Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File:                     7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier:          zlDGxBCSxtoM+ZkukCAsWRmjNjAdcQK2jin2HuRwASc=
Subject key identifier:   15:00:9F:F1:F5:B0:18:C2:E3:51:CA:30:80:F9:D0:9D:AF:57:CD:B1
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer:       /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial:       019EB5E998ABCB13B458E3EF6D09CE8ABF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number:          1963
Signing time:             Thu 11 Jun 2026 09:00:45 +0000
Manifest this update:     Thu 11 Jun 2026 09:00:45 +0000
Manifest next update:     Fri 12 Jun 2026 09:00:45 +0000
Files and hashes:         1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: DcRQ8kDAnkuDBwgIoBowHyouitRMn1AYziWe+68HWGQ=)
                          2: Q7NY4EuKh73yFJKmMgChWTXBirE.roa (hash: 9Iy6hZU4K15U+TrOsDJ5y2e1gzxrEUFWmnU91YlaOBQ=)
                          3: iOS5vBgglGKoAyIuTlk00yBupTw.roa (hash: fNX0sG9X1/c+S73jxlwNV//c2xpiWXgbC9SCAgMtlMM=)
                          4: kC0XjTRvVTMNVCz_-oosCISvjVg.roa (hash: J4jOxS7kdGhXEFl4JYTJOpbh2muE4HF0FfSXnK3e23s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 09:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:e9:98:ab:cb:13:b4:58:e3:ef:6d:09:ce:8a:bf:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
        Validity
            Not Before: Jun 11 09:00:45 2026 GMT
            Not After : Jun 12 09:00:45 2026 GMT
        Subject: CN=15009ff1f5b018c2e351ca3080f9d09daf57cdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:0b:95:03:a6:e0:66:76:06:75:ab:3b:d2:
                    fc:67:dc:dc:30:1b:2d:e0:80:9a:63:3f:81:cc:22:
                    77:75:85:0d:01:f4:10:a7:cc:63:0b:13:59:52:31:
                    ba:40:cf:f5:8e:d0:82:d1:34:ac:71:54:e1:6d:b2:
                    c3:01:1c:e3:f7:54:9f:e9:33:30:eb:17:80:7b:b2:
                    2f:02:ca:55:af:4b:9a:9a:da:fd:71:26:f0:a9:05:
                    8f:ff:0b:7d:1d:61:1e:f7:22:41:9c:eb:94:96:49:
                    ac:06:3f:8b:af:ad:c3:4e:9c:04:68:76:00:44:ab:
                    e3:3f:20:9b:73:9b:8f:3a:c2:e5:ce:75:72:ae:e8:
                    03:ea:6b:84:27:0f:a3:5f:bd:31:08:7a:8f:5d:ed:
                    14:4c:5a:60:12:93:1e:df:8e:f5:af:65:22:9e:4e:
                    9c:3a:99:39:50:52:a1:2b:dd:05:83:54:4e:a3:34:
                    4e:ca:a1:95:ac:73:68:87:ab:db:0b:cf:9f:c1:f2:
                    c5:e6:81:a0:1a:88:ca:59:76:92:2e:6c:80:41:c1:
                    d7:f9:02:3d:11:ac:de:0b:d0:f7:a4:51:9d:97:b1:
                    5f:1c:1a:31:5a:87:37:f0:39:c0:4f:89:10:7f:ca:
                    7f:15:4b:97:ea:73:08:83:3d:12:4e:99:8a:c0:d2:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:00:9F:F1:F5:B0:18:C2:E3:51:CA:30:80:F9:D0:9D:AF:57:CD:B1
            X509v3 Authority Key Identifier:
                keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b2:89:6d:95:75:d2:9b:01:83:b6:de:ea:e6:d0:cc:60:a8:
         26:2e:69:15:e9:65:03:9d:c0:1d:9b:bb:c7:63:44:60:79:a1:
         a6:e8:ee:84:b8:b4:24:95:ff:e7:3a:d9:db:48:4f:91:19:5b:
         e0:6e:04:44:a3:7f:a3:9a:7d:7a:8d:24:ab:68:c0:88:cd:da:
         9d:78:44:4a:71:a7:95:0f:66:f2:8c:df:21:e4:be:0c:1d:da:
         70:84:86:9c:f4:a2:57:7e:27:f5:87:88:53:83:b9:53:a8:cc:
         b9:a9:f8:e0:81:1e:0b:1b:e1:ae:72:83:0d:f5:93:6d:e6:58:
         5d:1b:bf:da:3b:66:e5:9a:be:47:bf:c6:db:cb:f2:b4:dc:d8:
         bc:d9:ee:75:0a:50:63:e3:f5:1d:70:41:da:30:8a:32:26:52:
         06:63:9c:97:4b:6c:7f:e4:a5:52:01:c3:0e:bc:f2:be:93:dc:
         91:30:8f:1b:41:ea:6a:5c:e5:54:cc:34:94:a3:64:41:74:69:
         1c:fd:30:65:7d:2b:6a:6a:46:6e:68:d4:9a:5e:90:6c:15:11:
         46:81:0d:88:5b:55:ad:e1:af:9b:97:92:d8:dc:5d:f1:92:6f:
         5c:e8:1b:3d:5d:13:e7:bb:b9:12:2a:1a:1a:3e:93:02:18:db:
         7a:3b:d2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:48:59 2026 by rpki-client