:e8:5e:57:e2:e7:ac:4c:68:
                    64:56:8d:e9:63:4e:14:de:ab:d4:fe:8e:aa:83:f1:
                    e4:5b:f6:63:44:24:2d:53:d4:7c:bc:86:42:11:7b:
                    14:9b:d4:7b:e7:20:c6:75:40:10:b2:11:43:36:28:
                    96:80:69:84:a1:d8:ff:51:1c:fa:dd:9f:99:ea:e6:
                    ed:10:e8:7b:32:dd:e4:50:7c:fd:5f:6a:1b:27:ca:
                    0a:89:74:b0:2d:ea:1d:20:56:5c:64:2b:0d:24:2a:
                    4d:93:69:b0:36:77:58:95:10:0c:81:a4:46:0c:c4:
                    d0:d7:4b:5a:3d:f2:41:f2:1a:13:15:55:cf:7a:3a:
                    35:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FB:FA:A8:45:4F:B5:AC:F2:D9:45:D1:26:19:32:03:0E:EA:DD:51
            X509v3 Authority Key Identifier:
                keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:61:0d:a5:43:25:82:6b:85:a9:4a:92:85:c0:53:dd:9c:2a:
         2a:9e:99:67:7c:f1:74:21:b6:6a:5c:3d:63:68:87:7f:81:02:
         bd:0d:56:7e:bc:55:ef:68:4f:f7:46:bd:f2:19:e9:5c:77:31:
         64:a6:c5:49:68:87:3e:a7:7d:57:05:5a:d6:80:ad:1d:66:ea:
         8c:06:8a:f0:67:b9:ee:2e:73:6a:37:4f:25:14:fe:89:e4:a0:
         7f:ba:54:d6:53:89:f6:61:1c:94:e6:8b:a1:29:11:95:20:e3:
         9a:60:c3:a6:85:a8:4b:2c:8b:8c:62:b8:9f:a7:1d:88:69:f3:
         75:58:32:f0:e2:03:00:18:2c:ca:db:85:82:36:5d:cc:33:94:
         72:7e:77:30:aa:e4:d0:d8:5e:8a:05:36:c8:21:85:3a:4f:52:
         1c:3b:79:ee:38:c1:62:30:c6:51:75:a8:4a:ed:dd:bd:05:c8:
         04:e9:5d:3b:a7:8a:9b:1c:05:73:0a:86:87:2d:61:a1:0c:e1:
         f8:e5:d1:7c:2d:bd:91:35:9f:34:7b:cb:f1:66:cf:65:37:9a:
         40:f9:66:19:82:0f:4b:b5:aa:28:93:bb:49:f8:c1:d3:b9:47:
         b5:60:0c:85:60:27:20:44:47:53:75:b0:a7:7b:c9:fa:ee:ae:
         2c:f5:14:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:46:23 2026 by rpki-client