Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
File:                     bZ_0pTo9sPQyggzXN9VD-Gepctg.mft (raw, json)
Hash identifier:          iymYi+X2vJ5uJZpeo7QC5VDquLFfiFdqhVVeXusKBjo=
Subject key identifier:   6E:D6:90:56:EC:76:E6:68:81:8F:DC:C0:AA:5A:8B:B7:76:2D:02:79
Authority key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
Certificate issuer:       /CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Certificate serial:       019EB6C586EA3D501E855AB22C8A6B904E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
Manifest number:          1958
Signing time:             Thu 11 Jun 2026 13:00:58 +0000
Manifest this update:     Thu 11 Jun 2026 13:00:58 +0000
Manifest next update:     Fri 12 Jun 2026 13:00:58 +0000
Files and hashes:         1: WGGxRGnSpSQM4E5fz2l8fx0ruxM.roa (hash: zDZbumDhMR6Ghkp07YAiTeEiF3v2S77fftVITSxto9g=)
                          2: bZ_0pTo9sPQyggzXN9VD-Gepctg.crl (hash: 0HVXuXeQWc/otvSfnw1lg9J3cX/ljtkx0YpuLdTdiJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:86:ea:3d:50:1e:85:5a:b2:2c:8a:6b:90:4e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
        Validity
            Not Before: Jun 11 13:00:58 2026 GMT
            Not After : Jun 12 13:00:58 2026 GMT
        Subject: CN=6ed69056ec76e668818fdcc0aa5a8bb7762d0279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:b0:f8:16:7e:00:79:90:87:db:b6:d1:f6:
                    24:2b:b9:88:50:0b:43:a9:da:aa:d4:5a:6b:0b:99:
                    5a:06:ec:f2:d5:44:78:db:cd:20:63:4c:03:ba:72:
                    ba:42:e9:58:2a:73:ee:93:71:d1:f1:b4:87:84:64:
                    58:70:d2:6d:d9:62:92:6a:37:1f:c5:83:8b:94:f9:
                    83:f1:f7:21:55:a3:3a:e5:fd:d9:a4:5a:73:fc:85:
                    99:22:e1:9b:39:19:ac:83:8a:a0:c8:aa:c3:1d:cb:
                    0d:98:1e:6b:97:0f:b9:d0:d9:69:91:a1:56:5a:0e:
                    43:30:73:a9:3a:56:10:d0:10:9b:31:b3:3f:31:31:
                    da:68:9c:6d:b0:5f:d5:2f:a5:a4:1d:c8:a9:38:48:
                    a7:fd:d2:a0:ea:f1:bb:83:7a:e2:f3:52:76:cb:f0:
                    4a:9f:be:44:ef:bc:c9:1b:c8:67:c2:e0:97:74:04:
                    2a:ac:44:3b:8f:be:f5:dc:65:1b:a1:97:62:54:87:
                    32:13:a0:e9:ca:59:f6:6f:90:97:4d:c3:e4:99:f4:
                    76:62:a3:1b:5d:50:eb:23:ea:ef:83:53:ae:ec:a7:
                    e5:4e:cd:35:51:5c:dc:69:c9:4b:15:7f:16:61:c6:
                    43:19:c4:5f:5a:85:1c:d8:fe:88:07:e0:f0:c6:e4:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D6:90:56:EC:76:E6:68:81:8F:DC:C0:AA:5A:8B:B7:76:2D:02:79
            X509v3 Authority Key Identifier:
                keyid:6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d1:9e:11:71:6b:eb:90:29:84:c7:e1:a5:cf:54:08:4e:26:
         24:91:ec:86:e1:7b:b4:92:b8:f2:10:52:0c:95:eb:82:80:86:
         cf:33:b0:b7:a4:17:0d:dc:be:9f:69:be:06:e1:6a:00:9e:bf:
         92:73:88:8f:e6:db:f9:87:68:e4:61:6a:38:09:6b:aa:a9:53:
         7b:e4:0f:18:a5:1f:8f:3f:77:48:85:49:c2:cb:92:e5:38:99:
         10:ad:50:70:2b:1c:72:4d:2e:e9:9a:5a:91:5a:09:4e:a9:a4:
         a0:00:d0:82:cf:28:f2:cb:0d:02:30:e6:6f:99:eb:a4:06:64:
         12:7f:9c:3c:28:de:5b:96:a0:d0:19:eb:d5:47:1c:e2:fd:85:
         c1:24:a5:a9:ba:9d:15:e6:8f:84:2a:1f:bc:f9:94:e6:df:e5:
         3d:24:7d:c4:a0:e5:26:f4:60:85:09:fd:03:ec:64:98:91:b1:
         15:73:19:da:af:b9:55:b9:88:2e:6d:4b:0f:3a:d9:40:fa:38:
         c3:73:f4:1e:9d:0a:1a:20:36:d4:d0:bc:f1:f5:7f:fc:79:37:
         3f:69:b7:2b:78:cc:d6:1a:d0:42:17:e6:15:03:17:12:d2:c3:
         96:2a:87:11:50:97:7c:16:3a:2a:7b:20:e2:5a:76:ba:27:f6:
         39:fd:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:52:20 2026 by rpki-client